Capstone Holding Corp. 10-K Cybersecurity GRC - 2025-03-31

Page last updated on March 31, 2025

Capstone Holding Corp. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-31 17:24:10 EDT.

Filings

10-K filed on 2025-03-31

Capstone Holding Corp. filed a 10-K at 2025-03-31 17:24:10 EDT
Accession Number: 0001213900-25-026436

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy Identifying, assessing and managing material cybersecurity threats is important to our operations and business strategy. We have established policies and procedures that are designed to prioritize the safeguard of our information systems. These procedures help identify potential vulnerabilities and manage risks from unauthorized incidents within our information systems that may result in adverse effects on data residing within. We conduct periodic and ad-hoc assessments that are managed by third party information technology providers, to identify potential cybersecurity threats. Upon completion of these risk assessments, the third-party information technology providers help the company assess how to reconfigure or implement additional procedures to mitigate any potential cybersecurity threats. Risks from Cybersecurity Threats We do not currently believe there are any cybersecurity threats or vulnerabilities that would have materially impaired our operations or financial conditions during the fiscal year ended December 31, 2024. Cybersecurity Governance It is the responsibility of our board of directors to monitor and assess potential strategic risk exposure. Our board of directors administers its oversight function as a whole, as well as through the Audit Committee. Our executive management team informs the Audit Committee on cybersecurity risks periodically, with a minimum frequency of once per year.

Company Information