METLIFE POLICYHOLDER TRUST 10-K Cybersecurity GRC - 2024-03-27

Page last updated on April 11, 2024

METLIFE POLICYHOLDER TRUST reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-27 16:39:34 EDT.

Filings

10-K filed on 2024-03-27

METLIFE POLICYHOLDER TRUST filed an 10-K at 2024-03-27 16:39:34 EDT
Accession Number: 0000937834-24-000006

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Pursuant to the Trust Agreement and other operational agreements among the parties, the Custodian is responsible for implementing and maintaining measures to protect the systems on which the Trust s operational data is stored and processed, including third party systems, and the information security risks associated with the same. There are no directors, executive officers or other employees of the Trust. The Custodian is required by contract to ensure it has implemented, and requires its critical vendors to implement, cybersecurity and data protection measures that are reasonable and appropriate for the operation of, and enterprise risks facing, the Custodian, which measures also include processes to assess, identify and manage risks from cybersecurity threats that may materially affect the Trust. Such contract requires the Custodian to inform MetLife, Inc., of any actual or reasonably suspected data security incident, including any loss, compromise, unauthorized use, access, or disclosure of information provided to it as contemplated thereunder. During the period covered by this report, the Trust has not identified risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Trust, including its results of operations or financial condition. For further discussion of risks related to cybersecurity, see Risk Factors The Custodian or any of its vendors may fail to protect the confidentiality and integrity of data, including 7 Table of Contents Beneficiary confidential information, as a result of a failure in any of their respective cybersecurity or other information security systems, or disaster recovery plans, and any such failure may also adversely affect the Trust s operations.

Company Information