Terreno Realty Corp 10-K Cybersecurity GRC - 2024-02-07

Page last updated on April 11, 2024

Terreno Realty Corp reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-07 16:01:03 EST.

Filings

10-K filed on 2024-02-07

Terreno Realty Corp filed an 10-K at 2024-02-07 16:01:03 EST
Accession Number: 0001476150-24-000004

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Cyber Risk Management and Strategy We rely on information technology in our operations, and any material failures, inadequacies, interruptions, security failures, social engineering attacks or cyber-attacks could harm our business. Management of cybersecurity risks is a component of our overall risk management strategy, which is overseen by our senior management team and our board of directors. We rely on a managed IT service provider with a longstanding relationship with the Company to help manage cybersecurity risks. Our managed IT service provider conducts testing of our controls and environment, including penetration testing, to identify and remediate cybersecurity risks. We have an employee education program that is designed to raise awareness of cybersecurity threats to reduce our vulnerability as well as to encourage consideration of cybersecurity risks across functions. Before contracting with certain third parties, such as our local property managers, or purchasing third party technology or other solutions that involve exposure to 23 Table of Contents sensitive company or tenant information, we conduct diligence on those third parties, which includes a security review. We maintain back-ups and disaster recovery plans to restore our information in the event of an incident. Additionally, as a public company, we are subject to Sarbanes-Oxley Act ( SOX ) requirements and must undergo independent audits of information technology general controls in support of internal control over financial reporting. Governance Related to Cybersecurity Risks Our third-party managed IT service provider reports to our Chief Financial Officer, Chief Accounting Officer, and Chief Operating Officer on cybersecurity matters, including cybersecurity risks. These senior executives are involved in management of information security procedures and periodically brief the board of directors on information security matters. Our board of directors plays an important role in our risk oversight and discharges its duties both as a full board and through its committees. Our board is involved in risk oversight through its direct decision-making authority with respect to certain significant matters and review of our overall business strategy, as well as indirectly through the further oversight of management delegated to each of the board s committees. Our board of directors relies on management to bring significant matters impacting our company to its attention but has processes for receiving information regarding such matters and providing oversight. As reflected in the audit committee charter, the audit committee oversees our processes and policies relating to certain risk assessment and risk management matters, including with respect to cybersecurity risks. The audit committee administers its risk oversight function by receiving periodic reports from members of senior management on areas of material risk to our company. Our audit committee discusses our cybersecurity program at least annually, receives updates on relevant developments and considers steps that our management has taken to monitor and seek to mitigate any risk exposures.

Company Information