One in Tech an Isaca Foundation

“The compensation committee of the Information Systems Audit and Control Association (ISACA) determines the compensation for the organization's executive director. The compensation committee of ISACA is provided with a compensation range by a compensation consultant. Ranges are calculated based on position, responsibilities, and a blend of the not-for-profit and for-profit sectors, which reflects the labor market in which ISACA competes for executive talent. The final report of the compensation consultant is accepted by the committee and the compensation philosophy, contract (if applicable) then serve as the basis for the determination of compensation, consisting of base salary, incentives, total cash compensation and benefits. Determination for executive management is made by the CEO based on the accepted compensation ranges and approved by the compensation committee. The remuneration packages are reviewed annually by the compensation committee. Because compensation is determined by a related entity of One in Tech, this question is answered "no" in accordance with the IRS instructions to Form 990.”

“Term limits have been added to the OIT bylaws. The designated Directors of OIT may only serve as a Director for a maximum of three (3) terms in total, except for the CEO of ISACA for which such limitation does not apply. Each term consists of two (2) years. Regular meetings of the Board of Directors may be held at any place within or outside the State of Delaware that has been designated from time to time by resolution of the Board. In the absence of such a designation, regular meetings shall be held at the principal office of the Corporation, or now can be designated by the Chair of the Board or the President.”

“The organization's directors are appointed by ISACA, its supported organization.”

“The organization's directors are appointed by ISACA, its supported organization.”

“The organization has no committees with authority to act on behalf of the governing body. THEREFORE, LINE 8B HAS BEEN CHECKED NO IN ACCORDANCE WITH THE INSTRUCTIONS.”

“The 2021 Form 990 for One in Tech, An ISACA Foundation (OIT) was prepared by Crowe LLP (Crowe), based upon information provided by OIT. This document summarizes the review points and availability associated with the returns. The data for the return was compiled based on information prepared for the 2021 audit, as well as other accounting records. This information was submitted to Crowe for preparation of the returns. In addition to the financial information Crowe received, Crowe had an opportunity to raise questions about governance and other issues and request additional information as needed. The narrative explanations of program accomplishments and policies were coordinated with the appropriate Directors and the members of the Leadership Team. Upon completion of the returns, several layers of review were conducted: - Initial reviews of return: The initial review of the completed return was completed by the respective staff within the Finance Department. - Senior Management review: Following the initial review, the Leadership Team including the ISACA CEO, ISACA CFO, and OIT Executive Director were provided a copy of the return for a complete review and to raise comments. Comments were forwarded to Crowe for incorporation into the return. - Board and committee review: The OIT Board of Directors were provided access to the return via Board Effect (web site) prior to its filing. Comments from these reviews were evaluated and provided to Crowe, who updated the return, if applicable.”

“One in Tech, An ISACA Foundation (OIT) has a conflict of interest policy that defines an interested person as any Director, Officer, or member of a committee with governing Board delegated power. An Independent Director is defined as described in the instructions for the IRS 990 form, or in the absence of such definition as an individual who has not in the past three years been an employee of OIT or any entity in which OIT has an interest; who does not have a significant business relationship with OIT which could impact independent decision making; who does not serve as the executive of another corporation where any of OIT's executive officers or employees serve on that corporation's compensation committee and who does not have an immediate family member who is an executive officer or employee of OIT or who holds a position that has a significant financial relationship with OIT. Such policy also directs Board members and others to keep in confidence all OIT confidential information; requires Board members and others to disclose arrangements that may propose a conflict of interest so that the Conflict of Interest Panel comprised of the Nominating & Governance Committee Chair, Board Chair and ISACA CEO may evaluate such arrangements. Further, this policy details the procedures that must be used in considering a conflict of interest, periodic reviews of any compensation arrangements and other partnerships. Potential conflicts of interest are documented and monitored each year, through (1) self-proclamations made by individual volunteers who sign the participation agreements required for participation in association boards, committees, working groups and task forces; (2) disclosure of conflicts in standard consulting agreements; and (3) disclosure by OIT employees upon hire (and annually) by review and signature of the organization's employee agreement. Consultants, volunteers, and employees are encouraged to report any conflicts that may arise throughout the year. If such instances are reported, they are dealt with at that time and based on the circumstances relating to the potential conflict.”

“The following One in Tech, an ISACA Foundation (OIT) documents are posted to the OIT website or provided upon request: participation agreement; OIT's Bylaws; OIT's Articles of Incorporation and OIT's annual report. OIT has an IRS Form 1023 which will be provided upon request. In addition, Form 990 is available upon request.”

“See narrative on Part III, Line 4a.”