BL Companies | Employee Handbook | 2024

CYBER SECURITY POLICY This Cyber Security Policy equips employees with the knowledge and guidance needed for responsible engagement with social media, artificial intelligence and technology in general. This policy applies to all BL employees. Access Controls Access to BL Companies’ information systems shall be granted based on the role of the employee. User accounts are provided with the appropriate access and permissions in accordance with each employee’s duties and responsibilities. Multi-factor authentication (MFA) has been implemented for enhanced access security to various software and information. Incident Response Employees are required to report and address security incidents promptly. Employees must report any suspicious activity or security incidents to the IT Department immediately. Security Training & Awareness Cybersecurity training sessions are conducted for all new employees to raise awareness of security threats and best practices. Security notifications are sent throughout the year to update employees with current relevant information. Employees are responsible for reading all communications from the IT Department and following the instructions. Software BL Companies purchases and licenses the use of various computer software for business purposes and does not own the copyright to this software or its related documentation. Employees are prohibited from copying and downloading software or other program files or copyrighted documentation or online services from the internet without prior approval from the IT Department.

disciplinary action is to be taken, the respondent will be informed of the nature of the discipline and how it will be implemented. If the investigation is inconclusive or if it is determined that there has been no violation of the Affirmative Action Plan, but potentially problematic conduct may have occurred, the Director of Human Resources may recommend appropriate preventive action. Nothing in this Complaint and Resolution Procedure may prevent the complainant or the respondent from pursuing formal legal remedies or resolution through local, state or Solicitation for any cause during working time is not permitted. Employees are not permitted to distribute non-Company literature in work areas at any time during working time. Working time is defined as the time assigned for the performance of the employee’s job and does not apply to break periods and meal times. Employees are not permitted to sell chances, merchandise or otherwise solicit or distribute literature without prior approval from their Discipline Director or the Human Resources Director. Persons not employed by BL Companies are prohibited from soliciting or distributing literature on Company property or from being on Company property if their intent is to distribute literature or solicit for any cause. Socializing During Work Time Our work is generally accomplished by teams and we encourage Employee Owners to take the time to get to know each other. There are many opportunities to do that such as lunch, breaks, Company events and off hours. Employees are expected to devote their work time to work activities. Socializing is to take place in areas that do not disturb other people who are working. federal agencies or the courts. Solicitation and Distribution

18 Employee Handbook BL Companies