INTEST CORP 10-K Cybersecurity GRC - 2025-03-13

Page last updated on March 14, 2025

INTEST CORP reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-13 16:05:39 EDT.

Filings

10-K filed on 2025-03-13

INTEST CORP filed a 10-K at 2025-03-13 16:05:39 EDT
Accession Number: 0001437749-25-007520

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. CYBERSECURITY Cyber Security Governance Oversight of cybersecurity risks by management is led by our Information Technology (" IT “) Committee, which is chaired by our Corporate Vice President of IT and Cybersecurity and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer. Among its responsibilities, the IT Committee identifies our material cyber risks and reviews the strategies, processes and controls in place to facilitate the understanding, identification, prevention, measurement, reporting and mitigation of those risks. The IT Committee meets quarterly to review our cyber risk management strategy. A member of the Board attends these meetings as an observer. The Board and senior management provide general oversight and support to the IT Committee. The Board periodically reviews, appraises and discusses with management the effectiveness of our information technology security, data privacy and cyber security and related risks. Risk Management and Strategy Cybersecurity is a key component of our overall risk management system. We are implementing processes that are designed to effectively manage risks from cybersecurity threats. The IT Committee currently has in place an Incident Response Plan (the " IRP “). The IRP lays out our guidelines for responding to and handling cyber incidents. The IRP helps to ensure a quick and organized response in the event of a cyber incident and helps ensure all necessary members of management, the Board and legal counsel are informed so action can be taken as soon as possible. Under the IRP, once a cyber incident is identified, a response team will review the details of the cyber incident, inform management and the Board and work to secure our systems and fix the vulnerability. An investigation will be conducted, with the assistance of third-party consultants if needed, to determine the root cause of the cyber incident, the materiality of the cyber incident, and any disclosure or legal obligations that will stem from the cyber incident. To enhance our cybersecurity defenses and reduce the risk of cybersecurity incidents, we have integrated a range of third-party services into our IT systems. These include a robust detection and response solution that provides continuous monitoring of our environment and in January 2025 we implemented automation that shuts down active threats, endpoint protection across all devices, and the implementation of two-factor authentication for secure access. Additionally, we conduct regular penetration testing to identify and address potential vulnerabilities. We also engage a trusted external cybersecurity consultant to review and update our IRP, ensuring it aligns with the latest industry standards and best practices. We have been the victim of cybersecurity incidents and may be the subject of cybersecurity incidents in the future. See " Item 1A, Risk Factors " for more information about the risk posed to us by cybersecurity threats. 25

Company Information