CPS TECHNOLOGIES CORP/DE/ 10-K Cybersecurity GRC - 2025-03-17

Page last updated on March 17, 2025

CPS TECHNOLOGIES CORP/DE/ reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-17 17:00:41 EDT.

Filings

10-K filed on 2025-03-17

CPS TECHNOLOGIES CORP/DE/ filed a 10-K at 2025-03-17 17:00:41 EDT
Accession Number: 0001437749-25-008029

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity is an area of increasing concern to the management of and investors in CPS. While CPS has been International Traffic in Arms Regulations (ITAR) compliant for many years, that in itself does not mitigate the risks of a cybersecurity incident. The Company is currently also working towards full compliance with NIST 800 - 171 as well as CMMC compliance . In working towards this goal, CPS has retained an outside consulting firm to help us implement the policies, processes and procedures to further mitigate cybersecurity risks. CPS generally keeps all employee personally identifiable information with its payroll service provider. Each year the provider furnishes us with their Service Organization Controls (“SOC”) report which includes their cybersecurity policies and procedures. Management is not aware of any previous cybersecurity incidents of any significance. Nevertheless, there is always a risk that a phishing attempt, ransomware or other attack by a bad actor could be successful. Although CPS is generally down the supply chain from prime contractors, the fact that we do work in the aerospace and defense industries does make us a potential target. Please refer to the risk factors titled " Manufacturing interruptions or delays could affect our ability to meet customer demand and lead to higher costs " and " If we are subject to cyber-attacks, we could incur substantial costs and, if such attacks are successful, we could incur significant liabilities, reputational harm, and disruption to our operations " in “Risk Factors” in Part I, Item 1A of this Form 10 -K for more information on the risks posed to us by cybersecurity threats. Based on information currently available, management does not believe that there is a reasonably likely risk of these issues, nevertheless the possibility of one occurring cannot be completely ruled out.

Company Information