Stone Point Credit Income Fund 10-K Cybersecurity GRC - 2025-03-26

Page last updated on March 27, 2025

Stone Point Credit Income Fund reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-26 20:29:04 EDT.

Filings

10-K filed on 2025-03-26

Stone Point Credit Income Fund filed a 10-K at 2025-03-26 20:29:04 EDT
Accession Number: 0001410578-25-000486

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity The Fund has processes in place to assess, identify, and manage material risks from cybersecurity threats. The Fund’s business is dependent on the communications and information systems of the Adviser and other third-party service providers. The Adviser manages the Fund’s day-to-day operations and has implemented a cybersecurity program that applies to the Fund and its operations. Cybersecurity Program Overview The Adviser has instituted a cybersecurity program designed to identify, assess, and mitigate cyber risks applicable to the Fund. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Fund relies. The Adviser actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Fund. The Fund relies on the Adviser to engage external experts, including cybersecurity assessors, consultants, and auditors to evaluate cybersecurity measures and risk management processes, including those applicable to the Fund. The Fund relies on the Adviser’s risk management program and processes, which include cyber risk assessments. The Fund depends on and engages various third parties , including suppliers, vendors, and service providers, to operate its business. The Fund relies on the expertise of information technology, legal and compliance personnel of the Adviser when identifying and overseeing risks from cybersecurity threats associated with our use of such entities. Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from the Fund’s Chief Compliance Officer and Adviser’s Director of IT regarding the overall state of the Adviser’s cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and any cybersecurity incidents impacting the Fund. Management’s Role in Cybersecurity Risk Management The Adviser’s Director of IT and internal cybersecurity team are responsible for the cybersecurity program applicable to the Fund (including enterprise-wide cybersecurity strategy, policies, standards, engineering, architecture, and processes), and along with the Fund’s Chief Compliance Officer , are responsible for assessing and managing material risks from cybersecurity threats that impact the Fund. The Adviser’s Director of IT has 25 years of experience advising on and managing risks from cybersecurity. The Adviser’s Director of IT works closely Fund management to administrator, assess, discuss, and prioritize the Fund’s cybersecurity efforts. The Fund’s Chief Compliance Officer oversees the Fund’s oversight function generally and relies on the Adviser’s Director of IT to assist with assessing and managing material risks from cybersecurity threats. The Fund’s Chief Compliance Officer has been responsible for this oversight function as Chief Compliance Officer to the Fund since his appointment and has worked in the financial services industry for more than 15 years, during which time the Chief Compliance Officer has gained expertise in assessing and managing risk applicable to the Fund. The Fund’s management is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Fund, including through the receipt of notifications from service providers and reliance on communications with information technology, legal and compliance personnel of the Adviser. Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats on the Fund are assessed on an ongoing basis, and how such risks could materially affect the Fund’s business strategy, operational results, and financial condition are regularly evaluated as part of the Adviser’s program. During the reporting period, the Fund has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Fund believes have materially affected, or are reasonably likely to materially affect, the Fund, including its business strategy, operational results, and financial condition .

Company Information