Karman Holdings Inc. 10-K Cybersecurity GRC - 2025-04-09

Page last updated on April 10, 2025

Karman Holdings Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-09 20:12:43 EDT.

Filings

10-K filed on 2025-04-09

Karman Holdings Inc. filed a 10-K at 2025-04-09 20:12:43 EDT
Accession Number: 0000950170-25-052639

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cyberse curity We recognize the critical importance of maintaining the safety and security of our systems and data and we take a holistic approach to the oversight and management of cybersecurity and related risks. This approach is supported by our Board of Directors and management who are actively involved in the oversight of our risk management program. Like all companies that utilize technology, we face significant cybersecurity threats that include, among other things, attempts to gain unauthorized access to sensitive student and employee information; attempts to compromise the integrity, confidentiality and/or availability of our systems, hardware and networks, and the information on them; insider threats; malware; ransomware; threats to the safety of our directors, officers and employees; and threats to our facilities, infrastructure and service. As cybersecurity threats may arise, the cybersecurity team focuses on responding to and containing the threat and minimizing any business impact, as appropriate. In the event of a perceived threat or possible cybersecurity incident, the cybersecurity team is trained to assess, among other factors, student safety impact, data and personal information impact, the possibility of business operations disruption, projected cost, if any, and potential for reputational harm, with support from external technical, legal and law enforcement support, as appropriate. Management of the Company is responsible for overseeing our enterprise risk management. In that regard, management receives periodic updates, as appropriate (and no less frequently than annually), regarding the Company’s cybersecurity risk management processes and the risk trends related to cybersecurity. Our Board of Directors, in coordination with the Audit Committee, shall review and discuss with management the Company’s risks related to information security, including cybersecurity. While we have experienced minor cybersecurity threats in the past, such as spear phishing or smishing (SMS phishing), to date no such threats have materially affected the Company or our financial position, results of operations and/or cash flows. We continue to invest in the cybersecurity and resiliency of our networks and to enhance our internal controls and processes, which are designed to help protect our systems and infrastructure, and the information contained therein. We maintain cybersecurity insurance coverage in amounts that we believe are adequate to address any incidents such as data destruction, extortion, theft, hacking, denial of service attacks and other such incidents. 39 See “Risk Factors- Technology failures or cybersecurity breaches or other unauthorized access to or use of our information technology systems or sensitive or proprietary information could have a material adverse effect on the Company’s business and operations.”

Company Information