BOXABL Inc. 10-K Cybersecurity GRC - 2025-04-14

Page last updated on April 14, 2025

BOXABL Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-14 17:19:59 EDT.

Filings

10-K filed on 2025-04-14

BOXABL Inc. filed a 10-K at 2025-04-14 17:19:59 EDT
Accession Number: 0001641172-25-004605

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Risk Management and Strategy. The Company’s cyber risk management strategy has consisted of a focus on minimizing our attack surface and leveraging industry standard cyber threat prevention, detection, and remediation tools. The Company assesses cyber security risk as follows: (i) We have executed this strategy with a cloud-first approach, awareness training, and deliberate use of well-established vendors for software and hardware solutions. (ii) During February 2024, the Company engaged HUB International as its national insurance broker and risk services consultant. HUB brings industry expertise specifically regarding cybersecurity. (iii) The Company consulted with HUB and consulting firm, Cyber Risk Opportunities, to assess its network infrastructure and cyber posture, mitigate cybersecurity threats and protect the Company’s shareholders. To date, no cybersecurity threats have materially affected our business strategy, operations, or financial condition. 17 Corporate Governance Our board of directors has oversight of our strategic and business risk management and has delegated cybersecurity risk management oversight to the Audit Committee of our board of directors (Audit Committee). Our Audit Committee is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. Management is responsible for identifying, assessing, and managing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, maintaining cybersecurity policies and procedures, and providing regular reports to our board of directors, including the Audit Committee. In response to the departure of our IT Manager in 2024 and a number of other IT personnel in 2025, the Company’s management is in discussions with a number of third parties service providers to provide IT security services as well as the process to hire a new head of IT. In addition, the Company engaged Cyber Risk Opportunities to perform network penetration testing in March 2025 and their findings were reported to the Company’s Audit Committee. Each of their findings have been remediated and were contained as of the date of this report.

Company Information