Company: AOSL
Filing Date: 2025-08-28
Form Type: 10-K
Source: 0001628280-25-041297
Chunk: 122

Company: ALPHA & OMEGA SEMICONDUCTOR Ltd
Filing Date: 2025-08-28
Form: 10-K
Item: Item 1C
Chunk 122
---
 despite our ongoing efforts we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. Please refer to “Risk Factors” in Part I, Item 1A of this Form 10-K for more information on the risks posed to us by cybersecurity threats. 

Governance   Our senior management team, including our cybersecurity team, are responsible for day-to-day implementation, assessment, and management of our cybersecurity risk management processes. Our cybersecurity team includes Vice President of Information Technology and Information Security Officer with a team of eight full-time information technology professionals and several outside security vendors to manage our information security program. When a cybersecurity incident is identified, our computer incident response team will notify the Information Security Officer immediately, and upon assessment of the nature and severity of the incident, internal and external parties may be further notified to determine the appropriate response strategy, and written preliminary and final reports will be submitted to management. Our Vice President of Information Technology and Information Security Officer have served in various roles in information technology and information security, and together they have over 55 years of experience in this field. Our Information Security Officer is a certified information systems security professional (CISSP). The cybersecurity team has primary responsibility for our overall cybersecurity risk management program, including monitoring the prevention, detection, mitigation, and remediation of cybersecurity incidents, and works in partnership with senior management team, including our Chief Executive Officer and Chief Financial Officer, as well as our Board of Directors.Our Board of Directors (the “Board”) plays an active role in overseeing and managing the Company’s cybersecurity risks. The Audit Committee of the Board has established a Cybersecurity Subcommittee for the purpose of assessing, analyzing and managing the Company’s key cybersecurity and information technology risks, and to ensure that our systems are adequate to protect against security breach and effectively safeguard the Company’s IT infrastructure, assets, intellectual property, and data. The roles and responsibilities of the Cybersecurity Subcommittee are determined, from time to time, by the Audit Committee. The Cybersecurity Subcommittee meets quarterly with our management team to discuss various matters relating to IT and cybersecurity risks, and our senior management team communicates and coordinates directly with the Cybersecurity Subcommittee in the event of any cybersecurity incident.  The Cybersecurity Subcommittee is given the following responsibilities:

36

•Oversight of policies, procedures, plans, and execution intended to provide security, confidentiality, availability, and integrity of the information.•Oversight of the quality and effectiveness of the Company’s policies and procedures with respect to its IT systems;•Review and oversight