Company: CIMO
Filing Date: 2025-11-06
Form Type: 10-Q
Source: 0001409493-25-000028
Chunk: 67

Company: CHIMERA INVESTMENT CORP
Filing Date: 2025-11-06
Form: 10-Q
Item: Item 3
Chunk 67
---
 our management’s experience, estimates, models and assumptions. These analyses rely on models which utilize estimates of fair value and interest rate sensitivity. Actual economic conditions or implementation of investment decisions by our management may produce results that differ significantly from the estimates and assumptions used in our models and the projected results shown in the above tables. These analyses contain certain forward-looking statements and are subject to the safe harbor statement set forth under the heading, “Special Note Regarding Forward-Looking Statements.”

Enterprise Risk Management 

We employ a “Three Layers of Defense Approach” to Enterprise Risk Management designed to assess and manage our operational, strategic, and financial risks. The “First Layer of Defense” consists of assessing key risks indicators facing each respective business unit within the Company. Our risk management unit is a separate group that acts as the “Second Layer of Defense”. The risk management unit partners with various business units to enhance their understanding, monitoring, managing and escalating risks as appropriate. The financial reporting unit operates under the requirements of the Sarbanes Oxley. The “Third Layer of Defense” consists of many of our internal controls which are subject to an independent evaluation by our third-party internal auditors. As an independent third party, the mandate of the internal auditor is to objectively assess the adequacy and effectiveness of our internal control environment to improve risk management, control and governance processes. Periodic reporting from the risk management unit is provided to executive management and to the Audit Committee of the Board of Directors. 

Cybersecurity Risk

Our cybersecurity risk management and strategy is incorporated into our Enterprise Risk Management process. Our Board of Directors, in coordination with the Audit Committee and the Risk Committee, oversees management of cybersecurity risk. Please refer to Item 1C, “Cybersecurity” in our Annual Report on Form 10-K for the year ended December 31, 2024 for additional information about our cybersecurity risk management, strategy and governance.

Business Continuity Plan 

Our Business Continuity Plan is prepared with the intent of providing guidelines to facilitate (i) employee safety and relocation; (ii) preparedness for carrying out activities and receiving communication; (iii) resumption and restoration of systems and business processes and (iv) the protection and integrity of the Company’s assets. 

Our Business Continuity Plan is designed to facilitate business process resilience in a broad range of scenarios with a dedicated Disaster Recovery Team which is comprised of executive management, head of technology, and professionals across our various business units. Our Business Continuity Plan identifies the critical systems and processes necessary for business operations as well as