Company: RITM-PC
Filing Date: 2025-02-18
Form Type: 10-K
Source: 0001556593-25-000007
Chunk: 148

Company: Rithm Capital Corp.
Filing Date: 2025-02-18
Form: 10-K
Item: Item 1C
Chunk 148
---
 could damage our business operations and reputation, increase our costs and subject us to potential liability” in Item 1A. “Risk Factors” for additional description of cybersecurity risks and potential related impacts on the Company.

Governance

Our board of directors oversees the Company’s risk management program, including our cybersecurity program, both directly and through several committees created as part of our risk governance program. Specifically, the Audit Committee of the board, in conjunction with the Regulatory Committee (the “Regulatory Committee”), which focuses on the risk structure and governance related to regulatory risk throughout all lines of business, oversees the Company’s risk management program, which focuses on the most significant risks the Company faces in the short-, intermediate-, and long-term timeframe. Audit Committee meetings and Regulatory Committee meetings include discussions of specific risk areas throughout the year, including, among others, those relating to cybersecurity, and reports from the CISO and Chief Information Officer (“CIO”) on the Company’s enterprise risk profile and the Company’s risk treatment policies and processes on a quarterly basis or as needed. Additionally, we have protocols by which certain cybersecurity incidents are escalated in a timely manner to the Audit Committee and the board of directors.

The Company takes a risk-based approach to cybersecurity and has implemented cybersecurity policies throughout its operations that are designed to address cybersecurity threats and incidents. In particular, the CISO is focused on assessing, managing, mitigating and reporting on cybersecurity threats and risks and is tasked with overseeing and enhancing the security posture of the Company and it subsidiaries. This role involves prioritizing and implementing security initiatives across all organizational units. The CISO plays a critical role in protecting the Company’s assets, data and reputation by developing a robust security strategy and security awareness. Our current CISO brings over 20 years of experience in IT operations and information security with a proven track record working in large financial institutions, mortgage companies and banks, with expertise in managing complex security environments. The CISO, in conjunction with other executive leaders such as the CIO and the Chief Legal Officer, manages the Company’s cybersecurity posture.

In doing so, the CISO receives regular reports prepared by our experienced cybersecurity personnel on cybersecurity threats and continuously reviews risk management measures implemented by the Company to help identify and mitigate data protection and cybersecurity risks.