Company: AIRTP
Filing Date: 2025-06-27
Form Type: 10-K
Source: 0000353184-25-000044
Chunk: 173

Company: AIR T INC
Filing Date: 2025-06-27
Form: 10-K
Item: Item 1C
Chunk 173
---
Item 1C.    Cybersecurity

Cybersecurity Risk Management and Strategy

To effectively prevent, detect, and respond to cybersecurity threats, the Company employs a multi-faceted cybersecurity risk management program supervised by our Senior Director of Technology Infrastructure and Operations ("Sr Director of Tech"), who reports directly to our CEO. The Sr Director of Tech is responsible for leading our enterprise cybersecurity strategy. This responsibility includes establishing processes designed to prevent and monitor potential cybersecurity risks, assessing potential cybersecurity incidents, implementing mitigation measures, and maintaining the cybersecurity program itself. We do this so that we can continuously enhance our cybersecurity capabilities and strengthen our defensive posture.Our capabilities, processes, and other security measures also include, without limitation:•Endpoint Detection and Response software, which monitors for malicious activities on external-facing endpoints (computers, servers, etc.).•Managed Detection and Response partnership with a third-party security firm, which monitors these endpoints on a continual basis. •Cloud monitoring, running on primary public and private cloud environments.•Disaster recovery and incident response plans, including a ransomware response plan.•Training for all personnel with access to digital assets.  

Cybersecurity risk management is an integral part of overall enterprise risk management. As part of its enterprise risk management efforts, the Board of Directors meets with the executive leadership team to assess and respond to critical business risks. These assessments include a review of our cybersecurity programs, as well as an overview of trending cyber threats based on industry intelligence and potential mitigation strategies. Performing these assessments regularly enables the Company to determine key business objectives and the IT assets and capabilities needed to achieve them. In addition, the assessments also provide the executive leadership and the Board of Directors an understanding of the Company’s security landscape and allows it to prepare to respond to threats. Cybersecurity threats continue to be identified as one of the Company’s significant risks, with our Sr Director of Tech assigned as the risk owner. Our Sr Director of Tech has developed expertise in cybersecurity and compliance, enterprise architecture and road mapping, data analytics and customer service through his twenty years of experience in the information technology space. He holds a Bachelor's degree from the University of North Carolina, Charlotte. 

Governance

The Board of Directors has delegated primary responsibility for the oversight of cybersecurity and information technology risks, and the Company’s preparedness for these risks, to the Audit Committee. The Audit Committee serves and functions as the Board of Directors primary oversight body to monitor the Company’s cybersecurity and related information technology risks. The Audit Committee receives periodic updates from the Sr Director of Tech on the Company’s