Onfolio Holdings, Inc 10-K Cybersecurity GRC - 2024-04-01

Page last updated on April 11, 2024

Onfolio Holdings, Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-01 16:06:39 EDT.

Filings

10-K filed on 2024-04-01

Onfolio Holdings, Inc filed an 10-K at 2024-04-01 16:06:39 EDT
Accession Number: 0001654954-24-004048

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Cybersecurity Risk Management and Strategy. We depend on software applications, information technology systems, computing infrastructure and cloud service providers to operate our business. Certain of these systems are managed, hosted, provided or used by third parties, to assist in conducting our business and which have their own cyber security measures in place. We implement generally applicable industry standards and best practices processes for the assessment, identification, and management of material risks from cybersecurity threats to our information technology systems. Our Information Security Coordinator oversees our information security policies and procedures. Our Information Security Coordinator maintains a cyber incident reporting and response process and provides management notifications based on the seriousness of any incident. Our information security policies and procedures are required to be reviewed on a regular basis. We have not experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations however, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect our Company and how they may do so, please see Risk Factors - Risks Related to Information Technology Systems, Intellectual Property and Privacy Laws included in Part I, Item 1A of this Annual Report on Form 10-K. If our security measures are breached and an unauthorized party obtains access to our proprietary business information, our information systems may be perceived as being unsecure, which could harm our business and reputation, and our proprietary business information could be misappropriated which could have an adverse effect on our business and results of operations. 42 Table of Contents Cybersecurity Governance. Our Nominating and Corporate Governance Committee has primary responsibility for overseeing our risk-management program relating to cybersecurity, although our Board of Directors participates in periodic reviews and discussion dedicated to cyber risks, threats, and protections.

Company Information