Company: GLRE
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0001385613-25-000007
Chunk: 504

Company: GREENLIGHT CAPITAL RE, LTD.
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1A
Chunk 504
---
 effectively manage our cybersecurity risk, we employ a comprehensive approach encompassing risk assessment, identification, and mitigation, all aligned with the rigorous standards and principles. Cybersecurity and IT compliance risk metrics are monitored regularly to assess, identify, manage and protect our environment.  Periodic audits of IT and Cybersecurity are carried out as part of internal and external audits, are performed by professionals and form a part of our overall risk management system and processes.Our approach to third-party cybersecurity underscores a commitment to robust risk management and adherence to industry best practices. By implementing comprehensive measures in line with recognized standards, we ensure that our third-party cybersecurity protocols are aligned with rigorous standards. Regular assessments, SOC reviews, and collaborative efforts are integral components of our strategy, aimed at fostering a secure and resilient ecosystem that safeguards sensitive information and maintains the integrity of our digital infrastructure in partnership with external entities.

We have a Chief Information Security Officer ("CISO") and have an IT Steering Committee ("ITSC"). Our CISO is responsible for establishing the cybersecurity vision for the Company, determining and prioritizing cybersecurity initiatives, and keeping abreast of developing security threats. The ITSC reports to the Board and Audit Committee, is chaired by our Head of IT and Software Development (“Head of IT”), and has our CISO, CFO, COO, and SEC Reporting Officer as some of its members.  Our CISO brings over three decades of expertise in the IT Industry and is a member of ISACA, showcasing a rich portfolio of industry certifications like the Certified Information Security Manager (“CISM”), Certified Data Privacy Solutions Engineer (“CPDSE”), and Microsoft Certified Systems Engineer (“MCSE”). The CISO also holds accreditations from vendors such as CISCO and Microsoft.  Our Head of IT brings two decades of experience in aligning technology initiatives with business goals and managing IT strategy. With a background of over 15 years in insurance and reinsurance, the Head of IT is responsible for ensuring the implementation and adherence to governance and cybersecurity frameworks. Other members of the ITSC hold relevant qualifications and collectively, the ITSC has substantial experience and expertise in cybersecurity, risk, strategy, and management.The ITSC meets at least quarterly to discuss and approve IT and Cybersecurity matters. The ITSC produces and approves an annual IT budget, as well as an Incident Management and Response plan through which the CISO and the ITSC are informed about cybersecurity incidents.To assist with mitigating the risks of cybersecurity threats, periodic cybersecurity training is provided to employees, vendors, and members of the Board. Further, to mitigate