Golden Growers Cooperative 10-K Cybersecurity GRC - 2024-03-15

Page last updated on July 16, 2024

Golden Growers Cooperative reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-15 15:10:58 EDT.

Filings

10-K filed on 2024-03-15

Golden Growers Cooperative filed a 10-K at 2024-03-15 15:10:58 EDT
Accession Number: 0001826466-24-000033

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. CYBERSECURITY Cybersecurity risk management and strategy The Cooperative’s Board of Directors recognizes the significance that cybersecurity has on our business, particularly the security of our member data, and is responsible for overseeing risks to the Cooperative from cybersecurity threat actors. Our operations rely on various information systems and technologies, mainly those provided by third party providers. These systems collect, process, transmit and retain information that may require both mandatory and voluntary data protection regimens. 5 Our cybersecurity practices are designed to provide reasonable information security given the nature of our organization and our third-party relationships. We rely on the representations and certifications of key partnerships with suppliers recognizing these third-party relationships introduce additional cybersecurity risks. To address these third-party risks, we have established strict criteria for supplier selection and conduct security risk assessments to mitigate potential impacts on our business. We do not, at this time, engage assessors, consultants, auditors, or other third parties in connection with any security risk assessments or processes. Cybersecurity governance The Cooperative’s Board of Directors believes a strong cybersecurity strategy is vital to protect our business operations, sustain our control environment and honor our data protection obligations. The Board has delegated to its Finance & Audit Committee the responsibility for monitoring the effectiveness of the Cooperative’s internal cybersecurity practices. The Executive Vice President manages the Cooperative’s cybersecurity-related risks, communicates with suppliers and other third party providers regarding cybersecurity threats, incidents, plans and responses, and reports to the Finance & Audit Committee and/or the entire Board regarding such cybersecurity threats, incidents, plans and responses on at least a semi-annual basis, and more often as needed. During 2023, the Cooperative did not experience any cybersecurity threats or incidents that have materially affected or are reasonably likely to materially affect the Cooperative, including its business strategy, results of operations, or financial condition.

Company Information