NOBILITY HOMES INC 10-K Cybersecurity GRC - 2025-01-30

Page last updated on January 30, 2025

NOBILITY HOMES INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-01-30 15:11:58 EST.

Filings

10-K filed on 2025-01-30

NOBILITY HOMES INC filed a 10-K at 2025-01-30 15:11:58 EST
Accession Number: 0000950170-25-011000

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity The Company’s senior management is actively involved in oversight of the Company’s risks and cybersecurity represents an important component of the Company’s overall approach to enterprise risk management (“ERM”). In general, the Company seeks to address cybersecurity risks through an approach that is focused on preserving the confidentiality, security and availability of the information that the Company collects and stores by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. Risk Management and Strategy The Company’s cybersecurity program is focused on the following key areas: Technical Safeguards: The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including two factors: authentication, firewalls, anti-malware functionality, email threat protection and access controls, which are evaluated and improved through vulnerability assessments. 4 Third-Party Risk Management : The Company maintains a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of the Company’s systems, as well as the systems of third parties that could adversely impact on our business in the event of a cybersecurity incident affecting those third-party systems. Education and Awareness: The Company provides training, support and alerts for personnel regarding cybersecurity threats to equip the Company’s personnel with effective tools to address cybersecurity threats, and to communicate the Company’s evolving information security policies, standards, processes and practices. Governance Senior management, in coordination with the Company’s third-party service providers specializing in information technology, works collaboratively across the Company to implement a program designed to protect the Company’s information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents. Through ongoing communications with third party service providers, Senior Management monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents. Cybersecurity incidents have not materially affected the Company’s results of operations or financial condition, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. 5

Company Information