U.S. Lighting Group, Inc. 10-K Cybersecurity GRC - 2024-04-16

Page last updated on April 16, 2024

U.S. Lighting Group, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-16 14:29:48 EDT.

Filings

10-K filed on 2024-04-16

U.S. Lighting Group, Inc. filed an 10-K at 2024-04-16 14:29:48 EDT
Accession Number: 0001213900-24-033333

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Risk Management and Strategy We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or data. We have integrated these processes into our overall risk management systems and processes, and they include overseeing and identifying risks from cybersecurity threats associated with the use of third-party service providers. We design and assess our program based on the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF 2.0). This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the NIST CSF 2.0 as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. To protect our information systems from cybersecurity threats, we use various security tools that are designed to protect against cyber security incidents, as well as to identify, escalate, investigate, resolve, and recover from security incidents in a timely manner. We provide cybersecurity awareness training to our new employees and following any potential incident. We have a relatively small work force, and do not have a dedicated information technology department. Instead, we have engaged third-party consultants to evaluate and implement our risk management systems. Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, but may be negatively impacted in the future by cybersecurity incidents. 14 Governance Our board of directors is responsible for monitoring and assessing strategic risk exposure and oversight of our risk management process, including risks from cybersecurity threats. Because our board has only three members, it has not formed a committee tasked with these responsibilities, and addresses them as a whole. However, the board relies on our executive officers for the day-to-day management of the material risks we face, including cybersecurity threats. We have engaged Burk Technology, Inc. to assess the risk of specific cybersecurity threats and identify appropriate tools for the prevention, detection, mitigation, and remediation of cybersecurity incidents. Burk is certified for Fortinet Firewalls, FCSEA, CompTia Network and Security Plus. Burk reports directly to our chief financial officer, who identifies for our directors materials issues requiring the attention of the board.

Company Information