JOHNSON OUTDOORS INC 10-K Cybersecurity GRC - 2024-12-11

Page last updated on December 11, 2024

JOHNSON OUTDOORS INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-12-11 15:05:54 EST.

Filings

10-K filed on 2024-12-11

JOHNSON OUTDOORS INC filed a 10-K at 2024-12-11 15:05:54 EST
Accession Number: 0001140361-24-049014

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy We take cybersecurity threats seriously. We have developed and implemented processes to assess, identify and manage material risks from cybersecurity threats. These cybersecurity processes are a part of our overall enterprise risk management system, sharing governance processes and reporting structures with other components of our enterprise-wide risk management system. Our cybersecurity processes include security monitoring and threat hunting through a third-party managed vendor and mandatory, Company-wide employee training. Our cybersecurity processes also extend to the oversight and identification of risks associated with our vendors and customers if their computer systems interface with our information systems. Upon detection of a potentially material cybersecurity incident, we will activate our cyber incident procedure to investigate, contain and remediate the incident. Depending on the extent and severity of the incident, we may engage third-party cybersecurity consultants to assist with our cyber incident procedure. Risks from cybersecurity threats have the potential to materially affect us, including our results of operations and financial condition. Governance The Company has established an Enterprise Risk Committee, which is co-chaired by the Company’s Chief Financial Officer and Chief Legal Officer, and under that framework has chartered a Cybersecurity Sub-Committee, chaired by the Chief Technology Officer. Both committees include various other members of key senior management. Our Board of Directors (including our Audit Committee through delegation as described below), along with our Enterprise Risk Committee and Cybersecurity Sub-Committee, are actively involved in providing oversight of our cybersecurity program. The role of the Board of Directors in the Company’s risk oversight process includes receiving reports and presentations from the Enterprise Risk Committee or other senior management leaders on areas of material risk to the Company, including operational, financial, legal and regulatory, strategic, reputational, cybersecurity and Environmental, Social and Governance (“ESG”) related risks and any measures taken to mitigate such risks. In addition, the Board of Directors regularly reviews and discusses areas of material risk at its meetings. In essence, the Board of Directors oversees a company-wide approach to risk management, carried out by Company management. With respect to cybersecurity risk, the Board (through the Audit Committee) periodically reviews information on management’s policies and processes related to the Company’s cybersecurity and data-protection, including related to monitoring, controlling and mitigating against such risks, and the entire Board receives periodic updates on the Company’s cybersecurity risk management processes. There have been no material cybersecurity incidents in the periods presented in this Report.

Company Information