Company: AOSL
Filing Date: 2025-08-28
Form Type: 10-K
Source: 0001628280-25-041297
Chunk: 121

Company: ALPHA & OMEGA SEMICONDUCTOR Ltd
Filing Date: 2025-08-28
Form: 10-K
Item: Item 1C
Chunk 121
---
Item 1C        Cybersecurity

Risk Management and Strategy We recognize the importance of managing cybersecurity threats and risks related to our business, and we have adopted a multi-faceted and proactive strategy to identify, evaluate, address, respond and neutralize cybersecurity threats and attacks. We employ a combination of technical solutions, security policies and procedures, employee training programs, and regular security audits to enhance and fortify our defenses.  We utilize advanced monitoring tools and anomaly detection systems to swiftly identify any suspicious activities or deviations from normal operation. Our security infrastructure includes firewalls, intrusion detection systems, encryption protocols, and access controls to protect our systems and data from unauthorized access or malicious attacks. In the event a cybersecurity incident is detected, we have established incident response procedures to contain the threat, minimize the impact, and restore normal operations as quickly as possible.  We also conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect our information systems that are vulnerable to such cybersecurity threats.  We believe that our cybersecurity risk management process has been and continues to be an integral part of our overall risk management process of the Company as our cybersecurity team collaborates closely with our information technology team, senior management, Audit Committee and Cybersecurity Subcommittee, and internal audit team to address any such threats and incidents.Our cybersecurity team plays a critical role in managing our cybersecurity risk. They oversee security controls and orchestrate our response to incidents on a day-to-day basis, including threats arising internally or from our vendors, suppliers or other third parties that we conduct business with.  In addition, we have developed and implemented information security policies, standards, procedures and security guidelines that are based on industry standards, particularly the National Institute of Standards and Technology (NIST) Cybersecurity Framework.  Furthermore, we have implemented and maintained employee policies design to reduce risk of cyber-attacks and educate employees on protocol in the event of a potential cybersecurity incident. We use third-party service providers in various functions throughout our business. We have implemented stringent processes to oversee and manage cybersecurity risk with these third parties, which includes risk assessment activities, enforcement of policies to ensure compliance with current cybersecurity standards and monitoring activities, and periodic review of potential cyber breaches announcements made by the third-party service providers.

We are not aware of any risks from cybersecurity threats that have materially affected our business strategy, results of operations or financial condition or are reasonably likely to have a material effect. However, cyber-attacks are increasing in frequency, sophistication and intensity, and