emerging risks and risk management activities. As part of these activities, the ERC monitors material risk exposures, endorses and reviews strategic risk management priorities, and reviews and assesses the impact of business strategies, opportunities and initiatives on our overall risk position. The ERC is supported by a number of oversight sub-committees including: • Credit Committee – Establishes credit risk policies and risk management standards of practice and oversees the credit risk management program. Also monitors the Company’s overall credit risk profile and approves large individual credits and investments. • Product Oversight Committee – Oversees insurance risk and reviews risks in new product and new business reinsurance initiatives. Also monitors product design, new product pricing, and insurance risk exposures and trends. • Global Asset Liability Committee – Oversees market and liquidity risk for insurance products, hedging, and asset liability management programs and strategies. Also monitors market risk profile, risk exposures, risk mitigation activities and compliance with related policies. • Operational Risk Committee – Oversees operational risk appetite, exposures and associated governance, risk processes, risk management activities and compliance with related policies. We also have segment risk committees, each with mandates similar to the ERC except with a focus at the segment as applicable. Risk Appetite The Company’s strategic direction drives overall risk appetite. All risk taking activities are managed within the Company’s overall risk appetite, which defines the amount and types of risks the Company is willing to assume in pursuit of its objectives. The Company’s risk appetite is comprised of three components: overall risk taking philosophy, risk appetite statements, and risk limits and tolerances. Risk Philosophy – Manulife is a global financial institution offering insurance, wealth and asset management products and other financial services. The activities required to achieve our mission of “Decisions made easier. Lives made better” are guided by our values and involve elements of risk taking. As such, when making decisions about risk taking and risk management, the Company places a priority on the following risk management objectives: • To safeguard the commitments and expectations established with our customers, creditors, shareholders and employees; • To support the successful design and delivery of customer solutions through the development and deployment of innovative product solutions, and providing customer-centric digital experiences; • To prudently and effectively deploy the capital invested in the Company by shareholders with appropriate risk/return profiles; • To invest wealth and asset management’s customer assets consistent with their objectives; • To achieve and maintain a high level of operational resilience; • To safeguard the well-being of our employees, and promote a diverse, equitable and inclusive business environment; • To consider environmental, social, and governance (ESG) impacts across our business activities and community impact; • To protect and/or enhance the Company’s reputation and brand; and • To maintain the Company’s targeted financial strength rating. While we only pursue risks that we believe we can appropriately analyze and monitor, we also manage risks which arise outside of our direct influence. We recognize that risk exposures change over time. If exposures materially increase, we will activate management actions designed to bring exposures back to desired levels. As an integrated component of our business model, risk management assists the Company in achieving our objectives and in reaching higher levels of operational excellence, while encouraging transparency and organizational learning. Risk Appetite Statements – At least annually, we establish and/or reaffirm that our risk appetite and the Company’s strategy are aligned. The risk appetite statements provide ‘guideposts’ on our appetite for identified risks, any conditions placed on associated risk taking and direction for where quantitative risk limits should be established. The Company’s risk appetite statements are as follows: • Manulife accepts a total level of risk that provides a very high level of confidence to meeting customer obligations while targeting an appropriate overall return to shareholders over time; • Capital market risks are acceptable when they are managed within specific risk limits and tolerances; • Manulife believes a diversified investment portfolio reduces overall risk and enhances returns; therefore, it accepts credit and alternative long-duration asset related risks; • Manulife pursues product risks that add customer and shareholder value where there is competence to assess and monitor them, and for which appropriate compensation is received; • Manulife accepts that operational risks are an inherent part of the business when managed within thresholds and tolerances of key risk indicators and will protect its business and customers’ assets through cost-effective operational risk mitigation; and • Manulife expects its officers and employees to act in accordance with the Company’s values, ethics and standards; and to protect its brand and reputation. Risk Limits and Tolerances – Risk limits and tolerances are established for risks within our risk classification framework that are inherent in our strategies in order to define the types and amount of risk the Company will assume. Risk tolerance levels are set for risks deemed to be most significant to the Company and are established in relation to economic capital, earnings-at-risk and regulatory capital required. The purpose of risk limits is to cascade the total Company risk appetite to a level that can be effectively managed. Manulife establishes standalone risk limits for risk categories to avoid excessive concentration in any individual risk category and to manage the overall risk profile of the organization. 48 | 2022AnnualReport | Management’sDiscussionandAnalysis

2022 Annual Report - Page 50 2022 Annual Report Page 49 Page 51