DENNY'S Corp 10-K Cybersecurity GRC - 2024-02-26

Page last updated on July 16, 2024

DENNY’S Corp reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-26 13:38:37 EST.

Filings

10-K filed on 2024-02-26

DENNY’S Corp filed a 10-K at 2024-02-26 13:38:37 EST
Accession Number: 0000852772-24-000026

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Risk Management and Strategy Denny’s recognizes that cybersecurity is a critical aspect of our business operations and that the protection of sensitive data and information systems is of paramount importance. We have implemented cybersecurity measures and processes to address and mitigate material risks from cybersecurity threats. On an annual basis, we perform a cybersecurity risk assessment to identify and evaluate risks and potential vulnerabilities that could impact our business. Cybersecurity is also assessed as part of our enterprise risk management program. In addition, we have preventative and detective monitoring controls that include robust access controls, privileged access management, vulnerability scanning, penetration testing of our online systems and internal networks, annual employee-wide awareness education, data encryption and incident response plans. These controls help to ensure our cybersecurity program reduces the cyber risk for our environment. We utilize third-party providers and acknowledge that these providers and partners may pose cybersecurity risks. We have implemented due diligence and oversight processes to ensure our third-party providers adhere to our cybersecurity standards when handling our data and accessing our systems. This includes a risk assessment before acceptance as a provider and continued monitoring through our third-party risk management program. Denny’s faces various risks associated with cybersecurity threats that could materially affect our business. In the event of a material cybersecurity incident, we are committed to promptly informing our shareholders, customers, and regulatory authorities, as required by law and regulations. Governance Our Chief Digital & Technology Officer and Senior Director, IT Security & Compliance lead our cybersecurity efforts with bi-annual updates that include certain metrics, data privacy, and other information technology risks, provided to the Audit and Finance Committee of our Board of Directors. Cybersecurity is a top priority for our Audit Committee. In addition, the Company has a Compliance Committee comprised of members of management from our IT Security & Compliance, Legal and Internal Audit teams who work cross-functionally to assess and manage enterprise-wide risks, including cybersecurity. Our Senior Director, IT Security & Compliance leads a team of qualified individuals with decades of combined experience in cybersecurity risk management and compliance. Our cybersecurity program and leadership strive to appropriately protect our brands, employees and guests.

Company Information