PISMO COAST VILLAGE INC 10-K Cybersecurity GRC - 2023-12-20

Page last updated on April 11, 2024

PISMO COAST VILLAGE INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2023-12-20 16:15:46 EST.

Filings

10-K filed on 2023-12-20

PISMO COAST VILLAGE INC filed an 10-K at 2023-12-20 16:15:46 EST
Accession Number: 0001513162-23-000162

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY. Disclosure of cybersecurity risk, management, & strategy CompuData Supports Pismo Coast Village through their Managed IT Services. This is done through patch management, a managed Network, Managed Security, and Managed 24/7 support. Pismo Coast Village has a comprehensive risk management process that all nodes on the network are set to follow. All external Vendors are SOC II compliant. Our users access all applications utilizing a two-factor authentication method at the Domain level and SSO for third Party applications. Pismo Coast Village has not had a material or data breach. Our strategy is to mitigate risks preventatively. The is implemented through best-in-class cybersecurity strategies preventative measures carried out by our vendor CompuData. Our identifiable risk areas are twofold: First within accounting and second, within taking payments. Our accounting department is hosted on a cloud system utilizing SSL for access and encryption. Our Managed Services company, CompuData, manages risk and preventative cyber security to that server. Within our taking of payments, we are fully PCI compliant within our payment processing service, Clover. No Credit card information is stored or transferred outside of that system. We engage a third-party Vendor as mentioned above, CompuData. Our vendors are whitelisted and are SOC II certified. Our Whitelisted Vendor applications are Newbook, Sage, Clover, and Office 365.

Company Information