← Change feed
Corporate governanceradarEvidence-linked

Palo Alto Networks' new severance policy needs two events, not one

The August 20 policy separates an ordinary involuntary termination from a qualifying termination inside a change-in-control window. A deal by itself does not trigger the disclosed benefits.

Decision map for Palo Alto Networks' August 20, 2026 executive severance policy showing eligibility, ordinary and change-in-control termination branches, separate CEO and other executive officer benefit packages, and payment conditions
MyMap analysis of Palo Alto Networks' Form 8-K and filed Executive Change in Control and Severance Policy, observed August 23, 2026 at 4:05 AM Pacific TimeDownload SVG ↗

Palo Alto Networks' new executive severance policy does not pay change-in-control benefits merely because a transaction occurs. The disclosed route requires an eligible executive, a policy-defined change in control, and a qualifying termination inside a protection window. For the chief executive officer, that window starts three months before the change in control and ends 18 months after it; for other eligible executives, it ends 12 months after it.

The ordinary branch is different. An eligible executive terminated by the company without Cause, death, or Disability outside that window can qualify for non-change-in-control benefits. A resignation for Good Reason appears only on the change-in-control branch. The map's practical answer is therefore: classify the person, the corporate event, the employment event, and their dates before reading any benefit percentage.

The question this map answers

When does Palo Alto Networks' policy treat an executive departure as an ordinary qualifying termination, when does it treat the departure as a change-in-control qualifying termination, and what benefits did the company disclose for its named executive officers?

MyMap observed the Form 8-K and SEC-hosted policy at 4:05 AM Pacific Time on August 23. The board approved the policy on August 20, and the company filed it on August 21. The source set establishes policy terms, not that Palo Alto Networks was sold, that any named executive has departed, or that any payment has become due.

Start with eligibility, not a transaction headline

The policy defines an Eligible Executive as the chief executive officer, an executive vice president, a senior vice president, or another person designated by the Compensation and People Committee, provided that the person executes a participation agreement. Title alone is therefore not the entire test.

The 8-K names four executive officers as participants: Chairman and CEO Nikesh Arora, CFO Dipak Golechha, President William “BJ” Jenkins, and Chief Product and Technology Officer Lee Klarich. The filing's summary gives one disclosed benefit row for the CEO and another for the other executive officers. The broader policy can cover additional eligible people, but each person's benefits depend on the applicable participation agreement.

That distinction prevents two common errors. The policy is not a promise to every employee with a senior-sounding title, and the named executives are not recipients of a current payout merely because they are listed.

A change in control is a defined corporate event

The policy uses three principal routes to a Change in Control:

Defined routeThreshold in the filed policyWhat the route does not establish by itself
voting ownershipa person or group acquires more than 50% of total voting powera qualifying employment termination
board replacementa majority of directors is replaced within 12 months without approval from a majority of the prior boardthat every board refresh is a change in control
asset transfera person acquires assets with gross fair market value of at least 50% of the company's assets, subject to stated related-entity exclusionsthat an announced asset deal has closed or meets the valuation test

The policy also contains transaction exclusions and detailed definitions. A public announcement, acquisition rumor, minority investment, or signed agreement should not be drawn directly to a severance-payment node without testing the filed definition and the event's actual status.

The second event is a qualifying termination

Outside the change-in-control protection period, the disclosed ordinary route requires termination by the company other than for Cause, death, or Disability. Voluntary resignation is not included in that Non-CIC Qualified Termination definition.

Inside the protection period, the route widens. A CIC Qualified Termination can be either the same type of company termination or an executive resignation for Good Reason. Good Reason is not a free-standing label: the policy lists conditions such as specified material reductions in authority, obligations, responsibilities, certain title or reporting changes for executive officers, a base-salary reduction over 10% subject to an exception, or a material workplace relocation. It also requires notice within 90 days, a 30-day cure opportunity, and resignation within 12 months after the condition arose.

The policy's protection window begins three months before the defined change in control. That creates a look-back route: if an ordinary qualifying termination occurs and a change in control follows within three months, the executive can become eligible for the superior CIC treatment. Prior benefits are offset rather than duplicated.

The disclosed benefit matrix has three rows, not one

OutcomeSalary severanceTarget cash incentiveHealth-benefit calculationEquity treatment
non-CIC qualifying termination, disclosed executive officers100% of base salary, paid over 12 monthscurrent-year prorated formula plus certain unpaid prior-year amount12 months of the applicable COBRA premium as a taxable lump sum12 months of time-based acceleration; performance awards use actual achievement within the described tail
CIC qualifying termination, CEO200% of base salary200% of target incentive24 months100% acceleration of outstanding unvested awards, with performance conditions governed by award terms
CIC qualifying termination, other disclosed executive officers150% of base salary150% of target incentive18 monthsthe same stated 100% acceleration boundary

These are formulas, not payout totals. The filing does not supply in this policy the future termination date, then-current base salary and target incentive, unvested award inventory, performance results, COBRA premium, withholding, or final tax treatment needed to calculate a dollar amount.

The non-CIC cash-incentive line is especially easy to flatten incorrectly. It is not simply “100% bonus.” The participation agreements describe a prorated current-year target amount after subtracting certain partial-year payments, plus a prior-year target amount only if that award remains unpaid, again net of applicable partial-year payments.

A benefit branch still passes through conditions

Except for accrued amounts, payments and benefits require a timely signed and unrevoked separation agreement and release of claims. The policy also applies restrictive covenants, clawback rules, and Section 409A timing provisions.

For possible Internal Revenue Code Section 280G parachute payments, the policy uses a “best results” test: deliver the full amount or reduce it to avoid the excise tax, whichever leaves the executive with the greater after-tax amount. The visual labels this as a calculation gate, not an automatic cut or a promise that no excise tax will apply.

Health benefit severance is also a taxable cash calculation based on COBRA premiums. The policy says the payment may be used for any purpose and can be withheld if the company determines it cannot provide the payment without violating applicable law. It should not be mapped as guaranteed continued enrollment in a health plan.

Confirmed, derived, and still unknown

The filed sources confirm the August 20 effective date, eligible-role rule, named executive officers, change-in-control definitions, protection windows, qualifying-termination branches, disclosed benefit percentages, release condition, offset rule, and tax calculation boundary.

MyMap derives the two-event model, decision order, and three-row benefit comparison. Calling the policy “double-trigger” is a useful structural description of the CIC route: a change in control and a qualifying termination are both required. It is not extra contract language or a claim about a pending deal.

The sources leave unknown whether a future corporate event will meet the definition, whether an employment event will qualify, whether Good Reason notice and cure conditions will be satisfied, each participant's future compensation and award values, and the amount or timing of any payout. Individual award agreements can also control performance-based equity treatment.

Reproducible mapping method

To map another executive severance policy, create separate records for the participant, corporate event, employment event, observation date, protection period, benefit formula, and payment condition. Then apply this order:

  1. Verify eligibility and the signed participation agreement.
  2. Test the corporate event against the policy's defined thresholds and exclusions.
  3. Place the employment event on the timeline, including any pre-closing look-back.
  4. Test who initiated the departure and whether Cause, Disability, death, transfer, or Good Reason changes the route.
  5. Select the participant-specific agreement before copying percentages.
  6. Apply release, offset, clawback, tax, and equity-award conditions.

An analyst can adapt those branches in a MyMap flowchart, but the editable diagram is only a working model. The filed policy and applicable participation and award agreements remain the evidence.

Practical next step and limitations

Maintain two timelines: one for the corporate transaction and one for employment. Record announcement, signing, approval, closing, and ownership or board changes on the first; notice, cure, termination, release, and payment dates on the second. Join them only after the policy's definitions are satisfied.

This article is a source-reading aid, not legal, tax, employment, or investment advice. Update the map if Palo Alto Networks amends the policy, files a participant-specific agreement with different terms, discloses a qualifying transaction, or reports an executive departure that activates one of the branches.

References

  1. Palo Alto Networks, Inc.. Current Report on Form 8-K. SEC accession 0001193125-26-361122; Item 5.02; accepted August 21, 2026 at 4:15:18 PM EDT, 2026. https://www.sec.gov/Archives/edgar/data/1327567/000119312526361122/d180372d8k.htm Accessed August 23, 2026.
  2. Palo Alto Networks, Inc.. Executive Change in Control and Severance Policy. Exhibit 10.1 to Form 8-K; effective August 20, 2026, 2026. https://www.sec.gov/Archives/edgar/data/1327567/000119312526361122/d180372dex101.htm Accessed August 23, 2026.

Cite this article

Priya Shah. “Palo Alto Networks' new severance policy needs two events, not one.” MyMap Visual Intelligence. Version 2026-08-23. Updated August 23, 2026. https://www.mymap.ai/blog/palo-alto-networks-change-in-control-severance-map