LENDWAY, INC. 10-K Cybersecurity GRC - 2024-04-01

Page last updated on April 11, 2024

LENDWAY, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-01 10:30:57 EDT.

Filings

10-K filed on 2024-04-01

LENDWAY, INC. filed an 10-K at 2024-04-01 10:30:57 EDT
Accession Number: 0001654954-24-004013

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Lendway s cyber environment at December 31, 2023 consisted primarily of outsourced information technology ( IT ) operations. The outsourced provider has a cybersecurity framework which includes multiple products implemented to ensure the security of Lendway s environment. Annual internal and external vulnerability scans are also completed to ensure we mitigate any risks proactively. The Company s internal operations are PC based and the PCs have up to date security software. Regular phishing exercises are conducted, and employee awareness training is conducted annually by our outsourced provider. Our full Board of Directors and our Audit Committee provide oversight of our risk management program, which includes cybersecurity. The Audit Committee, as part of its charter to review the Company s practices with respect to risk assessment and risk management, receives updates on internal control, including those relating to IT general controls and cybersecurity. With the acquisition of Bloomia on February 22, 2024, the Company will include the IT environment of Bloomia in its cybersecurity processes and oversight at the corporate and board level. Bloomia s cybersecurity is managed by a third party vendor. As of the date of this report, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. 16 Table of Contents

Company Information