Biglari Holdings Inc. 10-K Cybersecurity GRC - 2024-02-26

Page last updated on April 11, 2024

Biglari Holdings Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-26 06:30:34 EST.

Filings

10-K filed on 2024-02-26

Biglari Holdings Inc. filed an 10-K at 2024-02-26 06:30:34 EST
Accession Number: 0001726173-24-000004

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Our enterprise (the holding company and its operating subsidiaries) is using technology in virtually all aspects of the business. Much like many other businesses, certain of our subsidiaries information systems have been subject to computer viruses, malicious codes, unauthorized access, and other cyberattacks. We expect to be subject to similar attacks in the future as such attacks become more sophisticated. A significant disruption or failure of our technology systems could result in service interruptions, safety failures, security events, regulatory compliance failures, an inability to protect information and assets against unauthorized users, and other operational difficulties. Attacks perpetrated against our systems could result in loss of assets and critical information and expose us to remediation costs and reputational damage. Cyberattacks could compromise confidential customer and employee information. Cyberattacks may result in business interruptions, lost revenues, higher commodity prices, disruption in fuel supplies, lower energy consumption, unstable markets, increased security, repair or other costs, or may materially adversely affect us in ways that cannot be predicted at this time. Our operating businesses are managed on an unusually decentralized basis. There are few centralized or integrated business functions. Consistent with our decentralized management philosophy, our operating businesses individually establish specific practices concerning cybersecurity risks. Although our subsidiaries have taken steps intended to mitigate these risks, including business continuity planning, disaster recovery planning, and business impact analysis, a significant disruption or cyber intrusion at one or more of our significant operations could adversely affect our results of operations, financial condition, and liquidity. Additionally, if we are unable to acquire, develop, implement, adopt, or protect rights around new technology, we may suffer a competitive disadvantage, which could also have an adverse effect on our results of operations and financial condition. Given the wide variations in the nature and size of business activities, specific practices may vary widely among our operating subsidiaries. 8 Table of Contents

Company Information