Edible Garden AG Inc 10-K Cybersecurity GRC - 2024-04-01

Page last updated on April 11, 2024

Edible Garden AG Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-01 07:30:47 EDT.

Filings

10-K filed on 2024-04-01

Edible Garden AG Inc filed an 10-K at 2024-04-01 07:30:47 EDT
Accession Number: 0001477932-24-001638

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. CYBERSECURITY Cyber Security Governance Oversight of cybersecurity infrastructure is managed by members of our management team, including our Chief Executive Officer and Chief Data Officer. Management works in tandem with a third-party service provider (the Service Provider ). The Service Provider routinely reviews and updates our antivirus and antimalware software, monitors our intrusion detection system and intrusion protection system and reviews and cleans our corporate email system. Other than engaging the Service Provider prior to our initial public offering, given our overall risk profile, the Board has had limited involvement with our cybersecurity risk management. The management team, with support from the Service Provider, would raise any significant cybersecurity risks with the Board. Risk Management and Strategy We believe we have implemented processes that are designed to effectively manage risks from cybersecurity threats. Through our Service Provider, we have established an Incident Response Plan (the IRP ). The IRP lays out our guidelines for responding to and handling cyber incidents. The IRP helps to ensure a quick and organized response in the event of a cyber incident and helps ensure all necessary members of management are informed so action can be taken as soon as possible. Under the IRP, once a cyber incident is identified, a response team will review the details of the cyber incident, inform management and work to secure our systems and fix the vulnerability. An investigation will be conducted, with the assistance of the Service Provider if needed, to determine the root cause of the cyber incident, the materiality of the cyber incident, and any disclosure or legal obligations that will stem from the cyber incident. We have not been the victim of a cyber incident in the past but may be the subject of cyber incidents in the future. See Item 1A, Risk Factors for more information about the risk posed to us by cybersecurity threats.

Company Information