Greenbrook TMS Inc. 10-K Cybersecurity GRC - 2024-04-25

Page last updated on October 1, 2024

Greenbrook TMS Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-25 18:36:58 EDT.

Filings

10-K filed on 2024-04-25

Greenbrook TMS Inc. filed a 10-K at 2024-04-25 18:36:58 EDT
Accession Number: 0001104659-24-052140

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk management and strategy Cybersecurity and information privacy are important parts of our overall approach to risk management. We have documented cybersecurity policies and procedures to identify, assess and manage risks from cybersecurity threats. We believe our cybersecurity policies and procedures are reasonably designed to materially protect the security of both our data and the data in our custody. To protect our information systems, we employ various security tools supporting protection, detection and response capabilities, including anti-malware and security applications, and periodic risk analyses. We maintain a cybersecurity incident response plan to help ensure a timely, consistent response to actual or attempted cybersecurity incidents impacting the Company. We may engage third parties from time to time, including consultants and auditors to conduct assessments of information systems. We have policies and processes in place to govern third-party access and the risks associated with such access. Our systems face cybersecurity risks, and we have in the past experienced threats to and breaches of our data and systems. However, to date, these incidents have not had a material impact on our business, results of operations or financial conditions. There can be no assurance that we will not experience any material cybersecurity threats or incidents in the future. See Item 1A “Risk Factors-A material disruption in or security breach affecting our information technology systems could significantly affect our business and lead to reduced sales, growth prospects and reputational damage”. Governance Cybersecurity at our Company is led by our Chief Information Security Officer (" CISO “) and our Compliance and Privacy Officer and overseen by our Board. One of the key functions of our Board is informed oversight of our risk management process, including risks from cybersecurity threats. Our CISO and our Compliance and Privacy Officer provide periodic reports to the Board regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing and activities of third parties. The current CISO has over twenty years of experience in information technology and security, and his background includes technical experience, strategy and architecture focused roles, cyber and threat experience, and various leadership roles. - 56 - Table of Contents

Company Information