AMCON DISTRIBUTING CO 10-K Cybersecurity GRC - 2024-11-08

Page last updated on November 8, 2024

AMCON DISTRIBUTING CO reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-11-08 16:21:03 EST.

Filings

10-K filed on 2024-11-08

AMCON DISTRIBUTING CO filed a 10-K at 2024-11-08 16:21:03 EST
Accession Number: 0001558370-24-015063

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy In the ordinary course of our business, the Company is subject to cybersecurity threats and risks which it manages as an important component of its overall enterprise risk management strategy. To identify, assess, and manage cybersecurity threats and risks to our business, the Company has made significant investments in its processes, control environment, and technology solutions to help prevent and mitigate the impact of any such threats and risks. These processes include the use of sophisticated third-party software for continuous monitoring, the use of expert outside consultants, ongoing training and educational programs, regular and periodic updates on new cybersecurity threats and risks, incident response procedures, and the implementation of other cybersecurity best practices wherever possible. These processes also cover risks from cybersecurity threats associated with our use of information technology systems of third-parties upon which we rely. The day-to-day management of the Company’s cybersecurity framework is managed by the Company’s information technology team while operational oversight of its design and function are managed by the Company’s management team including, but not limited to, its Chief Operating Officer (COO), Chief Financial Officer (CFO), Director of Industrial Engineering, and Director of Information Technology, all of whom have substantial experience managing enterprise risk, including cybersecurity risks. Our management team is informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents in accordance with our incident response procedures. Governance The Company’s Board of Directors, working in conjunction with its Audit and Corporate Governance Committees, oversees the Company’s overall enterprise risk management program, including the evaluation of cybersecurity related risks. Our Board receives periodic updates from the Company’s management team regarding technology matters including its cybersecurity framework, and the notification of any material cybersecurity events and/or risks. While the Company believes it has adequate processes and technology in place to detect and respond to cybersecurity threats, the Company is continually at risk given an ever-changing cybersecurity landscape. Accordingly, the Company can provide no assurances that a future cyber-attack would not impact the Company’s business in a material manner. At the effective date of this report filing, however, the Company is not aware of any current or past cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition. For more information on risks related to the Company’s information technology systems, including cybersecurity threats that may materially affect the Company’s business, see the risk factors included under Item 1A of this Annual Report on Form 10-K (“We Rely Heavily on Information Technology Systems to Operate Our Business. Any Disruptions to These Technology Systems or if These Systems were Made Unavailable for Use, May Have a Material Adverse Effect on Our Business”).

Company Information