Lifeloc Technologies, Inc 10-K Cybersecurity GRC - 2025-03-28

Page last updated on March 28, 2025

Lifeloc Technologies, Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-28 16:16:32 EDT.

Filings

10-K filed on 2025-03-28

Lifeloc Technologies, Inc filed a 10-K at 2025-03-28 16:16:32 EDT
Accession Number: 0001079973-25-000507

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity Risk Management and Strategy We rely on third party providers and outsourced IT services to monitor and address cybersecurity related risks, including installing software for threat protection and malware. Such third party providers are tasked with notifying management of any material risks or cybersecurity concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or appropriate. Based on the results of our risk assessments, if deemed necessary or appropriate, we take steps to re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. We intend to work with outside counsel and third party service providers to further develop our expertise, processes and procedures with respect to cybersecurity protection and our response plan. To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially affected our business strategy, results of operations, or financial condition. Cybersecurity Governance Our Audit Committee of our Board of Directors is tasked with general oversight of our risk management process, including risks from cybersecurity threats. Members of management provide periodic briefings to the Audit Committee of our Board of Directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. In furtherance thereof, the committee is responsible for monitoring and assessing strategic risk exposure.

Company Information