LAMAR ADVERTISING CO/NEW 10-K Cybersecurity GRC - 2024-02-23

Page last updated on April 11, 2024

LAMAR ADVERTISING CO/NEW reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-23 10:22:31 EST.

Filings

10-K filed on 2024-02-23

LAMAR ADVERTISING CO/NEW filed an 10-K at 2024-02-23 10:22:31 EST
Accession Number: 0001628280-24-006537

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY We manage risks from cybersecurity threats through our overall enterprise risk management process. Management has created an information security program, which encompasses a dedicated information security team and policies, procedures, and processes for assessing, identifying, and managing risks from cybersecurity threats. We proactively assess, identify, and manage risks from cybersecurity threats through various mechanisms, which from time to time may include internal audits, external audits, penetration tests, and engagement of third parties to conduct analyses of our information security program. 24 Table of Contents Through our centralized enterprise risk management function, we also maintain processes for overseeing and identifying risks associated with third party service providers with whom we do business, including risks related to cybersecurity. While to date, we have not had a major cyber incident against our platforms, nor experienced significant data loss or any material financial losses related to cybersecurity attacks, it is possible that we could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats. See Item 1A. Risk Factors. Our business and operations could suffer in the event of cybersecurity breaches and we may incur significant legal and financial exposure. for further discussion of potential risks related to cybersecurity incidents. Our Senior Vice President of Technology and Innovation and Vice President of Network Infrastructure and Cyber Strategy oversee our cybersecurity program. They hold degrees in industrial engineering and computer science and information systems and decision science, respectively. The team responsible with administering our cyber security program have a combined 35 years of experience in cybersecurity, information security & information technology risk management, governance, risk, and compliance. Our board of directors and our audit committee are regularly updated on cyber security as part of their oversight of relevant cybersecurity risks. These reports address key cybersecurity topics, including the implementation and operation of preventative controls and the detection, mitigation and remediation of cybersecurity incidents.

Company Information