AGL Private Credit Income Fund 10-K Cybersecurity GRC - 2025-03-12

Page last updated on March 12, 2025

AGL Private Credit Income Fund reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-12 16:55:21 EDT.

Filings

10-K filed on 2025-03-12

AGL Private Credit Income Fund filed a 10-K at 2025-03-12 16:55:21 EDT
Accession Number: 0000950170-25-038042

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity Program Overview AGL Private Credit Income Fund has processes in place to assess, identify, and manage material risks from cybersecurity threats. The Company’s business is dependent on the communications and information systems of AGL US DL Management LLC (the “Adviser”) and other third-party service providers. The Adviser manages the Company’s day-to-day operations and has implemented a cybersecurity program that applies to the Company and its operations. The Adviser has instituted a cybersecurity program designed to identify, assess, and manage cyber risks applicable to the Company. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Company relies. The Adviser actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Company. The Company relies on the Adviser to engage external experts, including cybersecurity assessors, consultants, and auditors to evaluate cybersecurity measures and risk management processes, including those applicable to the Company. The Company depends on and engages various third parties , including suppliers, vendors, and service providers, to operate its business. The Company relies on the expertise of risk management, legal, information technology, and compliance personnel of the Adviser when identifying and overseeing risks from cybersecurity threats associated with our use of such entities. Board Oversight of Cybersecurity Risks The board of trustees of the Company (the “Board”) provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from the Company’s Chief Compliance Officer (“CCO”) regarding the overall state of the Adviser’s cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents impacting the Company . Management’s Role in Cybersecurity Risk Management The Adviser’s Chief Technology Officer (“CTO”), internal information technology team and a managed virtual security operations center are responsible for the cybersecurity program applicable to the Company (including enterprise-wide cybersecurity strategy, policies, standards, engineering, architecture, and processes), and along with the Company’s CCO, are responsible for assessing and managing material risks from cybersecurity threats that impact the Company. The Adviser’s CTO has 20 years of experience in technology, with 10 57 years advising on and managing risks from cybersecurity threats as well as developing and implementing cybersecurity policies and procedures. The Adviser’s CTO works closely with Company management to administrator, assess, discuss, and prioritize the Company’s cybersecurity efforts. Management of the Company is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with risk management, legal, information technology, and/or compliance personnel of the Adviser. Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats on the Company are assessed on an ongoing basis, and how such risks could materially affect the Company’s business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, the Company has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents (of which there were none), that the Company believes have materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, operational results, and financial condition .

Company Information