Gen Digital Inc. 10-Q

Item 4. Controls and Procedures (a) Evaluation of Disclosure Controls and Procedures The SEC defines the term “disclosure controls and procedures” to mean a company’s controls and other procedures that are designed to ensure that information required to be disclosed in the reports that it files or submits under the Exchange Act is recorded, processed, summarized, and reported, within the time periods specified in the SEC’s rules and forms. “Disclosure controls and procedures” include, without limitation, controls and procedures designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Exchange Act is accumulated and communicated to the issuer’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure. Our disclosure controls and procedures are designed to provide reasonable assurance that such information is accumulated and communicated to our management. Our management (with the participation of our Chief Executive Officer and Chief Financial Officer) has conducted an evaluation of the effectiveness 33 Table of Contents of the design and operation of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) of the Exchange Act) as of the end of the period covered by this report . Based on such evaluation, our Chief Executive Officer and our Chief Financial Officer have concluded that our disclosure controls and procedures were effective at the reasonable assurance level as of the end of the period covered by this report. (b) Changes in Internal Control over Financial Reporting There were no changes in Gen’s internal control over financial reporting or in other factors that occurred during the first quarter of fiscal 2026, except for our acquisition of MoneyLion discussed below, that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting. On April 17, 2025, we completed our acquisition of MoneyLion and are currently integrating MoneyLion into our operations and internal control processes. Pursuant to the SEC’s guidance that an assessment of a recently acquired business may be omitted from the scope of the evaluation for a period up to one year following the acquisition, the scope of our assessment of internal control over financial reporting is ongoing. We are currently assessing the control environment related to our acquisition of MoneyLion and have designed and implemented new controls as needed. MoneyLion Material Weakness A material weakness is a deficiency or a combination of deficiencies in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of a registrant’s financial statement will not be prevented or detected on a timely basis. Prior to the acquisition by Gen, MoneyLion reported an identified material weakness in its internal control over financial reporting. As a result, MoneyLion concluded that, as of December 31, 2024, its disclosure controls and procedures were not effective in providing reasonable assurance that information required to be disclosed in reports filed or submitted under the Exchange Act was recorded, processed, summarized and reported within the time periods specified by SEC rules and forms. The material weakness identified relates to MoneyLion’s Credit Builder Loan product, involving certain cash disbursements made to customer escrow accounts that were not in accordance with the product’s terms. While the related transactions were properly reflected in the financial statements and no misstatements were identified, the control deficiency could have resulted in unauthorized disbursements of cash. Accordingly, this deficiency was determined to constitute a material weakness. MoneyLion has undertaken steps to remediate the material weakness and we are evaluating the steps that have been taken under Gen’s control framework. (c) Limitations on Effectiveness of Controls Our management, including our Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal controls will prevent all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. The design of a control system also is based in part upon assumptions and judgments made by management about the likelihood of future events, and there can be no assurance that a given control will be effective under all potential future conditions. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within our company have been detected. 34 Table of Contents PART II. OTHER INFORMATION Item 1. Legal Proceedings Information with respect to this Item may be found under the heading “Litigation contingencies” in Note 18 of the Notes to the Condensed Consolidated Financial Statements in this Form 10-Q, which information is incorporated herein by reference.