INTERNATIONAL ISOTOPES INC 10-K Cybersecurity GRC - 2024-03-29

Page last updated on April 11, 2024

INTERNATIONAL ISOTOPES INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-29 12:02:17 EDT.

Filings

10-K filed on 2024-03-29

INTERNATIONAL ISOTOPES INC filed an 10-K at 2024-03-29 12:02:17 EDT
Accession Number: 0001437749-24-010010

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. CYBERSECURITY The operation of our business is dependent on the secure functioning our computer infrastructure. This infrastructure is used to maintain key processes including management of sensitive company information and operation of sales, record-keeping, and accounting functions. We employ a specialized third-party information technology (“IT”) management firm to monitor and manage our cybersecurity functions. Processes employed include real-time monitoring of company communications and IT activities and consultation and risk assessment of company procedures. Additionally, our third-party IT firm provides education to management and employees regarding our specific IT risks. All our employees receive information security training (including data protection and fraud awareness) on an annual basis. Department managers are given additional risk management training as part of periodic management meetings. Our activities are monitored at all times by our IT firm we regularly meet with our them to review our cybersecurity response plans, discuss any needed updates, and identify risk management actions to be taken. The IT firm reports all matters of cybersecurity including any threats, breaches, or risks directly to our Chief Financial Officer who reports directly to the Chief Executive Officer. Updates regarding cybersecurity are provided to our directors at least annually and as needed for any important developments including cybersecurity breaches and risks. We carry a cybersecurity insurance policy to help cover any costs that may occur from a cybersecurity incident. Although risks from cybersecurity threats and implementation of our cybersecurity program have not materially affected our business strategy, business operations or our financial condition, a cybersecurity incident could have a material adverse effect in the future if it were to cause business disruption or data loss. 13 Table of Contents

Company Information