regulation, law or the Code are reported to the Audit Committee of Valero’s board of directors, which also oversees any investigations of concerns in this area. Protecting Company Assets In addition to Company records, we must also protect Valero’s physical assets, such as computer equipment, vehicles and supplies from loss, damage, misuse or theft. Company assets should never be taken from Company facilities, sold, disposed of or given away without proper approval. Valero’s intellectual property, including inventions, trademarks, patents, copyrights, proprietary information and third-party licenses must likewise be protected. Any information created in the course of employment with Valero belongs to Valero, and your obligation to protect the Company’s proprietary and confidential information continues even after your employment ends. Information Security Keeping Valero’s business information secure strengthens our business by preserving our intellectual property and building trust among our employees, customers and business partners. We must safeguard all confidential and nonpublic information, including but not limited to trade secrets, contracts and manufacturing information, as well as customer, employee and pricing data. We must also protect all passwords, user IDs, access cards and encryption or authentication keys. Our responsibility to safeguard this information continues even after employment ends. Tom is managing a capital project and encounters a technical challenge. To seek input from his industry Q peers, he is thinking about posting his issue on a professional social media site requesting advice. Do you & see an issue with this? Yes, Tom may be disclosing confidential Company information, which is strictly forbidden and by doing so, he A could be putting the Company at a disadvantage. Tom should consult his supervisor and the Legal Department prior to posting. 15