Disciplinary Action Participate in Investigations Mimecast9s management shall take reasonable steps to: (i) monitor and audit compliance with this Code, including the establishment of monitoring and auditing systems that are reasonably designed to investigate and detect Mimecast9s Compliance Office coordinates conduct in violation of this Code; and (ii) when investigations of suspected violations of this Code appropriate, impose and enforce appropriate disciplinary or our other policies or procedures, or any measures for violations of this Code. Disciplinary applicable law or regulation. Mimecast Legal, measures for violations of this Code will be determined at Human Resources, Security, IT, and other functions may participate in any investigation as may be Mimecast9s sole discretion and may include, but are not necessary. Mimecasters always cooperate with limited to, counseling, oral or written warnings, probation Mimecast in any investigation. Mimecasters can or suspension with or without pay, demotions, reductions always contact our General Counsel with any in salary, termination of employment or service, and concerns around any investigation or its outcome. restitution. Mimecast9s management may periodically report to the Board of Directors of Mimecast Holding Company Limited on these compliance efforts including, without limitation, periodic reporting of alleged violations of this Code and the actions taken with respect to any such violation. ©2024 Mimecast. All Rights Reserved.

Code of Business Conduct and Ehtics - Page 29 Code of Business Conduct and Ehtics Page 28 Page 30