U S GLOBAL INVESTORS INC 10-K Cybersecurity GRC - 2024-09-10

Page last updated on September 10, 2024

U S GLOBAL INVESTORS INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-09-10 17:19:11 EDT.

Filings

10-K filed on 2024-09-10

U S GLOBAL INVESTORS INC filed a 10-K at 2024-09-10 17:19:11 EDT
Accession Number: 0001437749-24-028889

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity
Item 1C. Cybersecurity Risk Management and Strategy We have implemented a comprehensive technology and cybersecurity program as part of our overall risk management strategy. This program is designed to ensure our information systems are resilient, effective, and capable of defending against emerging risks and cybersecurity threats. Our program emphasizes defense, rapid detection, and swift remediation of cybersecurity threats and incidents. It includes robust cybersecurity policies and a crisis response and management plan to facilitate prompt management, response, and communication of cybersecurity threats and incidents. Our cybersecurity crisis management plan outlines the procedures and actions to be taken in the event of a cybersecurity incident, including detection, response, mitigation, and remediation. Upon identifying a potential threat or incident, our cybersecurity incident response team assigns a risk level classification and initiates the necessary escalation and other steps as per our plan. Incidents assessed as potentially high-risk are promptly escalated to our Chief Executive Officer (CEO), who determines the activation of relevant elements of our crisis response and management plan, including further escalation to senior management. The CEO informs our Board of Directors about cybersecurity incidents as appropriate, considering factors such as financial, operational, legal, or reputational impact. To date, we have not identified any risks from known cybersecurity threats, including prior incidents, that have materially affected or are reasonably likely to materially affect our operations, business strategy, results of operations, or financial condition. Risk Governance The full Board of Directors holds overall responsibility for overseeing the identification and mitigation of cybersecurity risks. This responsibility has not been delegated to any single committee, as the Board’s structure and size allow for comprehensive oversight. Periodically, management provides updates to the Board regarding our internal control program, including significant changes to our IT infrastructure and cybersecurity program. Management also directly communicates any material risks from cybersecurity threats to the Board. Our Director of Information Technology leads our cybersecurity program and reports directly to our CEO. Our director is supported by a Senior Systems Administrator, and together they bring over 65 years of combined information technology experience to the day-to-day management of information security. We leverage external partners to provide expanded monitoring coverage and triage of events before escalation to internal team members. Our third-party service provider supplements our internal IT team, offering 24/7/365 coverage and initial mitigation through continuous monitoring and security alerts.

Company Information