AIRGAIN INC 10-K Cybersecurity GRC - 2026-02-26

Page last updated on February 26, 2026

AIRGAIN INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2026-02-26 16:16:28 EST.

Filings

10-K filed on 2026-02-26

AIRGAIN INC filed a 10-K at 2026-02-26 16:16:28 EST
Accession Number: 0001193125-26-076752

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Cybersecurity Risk Management and Strategy We maintain processes and reference various security industry frameworks and other guidance designed to help us to assess, identify, and manage material risks from cybersecurity threats. Cybersecurity risk management is integrated into our broader enterprise risk management framework and is considered alongside other operational, legal, compliance, strategic, and financial risks. Our cybersecurity risk management processes are designed to address risks associated with our information technology systems, connected products, and third-party relationships. These processes include evaluating cybersecurity risks, implementing controls intended to mitigate identified risks, and monitoring for potential cybersecurity threats and vulnerabilities. We also engage third-party service providers from time to time to assist with aspects of our cybersecurity risk management program. We assess cybersecurity risks associated with third-party service providers as part of our vendor onboarding process. This includes review of security documentation, such as independent audit reports, and completion of vendor security questionnaires. We also implement internal technical safeguards, including endpoint monitoring and threat detection capabilities, to monitor and mitigate cybersecurity risks within our environment. While we continue to evolve our business and technology offerings, including software-enabled and connected products, we recognize that cybersecurity threats are increasingly sophisticated and may not be fully prevented. Accordingly, our cybersecurity risk management processes are intended to reduce the likelihood and potential impact of cybersecurity incidents; however, there can be no assurance you that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information. Cybersecurity Governance Our board of directors considers cybersecurity risk as part of its overall risk oversight responsibilities and has delegated oversight of cybersecurity and information technology risks to the Audit Committee. The Audit Committee receives periodic updates from management regarding cybersecurity risks and related matters . Our management team is responsible for assessing and managing material risks from cybersecurity threats. Management's responsibilities include implementing and maintaining cybersecurity risk management processes, monitoring cybersecurity risks, and responding to cybersecurity incidents. Management reports to the Audit Committee regarding cybersecurity risks and incidents as appropriate. The Company's cybersecurity risk management program is overseen by its Chief Technology Officer (CTO), who has more than 30 years of experience in technology leadership roles spanning wireless communications, semiconductor systems, cloud infrastructure, and secure embedded platforms. In these roles, the CTO has overseen product security architecture, enterprise information technology, and cybersecurity risk management initiatives. He also receives ongoing education and training to remain current on evolving cybersecurity threats, regulatory development, and industry best practices. Management also receives regular updates from internal personnel, external advisors, and third-party service providers to assess and address cybersecurity risks. Cybersecurity Incidents As of the date of this report, we have not identified any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we cannot assure you that we will not experience cybersecurity incidents in the future that could have a material adverse effect on our business. We face risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. See "Risk Factors - Risks Relating to Data Privacy." 39

Company Information