Company: NSA-PB
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001628280-25-008656
Chunk: 44

Company: National Storage Affiliates Trust
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1C
Chunk 44
---
Item 1C. Cybersecurity

Risk management and strategy

We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures aligned to industry standards to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.Management of Material Risks & Integration into Overall Risk ManagementWe have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity awareness and risk management and have incorporated cybersecurity considerations into our decision-making processes. Our risk management team works closely with our IT department to identify, evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. Our risk management team also provides regular reporting to management on our enterprise cybersecurity risk posture.Engagement of Third-parties on Risk ManagementRecognizing the complexity and evolving nature of cybersecurity threats, we engage a range of external experts, including cybersecurity assessors and consultants in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights, so that we can better understand the current and evolving cybersecurity risks and strategies. Our collaboration with these third-parties includes periodic audits, threat assessments, and consultation on security enhancements.Risks from Cybersecurity Threats

We are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations, or financial condition. Refer to “Item 1A. Risk factors” in this annual report on Form 10-K, including “Security breaches through cyber-attacks, cyber-intrusions, or other methods could disrupt our information technology networks and related systems”, for additional discussion about cybersecurity-related risks. 

Governance

The board of trustees is acutely aware of the critical nature of managing risks associated with cybersecurity threats and oversees the Company's cybersecurity risk management activities. Board of Trustees OversightThe audit committee of our board of trustees is central to the board of trustees’s oversight of cybersecurity risks and bears the primary responsibility for this domain. The members of the audit committee have a variety of expertise, including financial, regulatory and risk management. The audit committee reviews our policies with respect to risk assessment and risk management related to cybersecurity. The audit committee and the board of trustees receive updates on the Company’s cybersecurity risks and initiatives periodically. In addition, cybersecurity matters are reported to the audit committee or board of trustees so that the board of trustees and audit committee can effectively carry out their oversight role.

25

Management’s Role Managing RiskOur risk management committee is comprised of