RED TRAIL ENERGY, LLC 10-K Cybersecurity GRC - 2025-01-15

Page last updated on January 15, 2025

RED TRAIL ENERGY, LLC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-01-15 15:56:04 EST.

Filings

10-K filed on 2025-01-15

RED TRAIL ENERGY, LLC filed a 10-K at 2025-01-15 15:56:04 EST
Accession Number: 0001359687-25-000002

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Cybersecurity Risk Management and Strategy We maintain a data protection and cybersecurity risk management program to assess, identify and manage cybersecurity risks. We also maintain an incident response plan to coordinate the activities we take to protect against, detect, respond to and remediate cybersecurity incidents. In the event of an incident, we intend to follow our incident response plan, which provides a step-by-step framework to follow from incident detection to mitigation, recovery and notification, including notifying functional areas (e.g., legal), as well as senior leadership and the Board of Directors, as appropriate. As part of our risk management program, we regularly conduct vulnerability assessments, as well as internal user training and tabletop exercises. We also conduct self and third-party assessments of our cybersecurity risk management program to evaluate effectiveness and alignment with industry standards and best practices. As part of the above approach and processes, we periodically engage with assessors, consultants, auditors, and other third-parties, for purposes of evaluating our cybersecurity posture and identifying areas for continued focus, improvement and/or compliance. Our Company’s business strategy, results of operations and financial condition have not been materially affected, and we believe that they are not reasonably likely to be materially affected, by risks from cybersecurity threats, but we cannot provide assurance that the Company will not be materially affected in the future by such risks or any future material incidents. For more information about the cybersecurity risks we face, see " ITEM 1A. Risk Factors ." Cybersecurity Governance Our cybersecurity program addresses potential risks, implements processes to support our cybersecurity program and respond to potential cyber incidents. Our cybersecurity program is managed by our senior management with support from a third-party that provides relevant expertise, certifications and skills in cybersecurity. Quarterly risk assessments are performed and incorporated as part of our overall enterprise risk management process, which is overseen by our Board of Directors. The third-party provider provides regular data protection and cybersecurity reports to our senior management who then provides regular reports to the Audit Committee and the Board of Directors. These reports include updates on cybersecurity initiatives, cybersecurity metrics and threat landscape.

Company Information