MYERS INDUSTRIES INC 10-K Cybersecurity GRC - 2024-03-05

Page last updated on July 16, 2024

MYERS INDUSTRIES INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-05 16:00:48 EST.

Filings

10-K filed on 2024-03-05

MYERS INDUSTRIES INC filed a 10-K at 2024-03-05 16:00:48 EST
Accession Number: 0000950170-24-025847

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. Cybersecurity The Company takes cybersecurity threats seriously, including regular reassessment of cybersecurity risks both internally and with third parties and updates to the Board of Directors at least annually. The Company’s information security management system is based upon the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF). Among other best practices, the company uses multi-factor authentication wherever possible, maintains current versions of firewalls and security software, performs regular cybersecurity training and email phishing campaigns for employees, uses third parties to perform intrusion testing, and maintains disaster recovery and incident response plans, which include retainer contracts for third party cybersecurity response specialists. The Company employs a combination of active and passive methods to monitor for new or developing cybersecurity risks. 17 The Board regularly receives reports and training from management and third parties on cybersecurity matters, as part of our overall enterprise risk management program. Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. Company IT personnel have the appropriate expertise in IT and cybersecurity, which generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. Company cybersecurity personnel monitor the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above. Incidents, if any, are escalated to management and the Board according to the Company’s incident response policy. There have been no material cybersecurity incidents in the periods presented. 18

Company Information