Toppoint Holdings Inc. 10-K Cybersecurity GRC - 2025-04-15

Page last updated on April 15, 2025

Toppoint Holdings Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-15 16:37:24 EDT.

Filings

10-K filed on 2025-04-15

Toppoint Holdings Inc. filed a 10-K at 2025-04-15 16:37:24 EDT
Accession Number: 0001213900-25-032145

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY. Risk Management and Strategy The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. Therefore, we have established a cybersecurity and risk management framework, which includes regular cybersecurity risk assessments to identify and evaluate potential cyber-attack threats and information security weakness that may affect our business. The data we collect during our operations primarily includes publicly available operational information from port websites. Additionally, we utilize a third-party software vendor to handle any personally identifiable information directly uploaded by truck drivers via a secure portal. We implement two-factor authentication for accessing emails and software, and enforce user role-based security with periodic password updates and login activity tracking. We plan to implement additional preventive measures, including firewalls, cyber-attack detection systems, and data encryption, to safeguard confidential information and data. We will regularly conduct cybersecurity awareness training for employees to enhance their awareness of potential cybersecurity threats and ensure they take appropriate preventive measures. 28 We have not identified risks from known cybersecurity threats, or experienced any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. In the event of any significant cybersecurity incidents, we will publicly disclose the nature, scope, and impact of the incident, as well as the remediation measures we implement. Governance Board of Directors Oversight Our board of directors oversees the management of risks associated with cybersecurity threats. Management’s Role in Managing Risk The Company’s Chief Financial Officer is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program. Monitoring Cybersecurity Incidents The Company’s management is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement the cybersecurity crisis management plan. Reporting to Board of Directors Significant cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.

Company Information