Bespoke Extracts, Inc. 10-K Cybersecurity GRC - 2024-04-18

Page last updated on July 16, 2024

Bespoke Extracts, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-18 07:42:32 EDT.

Filings

10-K filed on 2024-04-18

Bespoke Extracts, Inc. filed a 10-K at 2024-04-18 07:42:32 EDT
Accession Number: 0001213900-24-033935

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity Risk Management The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. These processes are integrated into the Company’s overall risk management systems. These processes also include overseeing and identifying risks from cybersecurity threats associated with the use of third-party service providers. The Company has established monitoring procedures in its effort to mitigate risks related to data breaches or other security incidents originating from third parties. 14 Governance As part of our enterprise risk management program, the Board of Directors (the “Board”) evaluates risks associated with cybersecurity threats on a regular basis. The Board and receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been resolved. Through ongoing communications with these teams, the senior management team monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and report such threats and incidents to the Board when appropriate. During the year ended December 31, 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite the capabilities, processes, and other security measures we employ that we believe are designed to detect, reduce, and mitigate the risk of cybersecurity incidents, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.

Company Information