ESCALON MEDICAL CORP 10-K Cybersecurity GRC - 2024-09-30

Page last updated on October 1, 2024

ESCALON MEDICAL CORP reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-09-30 16:00:54 EDT.

Filings

10-K filed on 2024-09-30

ESCALON MEDICAL CORP filed a 10-K at 2024-09-30 16:00:54 EDT
Accession Number: 0000862668-24-000022

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBER SECURITY Risk Management and Strategy The Company recognizes the importance of cybersecurity and has implemented a comprehensive program to protect its information assets. Key components of our cybersecurity program include appointment of an Information Security Officer, who is the also the Chief Operating officer with extensive knowledge of cybersecurity issues, information security policies and procedures, engagement of third-party security experts, regular penetration testing, managed backup and data protection, managed threat response, hardware and software protections, physical security measures, employee training, internal cybersecurity audits, and ongoing product cybersecurity assessments. The Company maintains cybersecurity insurance covering its internal operations and customer-facing products. Despite these measures, the Company cannot guarantee that it will be immune from cybersecurity threats. A successful attack could result in unauthorized access to our systems, data breaches, disruptions to our operations, and financial losses. We are committed to continually evaluating and enhancing our cybersecurity program to mitigate these risks. Governance T he Company’s Board of Directors receives regular reports from the Information Security Officer regarding the Company’s cybersecurity program. The Board ensures that the Company has the necessary resources and authority to implement and maintain a sufficient cybersecurity program. The Information Security Officer reports directly to the Chief Executive Officer and is responsible for working with internal and third-party resources to develop and implement the Company’s cybersecurity strategy, manage cybersecurity risks, and oversee the Company’s cybersecurity operations.

Company Information