HIGH WIRE NETWORKS, INC. 10-K Cybersecurity GRC - 2024-04-19

Page last updated on July 16, 2024

HIGH WIRE NETWORKS, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-19 16:42:27 EDT.

Filings

10-K filed on 2024-04-19

HIGH WIRE NETWORKS, INC. filed a 10-K at 2024-04-19 16:42:27 EDT
Accession Number: 0001213900-24-034533

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Our company has stringent processes and management that is used to assess, identify, and manage risks from unauthorized access through our information systems that may affect confidentiality, integrity, or availability of our information systems. We utilize the appropriate National Institute of Standards and Technology (NIST) controls for our sector and undergo yearly SOC II audits. These audits as well as our routine senior management level reviews ensure that our processes are designed to prevent, detect, or mitigate data loss, theft, misuse, unauthorized access, or other security incidents that may affect our data. We require coordinated IT security guidelines with our partners and vendors to mitigate risk associated with the distribution and holding of data sensitive to our company. A core portion of our business is as a channel partner for cybersecurity services through our Overwatch solution. This solution includes robust detection and response capabilities managed by a 24x7 US-based security operations center with dedicated senior leadership to the process and programs included in Overwatch. We utilize the same program that we offer as a service as our internal solution. In addition, we have hardware, site, and network protections around our physical devices that are located both onsite at High Wire Networks as well as a fully managed offsite data center. We support the security systems by the usage of penetration testing, security audits, and ongoing risk assessments. We have a well-established incident response process that includes a rapid escalation of critical events to all senior leadership stakeholders. Our leadership team is led by our Chief Technology Officer (who is also a seasoned Chief Information Security Officer) who is responsible for implementing and maintaining a team of trained cybersecurity professionals. Senior leadership holds as needed, monthly, and quarterly governance meetings strictly focused on the management of our cybersecurity program and data practices. Our governance program includes a working team which encompasses several highly trained and experienced cybersecurity professionals as well as a steering committee including our CEO, CFO, and COO. In both the working and steering committee meetings, related and relevant risks are identified, tracked, mitigated, and reported to appropriate leaders, including the Board of Directors. We provide and maintain data protection and cybersecurity training to limit the exposure of our business to security events based on soft attacks against our employees. We are also a strong proponent of defense in depth. By utilizing Enterprise Risk Management strategies ingrained in our protection, detection and response planning we are able to provide multiple layers of security to identify and mitigate protection points within our company.

Company Information