PCS Edventures!, Inc. 10-K Cybersecurity GRC - 2024-06-28

Page last updated on July 16, 2024

PCS Edventures!, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-06-28 15:57:32 EDT.

Filings

10-K filed on 2024-06-28

PCS Edventures!, Inc. filed a 10-K at 2024-06-28 15:57:32 EDT
Accession Number: 0001493152-24-025592

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Processes for assessing, identifying, and managing material risks from cybersecurity threats are conducted in-house, with the help of analytics and notifications that are built-in to our third-party tools. These processes include: a. Providing employees with tools and training to minimize and report cybersecurity risks; b. Monitoring databases and tools for unusual activity or suspicious login attempts; c. Tracking, managing, and safely disposing of physical hardware; and d. Responding to any identified threats and reporting these situations to management. 9 Cybersecurity threats could potentially result in slowed or halted business operations, such as shipping, closing sales, marketing engagement, and other communications. This would negatively impact the Company’s financial condition until the issue is resolved. Such threats could impact customers of certain programs that rely on digital resources, but a majority of our products would not be materially affected. Other threats may include the compromise of customer personally-identifiable information. We continually monitor for threats to avoid risks to Company or individuals’ data, interruptions to business operations, or financial losses. No cybersecurity incidents were identified this year. One threat was identified: insecurely stored credentials. This was responded to by implementing an encrypted password manager Company-wide. We will continue to monitor for threats to avoid risks to Company or individuals’ data, interruptions to business operations, or financial losses. Information about risks or any identified cybersecurity threats are reported by the Director of Technology to the President. Identified cybersecurity risks are reported to IT, where they are assessed and responded to. Any actions taken or cybersecurity incidents identified are reported to the Director of Technology. Qualifications for these individuals include prior experience, education, and/or training in cybersecurity.

Company Information