MULLEN AUTOMOTIVE INC. 10-K Cybersecurity GRC - 2025-01-24

Page last updated on January 24, 2025

MULLEN AUTOMOTIVE INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-01-24 16:29:36 EST.

Filings

10-K filed on 2025-01-24

MULLEN AUTOMOTIVE INC. filed a 10-K at 2025-01-24 16:29:36 EST
Accession Number: 0001437749-25-001816

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy Cybersecurity risk management is an integral part of Mullen’s overall enterprise risk management framework. We have implemented comprehensive measures to safeguard our information systems, protect sensitive data, and identify, assess and manage material risks from cybersecurity threats. Our cybersecurity program encompasses threat prevention, detection, mitigation, and remediation strategies tailored to the dynamic risk landscape in the automotive sector. Our risk management efforts include threat intelligence gathering, vulnerability assessments, and the integration of advanced cybersecurity technologies. These measures are designed to help protect Mullen’s proprietary systems and customer data from both internal and external cybersecurity threats. From time to time, Mullen has engaged third parties, on an as needed basis, to perform various cybersecurity services and risk assessments. Additionally, we maintain third-party tools to monitor for vulnerabilities. We perform diligence, which includes reviewing SOC II reports, on certain third-party service providers who provide critical data and cloud services in order to oversee and identify risks from cybersecurity threats associated with such critical third-party service providers. Despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. Governance As a function of its oversight role, the Board is responsible for ensuring that material risks are identified and managed appropriately. While the Board of Directors has the ultimate responsibility for risk oversight, the Board of Directors has delegated responsibility for the oversight of data privacy and cybersecurity to the Audit Committee. Senior management of Mullen regularly report to the full Board regarding risks we face, however, there has been no specific reports of risks related to cybersecurity threats that have been discussed with the Board. Our VP of IT and our Director of IT Operations are responsible for assessing and managing risks from cybersecurity threats. Our VP of IT and Director of IT Operations each have over 20 years of experience in information technology, with cybersecurity comprising a significant role in their experience. The VP of IT and the Director of IT Operations are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents as a function of their management of our cybersecurity program. As of the date of this filing, we do not believe that any risks from cybersecurity threats, including as the result of past cybersecurity incidents, have had, or are reasonably likely to have, a material effect on our business strategy, results of operations, or financial condition. While we strive to employ safeguards, no system can guarantee absolute security and we cannot guarantee that any future risk from cybersecurity, including any future cybersecurity incidents, will not be material to our business strategy, results of operations or financial condition.

Company Information