Company: EPR-PE
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001045450-25-000051
Chunk: 72

Company: EPR PROPERTIES
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1C
Chunk 72
---
 overseeing both internal cybersecurity risks and those presented by third parties, including vendors, service providers and other external users 

32

of the Company's systems, as well as the systems of third parties that could adversely impact the Company's business in the event of a cybersecurity incident affecting those third party systems.

In addition, the Company conducts frequent security awareness trainings for all associates, utilizes malware, antivirus, and spyware protections and has other protections in place for its network and users. The Company maintains robust end user and administrative user policies governing the use of Company technology. The Company also maintains cyber liability insurance coverage and performs regular vulnerability and penetration assessments. 

The Company's Vice President of Information Systems has been with the Company for over 19 years and has overseen the Company's information systems, including its cyber risk management program, for the last six years. He is a member of the Global Information Assurance Certification Advisory ("GIAC") Board and has received various GIAC certifications in the areas of information security governance and technical controls focused on protecting, detecting and responding to cybersecurity issues. The Company's Chief Financial Officer has over 25 years of experience managing risks at the Company and at similar companies, including risks arising from cybersecurity threats.

As of the date of this report, the Company is not aware of any material risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including the Company's business strategy, results of operations or financial condition.