Other Corporate Governance Matters, Practices and Procedures
Risk Oversight
The Company believes a role of management, including the named executive officers, is to identify and manage risks confronting the Company. The Board of Directors and its committees play an integral role in the Company’s risk oversight, primarily by reviewing the processes used by management to identify and report risk and monitoring corporate actions to avoid inappropriate levels of risk. The Company’s Enterprise Risk Management (ERM) program is designed to reinforce the way the Company operates its business and reflects its culture, organizational structure, and risks.
The Co-CEOs have delegated oversight of the ERM process, including risk identification, risk impact, risk limits and mitigation strategies, to an AFG Enterprise Risk Committee (ERC) chaired by AFG’s General Counsel and also consisting of AFG’s Chief Administrative and Chief Human Resources Officer, AFG’s Chief Financial Officer, and Great American Insurance Group’s President and Chief Operating Officer, each of whom directly reports to the Co-CEOs. The ERC has designated an AFG Assistant Vice President as risk officer to oversee the day-to-day operations of the ERM program. The risk officer regularly meets with senior leaders representing significant areas from throughout the organization, including administration, operations, finance, accounting, legal, human resources, investments, information technology and information security, to assess significant risks. The risk officer works with management to identify potential events and trends that may adversely or favorably impact the Company and to manage risks to be within the Company’s risk appetite.
The ERC, the risk officer, and individual senior leader risk owners regularly monitor the top organizational risks, as well as any other significant or emerging risks that may arise during the year and consider whether to modify existing risks or elevate emerging risks. Assessments of AFG’s significant risks are completed on either a quarterly, semiannual, or annual basis. Any actual or foreseeable potential variances outside of AFG risk targets, even for reasons that are expected or accepted, are discussed with risk owners, risk monitors, and management. Significant changes in our risk profile are reviewed with the ERC and the AFG Audit Committee on a quarterly basis and with the AFG Board of Directors at least annually.
Also, due to evolving threats to corporate cybersecurity, the Board and Audit Committee receive reports from the Company’s Chief Information Security Officer (CISO) regarding cybersecurity risks and the steps management has taken to monitor and control such risks. Among the many issues discussed with the CISO in 2025 were AI-related matters, including the Company’s AI Governance Program to manage risks and promote the ethical use of AI tools and technology and AFG’s adoption of the National Institute of Standards and Technology (NIST) AI Risk Management Framework to assess and benchmark the Company’s risks. The CISO presents to the Audit Committee at least quarterly and to the Board at least annually to review and discuss the Company’s cybersecurity program.
The Company’s leadership structure and overall corporate governance framework is designed to aid the Board in its oversight of management responsibility for risk. The Audit Committee serves a key risk oversight function in carrying out its review of the Company’s financial reporting and internal reporting processes, as required by the Sarbanes-Oxley Act of 2002. Inherently, part of this review involves an evaluation of whether our financial reporting and internal reporting systems are adequately reporting the Company’s exposure to certain risks. In connection with this evaluation, the Audit Committee has, from time to time, considered whether any changes to these processes are necessary or desirable. While it has concluded that no such changes are warranted at this time, the Audit Committee will continue to monitor the Company’s financial reporting and internal reporting processes. In addition, pursuant to its charter, the Audit Committee is responsible for discussing with management the guidelines and policies related to enterprise risk assessment and risk management and assisting the Board of Directors in its oversight of the Company’s enterprise risk management process.
As more fully described in the “Compensation Discussion and Analysis” section of this proxy statement, the Compensation Committee takes an active role in overseeing risks relating to AFG’s executive compensation programs, plans and practices. Specifically, the Compensation Committee reviews the risk profile of the components of the executive compensation program, including the performance objectives and target levels used in connection with incentive awards, and considers the risks an executive officer might be incentivized to take with respect to such components with special attention given to establishing a mix among these components that does not encourage excessive risk taking.
The Corporate Governance Committee contributes to the Company’s risk oversight process by reviewing the Company’s Corporate Governance Guidelines and Board committee charters at least annually to ensure that they continue to comply with any applicable laws, regulations, and stock exchange or other listing standards, as each are subject to change from time to time. The Corporate Governance Committee also oversees the director nomination process, the overall Board reporting structure and the operations of the individual committees, in addition to advising the Board with respect to environmental and social risks.