Inspirato Inc 10-K Cybersecurity GRC - 2024-03-12

Page last updated on July 16, 2024

Inspirato Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-12 16:31:30 EDT.

Filings

10-K filed on 2024-03-12

Inspirato Inc filed a 10-K at 2024-03-12 16:31:30 EDT
Accession Number: 0001558370-24-002993

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity The Company understands the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Cybersecurity processes to manage risks from cybersecurity threats have been incorporated as a part of the Company’s overall risk assessment process. These cybersecurity processes, technologies, and controls to assess, identify, and manage material risks have been incorporated into our operations. To manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, and claims we undertake the below listed activities: ● Monitor emerging cybersecurity and data protection laws and implement changes to our processes to comply; ● Conduct periodic customer data handling and use requirement training for our employees; ● Conduct annual cybersecurity management and incident training for employees involved in our systems and processes that handle sensitive data; ● Conduct regular phishing email simulations for all employees; ● Carry cyber liability insurance that provides resources and protection against potential losses arising from a cybersecurity incident; and ● Maintain a Technical Review Committee which evaluates all third-party technology partners, including their security posture and controls, before we engage with them. Our incident response plan coordinates the activities that we and our cyber liability insurance carrier and associated services e.g., incident response team, breach coach, forensics, etc. take to prepare, respond, and recover from cybersecurity incidents, which include processes to assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. We describe whether and how risks from identified cybersecurity threats have or that are reasonably likely to affect our financial position, results of operations and cash flows, included as part of our Item 1A. Risk Factors of this Annual Report on Form 10-K, which disclosures are incorporated by reference herein. We have a cross-functional management team to participate in our “Cybersecurity Risk Committee” (the “Committee”), comprised of Legal, Cybersecurity Operations, Risk Management, Finance and Accounting and Information Technology. The Committee is responsible for assessing and managing all aspects of our Cybersecurity Program, including the evaluation of various cybersecurity risks and the continued enhancement of our processes and procedures to manage these risks and respond to any confirmed cyberattacks. The Committee also works with various third-party cybersecurity experts to ensure industry best practices. The Committee reports regularly to the Audit Committee of the Board, covering current and future planned processes in place to prevent, detect, mitigate and remediate any cybersecurity incidents.

Company Information