CHASE GENERAL CORP 10-K Cybersecurity GRC - 2024-09-20

Page last updated on September 20, 2024

CHASE GENERAL CORP reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-09-20 09:54:01 EDT.

Filings

10-K filed on 2024-09-20

CHASE GENERAL CORP filed a 10-K at 2024-09-20 09:54:01 EDT
Accession Number: 0001558370-24-012911

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C CYBERSECURITY Risk Management and Strategy: Currently, the Company has basic cybersecurity measures in place, such as password protection and antivirus software. However, the Company acknowledges that these measures may not be sufficient to protect against more sophisticated cyber threats. The Company does not currently perform regular comprehensive cybersecurity risk assessments. There is a recognized need to develop a formalized approach to identifying and mitigating cybersecurity risks. The Company lacks a formalized incident response plan. In the event of a cybersecurity incident, the Company would rely on ad-hoc measures to respond and manage the situation. The Company recognizes the need to improve its cybersecurity posture. Planned future initiatives include developing a formal incident response plan, conducting a cybersecurity risk assessment, and exploring additional protective measures, such as data encryption and enhanced network security protocols. However, the timing and extent of these improvements are contingent on available resources. Governance and Oversight: Currently, the Company does not have dedicated personnel or committees for cybersecurity risk oversight. Cybersecurity matters are informally reported to senior management as needed. The board of directors is informed of cybersecurity risks on an as-needed basis but does not actively oversee cybersecurity strategy. The Company will continue evaluating the need to hire a cybersecurity expert or consultant to enhance its cybersecurity governance and oversight. The Company has not experienced any material cybersecurity incidents in the past year. However, due to the current limited cybersecurity measures, the risk of future incidents remains significant.

Company Information