Consolidated Communications Holdings, Inc. 10-K Cybersecurity GRC - 2024-03-05

Page last updated on April 11, 2024

Consolidated Communications Holdings, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-05 08:24:20 EST.

Filings

10-K filed on 2024-03-05

Consolidated Communications Holdings, Inc. filed an 10-K at 2024-03-05 08:24:20 EST
Accession Number: 0001558370-24-002414

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Cybersecurity Risk Management and Strategy We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program, which is based on recognized industry standards and frameworks, is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. 26 Table of Contents Cybersecurity Governance Our Board of Directors (the Board ) regularly considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management s implementation of our cybersecurity risk management program. The Board receives quarterly reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents. The Board also receives briefings from management on our cyber risk management program. Board members receive presentations on cybersecurity topics which may pose potential impacts to the Company s operations from our Chief Technology Officer. Board members also receive external training or attend seminars on cybersecurity topics that impact public companies as part of their continuing education. Our management team, including our Chief Technology Officer, Senior Director of Information Security and other members of the IT team are responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our Chief Technology Officer joined Consolidated in 2017 and has more than 30 years of communications industry experience. Prior to joining Consolidated, he served as the Chief Technology Officer at FairPoint Communications, Inc. and also held key leadership roles at Comcast and Level 3 Communications. Our management team oversees the efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; as well as providing ongoing cybersecurity awareness training for our employees including management.

Company Information