Momentus Inc. 10-K Cybersecurity GRC - 2025-04-01

Page last updated on April 1, 2025

Momentus Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-01 14:16:16 EDT.

Filings

10-K filed on 2025-04-01

Momentus Inc. filed a 10-K at 2025-04-01 14:16:16 EDT
Accession Number: 0001781162-25-000008

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. Cybersecurity We recognize the importance of identifying, assessing and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws. Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, internal IT controls, governance, risk and compliance reviews. We describe whether and how risks from cybersecurity threats are reasonably likely to materially affect us, including our results of operations and financial condition, under the heading " Data breaches or incidents involving our technology could damage our business, reputation and brand and substantially harm our business and results of operations. " in Item 1A, " Risk Factors " of Part I of this report. Our Audit Committee is responsible for overseeing cybersecurity risks and updates our Board of Directors on cybersecurity matters as needed. The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified as promptly as practicable of significant new cybersecurity threats or incidents. Management is responsible for the operational oversight of the company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks. As of the date of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. Governance Management is responsible for the day-to-day management of risks we face, while our board of directors, as a whole and through committees, has responsibility for the oversight of risk management. Our Security Committee oversees the management of risks from cybersecurity threats. As required, the full board reviews our major risk exposures, their potential impact on us, and the steps we take to manage them. Our Chief Security Officer (CSO) is responsible for developing, implementing, and maintaining our cybersecurity risk management policies and procedures. The CSO provides regular cybersecurity updates to the Chairman of the Board. Our Cyber Risk Advisory Committee oversees matters regarding the Company’s Information Technology strategy, priorities, and governance, including cybersecurity threats and risk assessments.

Company Information