Company: SQFTP
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001437749-25-010185
Chunk: 2016

Company: Presidio Property Trust, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1B
Chunk 2016
---
We have no unresolved staff comments regarding our periodic or current reports.

ITEM 1C. CYBERSECURITY

   Presidio Property Trust uses a cross-departmental approach to addressing cybersecurity risk, including input from senior management, employees, external consultants, and our Board of Directors (the "Board"). Senior management devote significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats in a timely and effective manner, including providing periodic training to staff and an annual third-party review of the Company’s current posture to protect against threats. The Audit Committee of the Board of Directors oversees the steps taken by Presidio Property Trust’s management to monitor and mitigate cybersecurity risks. Senior management briefs the Audit Committee and the Board of Directors on cybersecurity matters on at least an annual basis.
    
   The Company operates almost exclusively in a Software-as-a-Service (SaaS) IT environment. In addition to assessing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of third-party service providers. The internal business owners of the hosted applications are required to document quarterly user access reviews and obtain a System and Organization Controls (SOC) 1 and/or SOC 2 report from our SaaS vendors. With assistance from an external consultant, management conducts an annual review of third-party SOC reports with a specific focus on their data protection procedures. If a third-party vendor is not able to provide a SOC report, management takes additional steps to assess their cybersecurity preparedness and assess our relationship with them on that basis. Our assessment of risks associated with the use of third-party providers is a significant part of the Company’s overall cybersecurity risk management framework.
    
   The Company has also engaged a third-party managed service provider to manage server, network, and email security, including continuous monitoring and industry-leading antivirus software. Presidio Property Trust has robust business continuity and disaster recovery procedures in place, and an insurance policy that provides for network security liability, event response and recovery, direct business interruption, contingent business interruption, cyber extortion, social engineering, and computer fraud should an incident occur.
    
   In addition, we have Company-wide policies and procedures concerning cybersecurity matters, including access security, system change management, development lifecycle, incident management and business continuity/disaster recovery policies. These policies go through an annual internal review process and are approved by appropriate members of management. Presidio Property Trust uses a third-party consultant to assess the Company’s compliance with Sarbanes Oxley requirements.
    
   Presid