Company: LXP
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0001444838-25-000023
Chunk: 44

Company: LXP Industrial Trust
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1C
Chunk 44
---
 takes the lead on assisting us with the steps and procedures to contain the incident. If our third-party information technology provider is unable to contain the incident, we expect to work with our CTO/CISO and cybersecurity insurer to engage an appropriate vendor for containment.   Once a cybersecurity incident is contained our focus shifts to remediation. Eradication and recovery activities depend on the nature of the cybersecurity incident and may include rebuilding systems and/or hosts, replacing compromised files with clean versions, validation of files or data that may have been affected, increased network monitoring or logging to identify recurring attacks, or employee re-training, among other things. We have specific recovery time objectives and recovery point objectives in our disaster recovery plan.  Our incident response plan provides clear communication protocols, which may include, depending on the incident's classification and other circumstances, our CEO, CFO and COO, our internal and external counsel, our management disclosure committee and the Audit and Cyber Risk Committee and the Board of Trustees. In addition, our COO and CTO/CISO generally engage with external legal counsel with respect to regulatory reporting obligations related to an incident.Following the conclusion of an incident, the incident response team will generally assess the effectiveness of the cybersecurity program and make adjustments as appropriate. Cybersecurity RisksAs of December 31, 2024, we are not aware of any material cybersecurity incidents in the last three years. However, there can be no assurance that our security efforts and measures, and those of our third-party providers, will be effective or that attempted cybersecurity incidents or disruptions would not be successful or damaging. See “Item 1A–Risk Factors–Cybersecurity incidents may adversely affect our business.”

25