PIXELWORKS, INC 10-K Cybersecurity GRC - 2024-03-13

Page last updated on July 16, 2024

PIXELWORKS, INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-13 16:44:02 EDT.

Filings

10-K filed on 2024-03-13

PIXELWORKS, INC filed a 10-K at 2024-03-13 16:44:02 EDT
Accession Number: 0001040161-24-000010

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. We place the utmost importance on the security of our systems and the data we handle. We maintain a comprehensive process for identifying, assessing, and managing material risks from cybersecurity threats as part of our broader risk management system and processes. To identify and assess risks from cybersecurity threats, we evaluate a variety of developments including threat intelligence, vulnerabilities of third parties, including any auditors or consultants who advise on our cybersecurity systems, evolving regulatory requirements, and observed cybersecurity incidents, among others. We regularly conduct risk assessments to evaluate the maturity and effectiveness of our systems and processes in addressing cybersecurity threats and to identify any areas for remediation and opportunities for enhancements. The results of such assessments are evaluated by management and reported to our board of directors and the audit committee, and we adjust our cybersecurity policies, standards, processes, and practices as necessary. Our audit committee is responsible for the oversight of risks from cybersecurity threats and directly oversees our cybersecurity policies and practices, internal controls regarding information security, and compliance with legal and regulatory requirements regarding cybersecurity risks. The audit committee receives regular reports and updates on cybersecurity matters from the leaders of our dedicated security team and management, including developments on existing and new cybersecurity risks and how management is addressing and/or mitigating such risks, cybersecurity and data privacy incidents (if any), the status of key information security initiatives, vulnerability assessments, as well as on existing and emerging threat landscapes. Additionally, on at least an annual basis, the audit committee reviews and discusses with management our policies and programs with respect to the audit committee’s oversight of cybersecurity threats, which enable the audit committee’s effective oversight of our overall cybersecurity risk and compliance posture. The audit committee regularly reports to the board of directors on these matters. We have a dedicated security team led by our Director of Worldwide IT, who, in coordination with management, including our Chief Executive Officer, Chief Financial Officer, and Chief Legal Officer, monitors the prevention, detection, mitigation, and remediation of cybersecurity threats and incidents in accordance with our incident response and recovery plans. Threats and incidents that are identified as potentially significant are promptly reported to the audit committee. Our dedicated security team has over 20 years of experience in managing and monitoring corporate cybersecurity programs. While risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect our Company, including our business strategy, results of operations, or financial condition, we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. See “Risk Factors” in Part I, Item 1A of this Annual Report on Form 10-K for further information regarding cybersecurity risks. 38

Company Information