NYIAX, INC. 10-K Cybersecurity GRC - 2024-08-21

Page last updated on October 1, 2024

NYIAX, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-08-21 18:08:52 EDT.

Filings

10-K filed on 2024-08-21

NYIAX, INC. filed a 10-K at 2024-08-21 18:08:52 EDT
Accession Number: 0001213900-24-071547

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. Cybersecurity Cybersecurity Risk Management and Strategy In the normal course of business, we may collect and store customer information, and certain sensitive company information, including proprietary and confidential business information. To protect this information, our existing cybersecurity policies require continuous monitoring, network security measures, and encryption of data. We maintain various protections designed to safeguard against cyberattacks, including firewalls, key-based authentication, and virtual private networks. We protect against business interruption by backing up our major systems. Our cybersecurity program is led by our CTO, alongside the CEO, and includes but is not limited to: IT security policies and practices, security risk assessment and mitigations, software vulnerability checks and updates, regular access certificate rotations - all designed to protect the privacy and security of the sensitive information and continuation of business. Given the size of the company, we do not have a specific committee dedicated to cybersecurity oversight. Instead, all board members participate in the review and monitoring of these risks. The CTO and the CEO inform the board of directors on information security and cybersecurity matters as needed. Despite the implementation of our cybersecurity program, our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences for the business. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security. Cybersecurity Incidents None.

Company Information