US NUCLEAR CORP. 10-K Cybersecurity GRC - 2024-05-10

Page last updated on July 16, 2024

US NUCLEAR CORP. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-05-10 17:20:25 EDT.

Filings

10-K filed on 2024-05-10

US NUCLEAR CORP. filed a 10-K at 2024-05-10 17:20:25 EDT
Accession Number: 0001213900-24-041830

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C- CYBERSECURITY We have a cross-departmental approach to addressing cybersecurity risk, including input from employees and our Board of Directors (the “Board”). The Board and senior management are devoting resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape to respond to emerging threats in a timely and effective manner. Our cybersecurity risk management program will leverage the National Institute of Standards and Technology (NIST) framework, which organizes cybersecurity risks into five categories: identify, protect, detect, respond and recover. Our IT security reviews such as policies related to encryption standards, antivirus protection, remote access, multifactor authentication, confidential information and the use of the internet, social media, email and wireless devices go through an internal review process and are approved by appropriate members of management. In addition to assessing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of third-party service providers. The internal business owners of hosted applications are required to document user access reviews at least annually and provide from the vendor a System and Organization Controls (SOC) 1 or SOC 2 report. If a third-party vendor is not able to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis. Our assessment of risks associated with the use of third-party providers is part of our overall cybersecurity risk management framework. We face a number of cybersecurity risks in connection with our business. Although such risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we have, from time to time, experienced threats to our data and systems, including malware and computer virus attacks.

Company Information