Getaround, Inc 10-K Cybersecurity GRC - 2024-03-28

Page last updated on April 11, 2024

Getaround, Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-28 20:00:49 EDT.

Filings

10-K filed on 2024-03-28

Getaround, Inc filed an 10-K at 2024-03-28 20:00:49 EDT
Accession Number: 0000950170-24-038301

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Protecting our technology platform and the data that our guests and hosts share with us is critical to our business. We maintain a process for identifying, assessing, and managing material risks from cybersecurity threats as part of our broader risk management processes. We employ privacy, safety, and security professionals to oversee cybersecurity risk management and mitigation, incident prevention, detection, and remediation. Leadership for these teams are professionals with cybersecurity expertise across multiple industries, including our CTO, VP of Engineering, and head of information technology. Our executive leadership team, along with input from these teams, is responsible for our overall enterprise risk management processes and regularly consider cybersecurity risks in the context of other material risks to the company. As part of our cybersecurity risk management system, our incident management process tracks and logs privacy and security incidents across our business to remediate and resolve any such incidents. Significant incidents are reviewed regularly by our CTO, VP of Engineering, and head of IT to determine whether further escalation is appropriate. Any incident assessed as potentially being or potentially becoming material is immediately escalated for further assessment to the broader executive leadership team. We consult with outside counsel as appropriate, including on materiality analysis and disclosure matters, and our senior management makes the final materiality determinations and disclosure and other compliance decisions. Our management apprises our independent registered public accounting firm of matters and any relevant developments. The Board has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with the Board. Our business strategy, results of operations and financial condition have not been materially affected by cybersecurity threats, including as a result of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information about the cybersecurity risks we face, see the section entitled Risk Factors in this report.

Company Information