Item 1C. Cybersecurity

 

The Company utilizes information technology systems throughout its business. As its reliance on information technology systems and data has increased, the Company obtained cybersecurity insurance and utilizes third party risk assessments.

 

Cyber Risk Management & Strategy

 

As part of its overall risk management system, the Company utilizes a third party to assess the Company’s processes and practices for managing and mitigating cybersecurity risks.

 

The Company focuses on building cybersecurity awareness with its employees and other end-users through training and security exercises and communicates the Company's expectations of employees and contractors with respect to cybersecurity matters.

 

The Company uses third-party cybersecurity professionals to review and assess the Company’s cybersecurity controls and procedures.

 

Although the Company has implemented policies and procedures to try to protect against cyber-attacks, there can be no assurance that they will be effective in avoiding disruption and business impacts. See Item 1A, Risk Factors for related discussion.

 

Cyber Expertise and Experience

 

The Company relies on third party cybersecurity professionals to provide risk assessments to help assess cybersecurity risks.

 

Cyber Governance & Oversight

 

Members of management report to the Company’s Board of Directors regarding cybersecurity matters, including the cyber risk assessments performed for the Company.

 

As part of its risk oversight responsibility, the Board oversees our policies and strategies for mitigating cybersecurity risks.

 

26