Search every filing
2,477,667 paragraphs from 10-Ks, 10-Qs and 8-Ks with press releases.
Matching paragraphs
Our cybersecurity program focuses on (i) preventing and preparing for cybersecurity incidents, (ii) detecting and analyzing cybersecurity incidents, and (iii) containing, eradicating, recovering from, and reporting cybersecurity events.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
Our IRP sets forth the procedures we follow in responding to a cybersecurity incidents. Once a cybersecurity incident is contained, our focus shifts to remediation and recovery. These activities depend on the nature of the cybersecurity incident and may include rebuilding systems and/or hosts, replacing compromised files with clean versions and validation of files or data that may have been affected. We also maintain cybersecurity insurance providing coverage for certain costs related to security failures and specified cybersecurity-related incidents that interrupt our network or networks of our vendors, in all cases up to specified limits and subject to certain exclusions.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
Cybersecurity incidents may be detected through a variety of means, which may include, but are not limited to, automated event-detection notifications, employee notifications, notification from external parties (e.g., our third-party information technology provider), and proactive threat hunting in conjunction with our external partners. Once a potential cybersecurity incident is identified, including a third-party cybersecurity event, the incident response team designated pursuant to the IRP follows the procedures set forth in the plan to investigate the potential incident, including determining the nature of the event.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
Following the conclusion of an incident, the incident response team will generally assess the effectiveness of the cybersecurity program and IRP and make adjustments as appropriate.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
As discussed above, we maintain an IRP that guides our response to a cybersecurity incident. Annually, we test the IRP’s response procedures, including thorough disaster response and business continuity plan exercises. These exercises are intended to challenge and validate our information security response and resources through simulated cybersecurity incidents, including engagement of outside cybersecurity legal counsel, other third-party partners, key internal personnel, executive management, and our Board.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
As of December 31, 2024, we have not had any known instances of material cybersecurity incidents, including known third-party provider incidents. However, there can be no assurance that our security efforts and measures, and those of our third-party providers, will be effective or that attempted security incidents or disruptions would not be successful or damaging. See “Item 1A - Risk Factors - If our confidential information is compromised or corrupted, including as a result of a cybersecurity incident, our reputation and business relationships could be damaged, which could adversely affect our financial condition and operating results.”
Read in the filing ↗ Also in 10-K of Feb 12, 2026
In the event of an incident that jeopardizes the confidentiality, integrity, or availability of the information technology systems we use, we utilize a regularly updated information security incident response plan (IRP). The IRP is overseen by our executive Incident Response Committee (IRC), which consists of our Chief Financial and Investment Officer, Chief Administrative Officer, Chief Legal Officer, and CTO. The IRP guides our internal response to cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
We have identified and expect to continue to identify cyberattacks and cybersecurity incidents on our systems and those of third parties we rely upon, but none of the cyberattacks and incidents we have identified to date has had a material impact on our business or operations. While we have purchased cybersecurity insurance, there are no assurances that the coverage would be adequate in relation to any incurred losses. Moreover, as cyberattacks increase in frequency and magnitude, we may be unable to obtain cybersecurity insurance in amounts and on terms we view as adequate for our operations.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
If our confidential information is compromised or corrupted, including as a result of a cybersecurity incident, our reputation and business relationships could be damaged and our financial condition and operating results could be adversely affected.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
Our IRP provides clear communication protocols, including with respect to members of executive management, internal and external counsel, the Audit Committee and our Board. These protocols include a framework for assessing our SEC and other regulatory reporting obligations related to a cybersecurity incident.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
… Any such cybersecurity incident, including those impacting personal information, could result in serious and harmful consequences for us or our customers. A cybersecurity incident could also interfere with our ability to comply with financial reporting requirements. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and threats, as our systems could …
Read in the filing ↗ Also in 10-K of Feb 12, 2026
… These systems are subject to damage or interruption from power outages, system, network, internet and telecommunications failures, hackers, including through a ransomware attack, computer worms, viruses, and other destructive or disruptive cybersecurity incidents, and catastrophic events. Such incidents could also result in significant costs to repair or replace such networks or information systems, as well as actual monetary losses in …
Read in the filing ↗ Also in 10-K of Feb 12, 2026
We identify and address information security risks by employing a defense-in-depth methodology, consisting of both proactive and reactive elements, which provides multiple, redundant defensive measures and prescribes actions to take in case a security control fails or a vulnerability is exploited. We leverage internal resources, along with strategic external partnerships, to mitigate cybersecurity threats to the Company. We have partnerships for security operations center (SOC) services, penetration testing, incident response, and various third-party assessments. We deploy both commercially available solutions and proprietary systems to actively manage threats to our information technology environment.
Read in the filing ↗ Also in 10-K of Feb 12, 2026
Our confidential information may also be compromised due to programming or human error, negligence, or fraud. Although we and our third-party service providers make efforts to maintain the security and integrity of our information, including the implementation of security measures, required employee awareness training, and the existence of a disaster recovery plan, there is no guarantee that they will be adequate to safeguard against all cybersecurity incidents or misuses of data. In addition, as the regulatory environment related to information security, data collection and use, and privacy becomes increasingly rigorous, with new and changing requirements applicable to our business from multiple regulatory agencies at the local, state, federal, or international level, compliance with those requirements could also result in additional costs, or we could fail to comply with those requirements due to various reasons.
Read in the filing ↗ Also in 10-K of Feb 12, 2026