Laredo Oil, Inc. 10-K Cybersecurity GRC - 2024-10-02

Page last updated on October 2, 2024

Laredo Oil, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-10-02 13:31:24 EDT.

Filings

10-K filed on 2024-10-02

Laredo Oil, Inc. filed a 10-K at 2024-10-02 13:31:24 EDT
Accession Number: 0001199835-24-000442

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity We have a range of security measures that are designed to protect against the unauthorized access to and misappropriation of our information, corruption of data, intentional or unintentional disclosure of confidential information, or disruption of operations. We have cloud security tools and governance processes designed to assess, identify, and manage material risks from cybersecurity threats. In addition, we maintain an information security training program designed to address phishing and email security, password security, data handling security, cloud security, operational technology security processes, and cyber-incident response and reporting processes. Our Company is committed to maintaining the highest standards of cybersecurity to protect our data, intellectual property, and customer information from cyber threats. As part of this commitment, we leverage a sophisticated cybersecurity framework that integrates the robust capabilities of the Microsoft cloud ecosystem. We use an outside third-party cloud provider to provide communication and computer services, including email, internet access and file storage and sharing. Access passwords are changed on a regular basis. All employees have received formal training on password controls and on email safety procedures. Our policy requires all employees to send any suspicious emails to our contracted computer expert for evaluation. Access to any sensitive databases is on a limited and need-to-know basis. Should there be a data breach, the board of directors would be immediately notified. As of the filing date of this report, there has been no cyber security incident encountered to the best of our knowledge. The Microsoft cloud ecosystem, including Microsoft 365, Azure, SharePoint Online, Microsoft Defender, and Microsoft InTune, forms the backbone of our cybersecurity infrastructure. These platforms offer advanced security features such as data encryption in transit and at rest, network security controls, identity and access management, and threat protection capabilities. Microsoft’s constant investment in cybersecurity research and development ensures that we benefit from cutting-edge security technologies and practices. 7

Company Information