RiceBran Technologies 10-K Cybersecurity GRC - 2024-03-29

Page last updated on July 16, 2024

RiceBran Technologies reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-29 21:43:11 EDT.

Filings

10-K filed on 2024-03-29

RiceBran Technologies filed a 10-K at 2024-03-29 21:43:11 EDT
Accession Number: 0001437749-24-010135

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy We employ a risk management framework to identify, assess, monitor, and test cyber risk and controls, and perform comprehensive due diligence and ongoing oversight of third-party relationships, including vendors. We have made and will continue to make ongoing investments in developing and enhancing our security processes and controls and in maintaining our technology infrastructure, including the maintenance of a business continuity and disaster recovery program, which is tested on a regular basis. We have also implemented processes to help identify, assess and manage cybersecurity risks associated with our use of a third-party service provider. We also provide regular education and training to our employees and contractors on cybersecurity and the protection of our information systems in order to mitigate risk associated with protection against threats to the confidentiality, availability, and integrity of our information systems. We do not believe that risks from cybersecurity threats of which we are currently aware, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. See Item 1A - Risk Factors above for additional information on risks related to cyber-attacks. Governance Together with the Board’s standing committees, the Company’s Board of Directors is responsible for ensuring that material risks, including material cybersecurity risks, are identified and managed appropriately. The Board and its committees regularly review material operational, financial, cybersecurity, compensation and compliance risks with management. For example, the Audit Committee oversees the Company’s consultation with outside parties with an expertise in cybersecurity that we engage and retain to review and assess our information security program. The Board also receives regular updates concerning our information security and cyber risk strategy, cyber defense initiatives, cyber event preparedness, and cybersecurity risk assessments.

Company Information