Company: MTCH
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000891103-25-000027
Chunk: 126

Company: Match Group, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1C
Chunk 126
---
 and Hinge, obtaining certification for their Information Security Management System (ISMS) under the ISO/IEC 27001:2022 standard.We conduct regular reviews and tests of our information security program and leverage audits by our internal audit team and ongoing testing by our red team. We employ external services to conduct tabletop exercises, penetration and vulnerability testing, simulations, and other exercises to evaluate the effectiveness of our information security program and improve our security measures and planning across Match Group’s businesses. The results of these assessments are reported to the Audit Committee of our Board of Directors.We have established standardized and comprehensive incident response and recovery plans across Match Group’s businesses. Our incident response and recovery plans address — and guide our employees, management, and our Board of Directors on — our response to a cybersecurity incident, and our procedures with regard to material incidents. We regularly test and evaluate the effectiveness of our incident response process.Our systems periodically experience directed attacks intended to lead to interruptions and delays in our service and operations as well as loss, misuse or theft of personal information (of third parties, employees, and our users) and other data, confidential information or intellectual property.We have not identified risks from cybersecurity threats, including from previous cybersecurity incidents, that have materially affected us. However, we face ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect our business strategy, results of operations, or financial condition. Any significant disruption to our service or unauthorized access to our systems could result in a loss of users and adversely affect our business, financial condition, and results of operations. Further, a penetration of our systems or a third-party’s systems or other misappropriation or misuse of personal information could subject us to business, regulatory, litigation and reputation risk, which could have a negative effect on our business, financial condition, and results of operations. While Match Group maintains cybersecurity insurance, the costs related to cybersecurity threats or disruptions may not be fully insured. For additional discussion of cybersecurity risks, see “Item 1A Risk factors—Risks relating to our business—We may not be able to protect our systems and infrastructure from cyberattacks and may be adversely affected by cyberattacks experienced by third parties.”

Governance

Board Oversight

Our Board of Directors, in coordination with the Audit Committee, oversees our management of cybersecurity risk, including our annual enterprise risk assessment, where we assess key risks within the company, including security and technology risks and cybersecurity threats. The Audit Committee directly oversees our cybersecurity program. The Audit Committee receives quarterly cybersecurity updates from management, including risk assessments