VALUE LINE INC 10-K Cybersecurity GRC - 2025-07-29

Page last updated on July 29, 2025

VALUE LINE INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-07-29 13:46:06 EDT.

Filings

10-K filed on 2025-07-29

VALUE LINE INC filed a 10-K at 2025-07-29 13:46:06 EDT
Accession Number: 0001437749-25-023754

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. CYBERSECURITY We believe that information security is a critical component of our business strategy. Therefore, we maintain and continuously assess and strengthen our cyber security program. Management is responsible for the day-to-day administration of the Company’s risk exposures and has adopted a risk management framework including identification, analysis and response to risks affecting our business. The Company has established a committee of senior leaders which is chaired by the Company’s Executive Director of Information Technology. We regularly engage third-party services to conduct evaluations of our security controls, which can include penetration testing, independent audits, or consulting on best practices to address new challenges. These evaluations include testing both the design and effectiveness of security controls. We rely on third-party service providers for a variety of services to run our information systems. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers. A cyber-attack at a third-party service provider could have a significant impact on our business, and we continuously monitor the risks associated with our service providers. The Audit Committee has responsibility for the oversight of the Company’s risk management program, including technology and cybersecurity risks facing the Company. The audit committee receives briefings from management and the executive director of information technology about cybersecurity risk management and the overall technology and cybersecurity environment. We believe that currently we have not encountered a cybersecurity event that has had a material impact on our business. See Item 1A. “Risk Factors” for a discussion of our cybersecurity risks. 18

Company Information