BIP Ventures Evergreen BDC 10-K Cybersecurity GRC - 2024-03-21

Page last updated on July 16, 2024

BIP Ventures Evergreen BDC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-21 16:49:13 EDT.

Filings

10-K filed on 2024-03-21

BIP Ventures Evergreen BDC filed a 10-K at 2024-03-21 16:49:13 EDT
Accession Number: 0001580642-24-001779

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity The Company understands the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. The Company has designed processes and controls to assess, identify and manage material risks from cybersecurity threats have been identified as a part of the Company’s overall risk assessment process. To manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we undertake the below listed activities: ● Monitor emerging data risks, laws, and regulations to implement changes to our processes; ● Conduct quarterly and annual training for our employees, including regular phishing email simulations; 53 ● Review third-party service providers to assess each vendors’ cybersecurity processes prior to being engaged and on an ongoing basis; ● Perform an annual cyber risk assessment, through the use of both internal and external third parties to evaluate our cybersecurity program, policies, and procedures; and ● Conduct annual review procedures over business continuity and disaster recovery plans. Our incident response plan coordinates the activities that we take to prepare to respond and recover from cybersecurity incidents, which include processes to triage, assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. Our Board of Trustees is responsible for overseeing the Company’s risk assessment, risk management and cybersecurity risks. Periodically during each year, the Board receives an overview from our Chief Technology Officer of our cybersecurity threat risk management and strategy processes, including potential impact on the Company, the efforts of management to manage the risks that are identified and our disaster recovery preparations. Members of the Board of Trustees regularly engage in discussions with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs. Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by our Chief Technology Officer, with oversight from the Investment Adviser’s Technology Board. Our Chief Technology Officer has over 15 years of experience in various roles involving managing information security, developing cybersecurity strategy, and implementing cybersecurity programs. The Chief Technology Officer is informed about and monitors the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of the cybersecurity risk management and strategy processes described above, including our incident response plan.

Company Information