La Rosa Holdings Corp. 10-K Cybersecurity GRC - 2025-04-15

Page last updated on April 15, 2025

La Rosa Holdings Corp. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-15 17:25:54 EDT.

Filings

10-K filed on 2025-04-15

La Rosa Holdings Corp. filed a 10-K at 2025-04-15 17:25:54 EDT
Accession Number: 0001213900-25-032211

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. The Company acknowledges the increasing importance of cybersecurity in today’s digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition, and reputation. We routinely assess material cybersecurity risks, including potential unauthorized occurrences on, or conducted through, our information systems that may compromise the confidentiality, integrity or availability of those systems or information maintained in them. Our Chief Technology Officer, reporting to the Chief Executive Officer, is primarily responsible for addressing these risks. We devote appropriate resources and designate members of our management to address the risk assessment and mitigation process. As a smaller reporting company, we are proactively leveraging AI and other resources to enhance our cybersecurity measures. While we do not yet have a dedicated cybersecurity team or fully formalized protocols, we are actively developing new practices, incorporating advanced technologies to identify and mitigate risks. Our efforts include ongoing assessments and the exploration of strategic partnerships to strengthen our security posture. Given our current stage of cybersecurity development, we have not experienced any cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches, and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs, and negatively impact our reputation among customers and partners. The Company is in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments, and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity, and the nature of our operations, thereby reducing our exposure to cybersecurity risks. 37 We also have a cybersecurity insurance policy in place and fully utilize its tools, guidance, and policies to ensure compliance and enhance our overall security posture. This coverage supports our risk management efforts by providing additional resources and expertise to help us identify, mitigate, and respond to potential threats effectively. Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and the Company will continue to assess and update our cybersecurity measures in response to emerging threats. For a discussion of potential cybersecurity risks affecting the Company, please refer to Part I, Item 1A - “Risk Factors”.

Company Information