2021 TCFD Index Task Force on Climate-Related Financial Disclosures Recommended Disclosures Answer, Cross-Reference, Omissions, and Explanations STRATEGY Describe the climate-related risks and opportunities the 2021 10-K, pp. 11-12 organization has identified over the short, medium, and NetApp does have a process for identifying, assessing, and responding to climate-related risks and opportunities. The long term. short-, medium-, and long-term time horizons are defined as 0 to 2 years, 2 to 5 years, and 5 to ten years. To determine risks and opportunities about climate change, we define substantive financial or strategic impact as impacts that could interrupt the supply chain to cause significant downtime. NetApp has identified the following risks: - current regulations such as WEEE and REACH, - emerging regulation, - technology innovations, - market risk, including supply chain oversight of our vendors' initiatives to reduce our carbon footprint, and - acute and chronic physical risks. NetApp has identified the following opportunities: - developing more energy-efficient lab and data center facilities, and - procurement of renewable energy for facilities' power source. Describe the impact of climate-related risks and NetApp's inability to deliver products to its customers would directly impact its ability to collect revenue and procure opportunities on the organization’s businesses, strategy, new orders. Extreme weather events caused by climate change (storms, droughts) could affect our supply chain. and financial planning. However, NetApp has not identified any inherent climate-related risks with the potential to have a substantive financial or strategic impact on our business. NetApp's policies and objectives help mitigate any *substantive* financial or strategic impact resulting from climate change. We believe that risks exist, but they are not substantive to us at this time. Describe the resilience of the organization’s strategy, Specific climate change-related scenario analysis are being considered to inform our business strategy in the future. taking into consideration different climate-related We anticipate using qualitative and/or quantitative climate-related scenario analysis in the next two years to inform our scenarios, including a 2°C or lower scenario. organization's strategy. We have an existing Enterprise Risk Management (EMS) system which includes a risk sub-category that focuses on climate. Our robust Business Continuity Plan ensures we have geographic resilience in our supply chain, operations, and human capital (Americas, APAC, EMEA). Our EMS provides us the framework for setting, monitoring, and continuously improving our environmental goals and objectives, helping to mitigate potential risk.