Midwest Energy Emissions Corp. 10-K Cybersecurity GRC - 2024-04-16

Page last updated on April 16, 2024

Midwest Energy Emissions Corp. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-16 16:36:39 EDT.

Filings

10-K filed on 2024-04-16

Midwest Energy Emissions Corp. filed an 10-K at 2024-04-16 16:36:39 EDT
Accession Number: 0001477932-24-002170

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Cybersecurity Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. Based on our small size and limited number of employees and consultants, we rely extensively on information technology systems managed by third party major service providers to securely process, store and transmit our data to conduct business. Our employees and consultants utilize end point security tools, such as firewalls and anti-virus protection, to protect our data. To date, we have not engaged any assessors, consultants, auditors or other third parties in connection with our risk management system or processes. In connection with our use of third-party services providers, we have certain processes in place to oversee and identify cybersecurity risks from threats and incidents. We are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition. However, there could be cybersecurity threats or incidents in the future that may adversely affect our business. For more information, please refer to Part I, Item 1A. Risk Factors in this Annual Report on Form 10-K. 17 Table of Contents Our overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: the use of antivirus software, virtual private networks, email security, as well as other software to prevent and detect data intrusions. the deployment of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure to vulnerabilities. the review of the security procedures used by third parties that may host or otherwise have access to the Company s data. if necessary, the use of third-party security experts if and when an incident is detected. Governance Our Vice President of Operations oversees risks of cybersecurity threats and will report, as necessary, to the Board of Directors, including promptly reporting any cybersecurity incidents that may pose a significant risk to us. To date, our Vice President of Operations has not had to report any cybersecurity incidents to the Board. Our Vice President of Operations has over 25 years of experience in the industry and has overseen the day-to-day operations of the Company for over 10 years. Among other things, he has been responsible for day-to-day access management, network security and data protection solutions. Our Board of Directors has oversight of management to eliminate cybersecurity risks.

Company Information