Global Arena Holding, Inc. 10-K Cybersecurity GRC - 2025-09-26

Page last updated on September 29, 2025

Global Arena Holding, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-09-26 17:50:29 EDT.

Filings

10-K filed on 2025-09-26

Global Arena Holding, Inc. filed a 10-K at 2025-09-26 17:50:29 EDT
Accession Number: 0001493152-25-015825

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy GES relies heavily on information technology systems to operate our election registration, tabulation and online voting business. GES in administering elections manages proprietary and personal data list from its clients. Despite our ongoing investments in cybersecurity measures, we are subject to increasing risks associated with cyberattacks, ransomware, phishing, and other malicious activities. Inadequate account security or organizational security practices, including those of companies of third parties GES utilizes, may result in unauthorized access to our systems and data, and cause irrevocable damage to the Company. Cyberthreats in the election industry are constantly evolving and becoming increasingly difficult in detecting and successfully defending against them. Threat actors, including individual and groups of hackers and sophisticated organizations, including nation-states, state-sponsored organizations, or cybercriminal groups, can pose a threat to GES customers and GES election software infrastructure. Threat actors may also utilize emerging technologies, such as AI and machine learning. Our current capabilities may not detect certain vulnerabilities or new attack methods. A successful cyber intrusion could result in significant business disruption, reputational damage, regulatory penalties, and financial loss. GES maintains cybersecurity insurance, employs robust monitoring tools, and conducts employee training, but these safeguards may not prevent all incidents. Failure to effectively prevent or respond to such incidents could materially and adversely affect the Company and businesses operations and financial condition. Governance Our Board of Directors considers cybersecurity risk as part of its oversight function. Management is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for overall cybersecurity risk management and is responsible for updating the Board, as necessary regarding significant cybersecurity incidents.

Company Information