Inspirato Inc 10-K Cybersecurity GRC - 2025-03-26

Page last updated on March 26, 2025

Inspirato Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-26 16:20:21 EDT.

Filings

10-K filed on 2025-03-26

Inspirato Inc filed a 10-K at 2025-03-26 16:20:21 EDT
Accession Number: 0001820566-25-000031

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity The Company understands the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Cybersecurity processes to manage risks from cybersecurity threats have been incorporated as a part of the Company’s overall risk assessment process. These cybersecurity processes, technologies, and controls to assess, identify, and manage material risks have been incorporated into our operations. To manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, and claims we undertake the below listed activities: - Monitor emerging cybersecurity and data protection laws and implement changes to our processes to comply; - Conduct periodic customer data handling and use requirement training for our employees; - Conduct annual cybersecurity management and incident training for employees involved in our systems and processes that handle sensitive data; - Conduct regular phishing email simulations for all employees; - Carry cyber liability insurance that provides resources and protection against potential losses arising from a cybersecurity incident; and - Maintain a Technical Review Committee which evaluates all third-party technology partners, including their security posture and controls, before we engage with them. Our incident response plan coordinates the activities that we and our cyber liability insurance carrier and associated services e.g., incident response team, breach coach, forensics, etc. take to prepare, respond, and recover from cybersecurity incidents, which include processes to assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. We describe whether and how risks from identified cybersecurity threats have affected or are reasonably likely to affect our financial position, results of operations and cash flows in Item 1A. Risk Factors of this Annual Report on Form 10-K, which disclosures are incorporated by reference herein. We have a cross-functional management team that participates in our “Cybersecurity Risk Committee” (the “Committee”) , comprised of Legal, Cybersecurity Operations, Risk Management, Finance and Accounting and Information Technology, which together have over 15 years of cybersecurity technology leadership experience and have the expertise to be able to assess and manage any material risks from cybersecurity threats. The Committee is responsible for assessing and managing all aspects of our Cybersecurity Program, including the evaluation of various cybersecurity risks and the continued enhancement of our processes and procedures to manage these risks and respond to any confirmed cyberattacks. The Committee also works with various third-party cybersecurity experts in an effort to ensure that we follow industry best practices. The Committee reports regularly to the Audit Committee of the Board , covering current and future planned processes in place to prevent, detect, mitigate and remediate any cybersecurity incidents.

Company Information