Global Self Storage, Inc. 10-K Cybersecurity GRC - 2024-03-26

Page last updated on July 16, 2024

Global Self Storage, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-26 16:00:36 EDT.

Filings

10-K filed on 2024-03-26

Global Self Storage, Inc. filed a 10-K at 2024-03-26 16:00:36 EDT
Accession Number: 0000950170-24-036393

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. We recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. Our cybersecurity risk management program includes: - Experienced third-party consultants and/or service providers that assist us to develop, implement, and maintain information technology risk management measures. - Oversight of executive management with experience in areas relating to cybersecurity. - Threat protection software, including, anti-virus, anti-malware, email link protection, and email spam filters that are fine-tuned to mitigate threats to our organization. - Cloud-based service providers that require strong passwords, access controls, and multi-factor authentication. - Periodic cybersecurity and phishing awareness training of our employees, including computer-based training and internal communications. - Annual business continuity testing. - Periodic reporting to the board of directors on matters relating to cybersecurity. 29 Management of Material Risks & Integration into Overall Risk Management Our management team engages with experienced third-party service providers to assist us to develop, implement, and maintain information technology risk management measures. In addition, we have executive management with experience in areas relating to cybersecurity. We also foster a culture of cybersecurity awareness and have incorporated cybersecurity considerations into our decision-making processes. Our management team works closely with our third-party service providers to identify, evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. Our collaboration with third-party service providers includes threat assessments and consultation on security enhancements. In addition, the Company provides cybersecurity and phishing awareness training to our employees periodically. Oversight of Board of Directors The board of directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats and oversees the Company’s cybersecurity risk management activities. The board of directors receive updates on the Company’s cybersecurity risks and protective measures periodically. Cybersecurity matters are reported to the board of directors so that the board of directors can effectively carry out their oversight role. Risks from Cybersecurity Threats We have not identified risks from known cybersecurity threats, including as a result of any cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For more information, see the section titled “Risks Related to our Self Storage Properties and our Business - We rely on information technology in our operations, and any material failure, inadequacy, interruption or security breach through cyber-attacks, cyber-intrusions, or other methods could disrupt our information technology networks and related systems and harm our business.” 30

Company Information