Terra Property Trust, Inc. 10-K Cybersecurity GRC - 2024-03-15

Page last updated on July 16, 2024

Terra Property Trust, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-15 17:17:22 EDT.

Filings

10-K filed on 2024-03-15

Terra Property Trust, Inc. filed a 10-K at 2024-03-15 17:17:22 EDT
Accession Number: 0001674356-24-000009

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Our management recognizes the importance of implementing and maintaining robust cybersecurity measures designed to address cybersecurity threats that pose risks to our business and operations. Therefore, we have established a comprehensive framework to identify, protect against, detect, respond to, and recover from cybersecurity incidents (“Incidents”). Our cybersecurity measures are designed to provide a structured approach to managing cybersecurity risks for an effective, efficient, an orderly response to any Incident. 36 As a critical component of our overall risk management process, we have adopted a framework that shares existing reporting channels and governance processes to identify, assess, manage and report cybersecurity threats on an ongoing basis. This risk management process is led by our Manager’s Chief Compliance Officer and Cyber Security Committee (“CSC”). Our management, including our Manager’s Chief Compliance Officer and CSC, is authorized to take the appropriate steps deemed necessary to identify, assess, contain, mitigate, and resolve cybersecurity threats including by (a) maintaining (i) an Incident Response Plan in the event of an Incident and (ii) a Cybersecurity Policy which governs information technology security policies, (b) regularly monitoring our systems and user accounts for any suspected Incidents, (c) performing annual audits on certain of our systems, and (d) providing general cybersecurity awareness and data protection training. In addition, depending on the circumstances of an Incident, we may engage third parties such as insurance carriers, outside legal counsel, forensic investigators, crisis communications or public relations firms, investor relations firms and response vendors and we may coordinate with regulators or law enforcement. We also assess third party risks when determining the selection and oversight of applicable third-party service providers. Increased cybersecurity risk due to the diversification of our data across external service providers and cyber incidents may adversely affect our business by causing a disruption to our operations, compromise our confidential information and/or damage to our business relationships, all of which could negatively impact our financial results. As of the date of this Form 10-K, we are not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our financial position, results of operations and/or business strategy. While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, there can be no guarantee that we will not experience such an incident in the future where we may be unable to implement effective preventative measures in a timely manner. Further discussion of the potential impacts on our business from cyber intrusions is provided in “Risk Factors” in Part I, Item 1A of this Annual Report on Form 10-K.

Company Information