Item 1C. Cybersecurity.

 

Risk Management and Strategy

 

We are externally managed by our Manager, and as such rely on our Manager to manage our day-to-day operations pursuant to our Management Agreement. Services provided under the Management Agreement are performed by individuals who are employees of our Sponsor or one or more of its affiliates. We, our Manager and our Sponsor are also party to an Employee and Cost Sharing Agreement. Pursuant the Employee and Cost Sharing Agreement our Sponsor provides our Manager with access to, among other things, the information technology (“IT”) systems necessary for the performance by our Manager of its duties under the Management Agreement. These IT systems include data hosting facilities and other hardware and software platforms, some of which are hosted by third-party service providers. Our Sponsor’s IT systems, like those of most other companies, may be vulnerable to cybersecurity threats, including data breaches, cyberattacks, malware and computer viruses and interruption of services.

 

Our Sponsor takes a risk-based approach to cybersecurity and has implemented cybersecurity and IT risk management policies and procedures designed to address cybersecurity threats and incidents, including regularly assessing risks from cyber threats, monitoring IT systems for potential vulnerabilities, and testing IT systems according to its policies and practices. Our Sponsor also uses a number of security tools and external service providers to monitor, test or otherwise assist with various aspects of its cybersecurity controls.

 

As of the date of this Form 10-K, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected us, our business strategy, results of operations, or financial condition.

 

Governance

 

Our Board is responsible for the oversight of our Manager, who, pursuant to the Management Agreement, is responsible for overseeing our risk management processes, including cybersecurity risks. Our Board recognizes the critical importance of maintaining effective cybersecurity measures and our Manager’s role in assessing and managing our material risks from cybersecurity threats. Our Manager provides our Board with timely updates both on a periodic basis and as new cybersecurity risks arise.