Company: MVIS
Filing Date: 2025-03-26
Form Type: 10-K
Source: 0001641172-25-000783
Chunk: 93

Company: MICROVISION, INC.
Filing Date: 2025-03-26
Form: 10-K
Item: Item 1B
Chunk 93
---
, including
“Our operations could be adversely impacted by information technology system failures, network disruptions, or cybersecurity
breaches,” for additional discussion about cybersecurity-related risks.

Governance

Board
of Directors and Audit Committee

With
delegated authority from our Board of Directors and in accordance with its charter, our Audit Committee is charged with the oversight
of enterprise risk, including risk related to cybersecurity threats. Our Audit Committee Chair is expected to report regularly to our
Board of Directors about our Audit Committee’s oversight of enterprise risk. Our Audit Committee Chair reports quarterly to our Board of Directors specifically about our cybersecurity incident management and governance.

Management,
and specifically our Chief Financial Officer, reports quarterly to our Audit Committee on cybersecurity, including initiatives and
strategies, and incident reporting and any lessons learned. From time to time, management will also engage in informal discussions with members of the Audit Committee about
our cybersecurity practices and risks, including informing our Audit Committee Chair in a timely manner about any cybersecurity
incidents that management determines may have a significant impact on our operations or that may trigger any reporting
obligations.

Our
Audit Committee will conduct an annual review of our cybersecurity measures and the effectiveness of our risk management strategies.

Management

Anubhav
Verma, joined MicroVision in 2021 as our Chief Financial Officer. He is an experienced risk management professional and currently oversees
the Company’s accounting and finance strategies, including risk management. Mr. Verma also oversees our IT team and, with regular
communication with the team, is responsible for approving the IT budget, hiring of IT personnel, including third-party consultants, and
approving cybersecurity processes and other cybersecurity-related matters. Although we do not currently employ a chief information security
officer, we are working with an outside consulting firm that is serving in this role and assisting our internal team with the primary
responsibility of overseeing our cybersecurity measures and risks.

The
day-to-day responsibility for assessing, monitoring and managing our cybersecurity risks resides with our IT team. Across the IT team
we have employees who have in-depth knowledge and decades of cybersecurity industry experience, including prior experience with developing
and overseeing cybersecurity polices and processes for companies required to comply with NIST SP800-171, cybersecurity standards for
companies that store sensitive unclassified information on behalf of the United States government, and former Ibeo employees having experience
with TISAX compliance. Yet, we recognize the evolving and increasing threat that cybersecurity will have on our operations. As part of
our long-term