GEORGE RISK INDUSTRIES, INC. 10-K Cybersecurity GRC - 2024-07-31

Page last updated on July 31, 2024

GEORGE RISK INDUSTRIES, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-07-31 16:23:55 EDT.

Filings

10-K filed on 2024-07-31

GEORGE RISK INDUSTRIES, INC. filed a 10-K at 2024-07-31 16:23:55 EDT
Accession Number: 0001493152-24-029743

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C Cybersecurity We believe a proactive approach to cybersecurity risks and threats is essential to achieving our business objectives and protecting our business. We therefore have processes for assessing, identifying, and managing risks from cybersecurity threats, that are conducted both in-house and with the aid of a third-party IT service, Five Nines, and have integrated these processes into our overall risk management system. We continually monitor our safeguards and provide our employees at all levels with the tools and training on these safeguards. Five Nine’s security specialists monitor and aid with industry best practices and compliance and assist us in implementing our cybersecurity procedures. Additionally, they routinely assess risks from cybersecurity threats, including but not limited to changes to firmware, disruption/denial of service and any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. We have established policies for tracking, managing, and safely disposing of physical hardware that may contain confidential information. We intend to continually evaluate best practices and methods, including continued cyber defense systems and training programs to protect our business from a wide range of potential threats and the ever-evolving cybersecurity risks. 2 Governance Our company IT Manager continually monitors company computers and information systems for potential malware, ransomware and other malicious activity. The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity and information security policies, training, new concerns, and plans. The CEO reports, as and if needed, directly to the audit committee and board of directors. The board of directors and audit committee will be apprised of any cybersecurity incidents deemed to have a moderate or higher business impact and will be provided with updates as necessary.

Company Information