Cryomass Technologies, Inc. 10-K Cybersecurity GRC - 2024-06-13

Page last updated on July 16, 2024

Cryomass Technologies, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-06-13 19:55:12 EDT.

Filings

10-K filed on 2024-06-13

Cryomass Technologies, Inc. filed a 10-K at 2024-06-13 19:55:12 EDT
Accession Number: 0001213900-24-052565

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C CYBERSECURITY Risk management and strategy The Company recognizes the critical importance of maintaining the trust and confidence of business partners and employees toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. The Company uses third-party vendors to manage its information technology systems, including but not limited to services in cloud security, email filtering, endpoint security, darkweb reporting, antivirus/antimalware, employee security awareness training, and asset management and support. Cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence. Management reviews the security policies, procedures, and certifications of all third-party service providers prior to engagement. As of the time of filing, there are no known cybersecurity threats that have materially affected, or are reasonable likely to materially affect the Company, including its business strategy, result of operations, or financial conditions. The Company pro-actively monitors for cybersecurity threats and responds accordingly to minimize its exposure to such threats. Governance Cybersecurity is an important part of our risk management processes and an area of focus for our board of directors and management. Our board of directors will discuss with management our cybersecurity threat risk management and processes surrounding material cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to such risks. Management has engaged a reputable third-party to assist in monitoring the Company’s cybersecurity risks which will be communicated to the Chief Financial Officer. The board will receive prompt and timely information from the Chief Financial Officer regarding any cybersecurity incident, as well as ongoing updates regarding any such incident until it has been addressed. Members of the board of directors are also encouraged to regularly engage in conversations with management on cybersecurity-related news events.

Company Information