Company: FRHC
Filing Date: 2025-07-29
Form Type: ARS
Source: 0000924805-25-000027
Chunk: 98

Company: Freedom Holding Corp.
Filing Date: 2025-07-29
Form: ARS
Chunk 98
---
's implementation at our subsidiaries is largely delegated to the subsidiary staff. Significant subsidiaries at least annually provide updates on their implementation progress, significant cybersecurity incidents, and risks to their senior executives and the experts from our Technology Leadership Centre. The experts periodically consolidate and analyze information about the cybersecurity risk management program, cybersecurity incidents and risks, key initiatives, and other matters relating to cybersecurity processes for reporting to our Chief Technology Officer and our Chief Risk Officer. Both officers at least quarterly report to the Risk Committee of the board of directors. Our Chief Technology Officer also at least annually reports directly to the board of directors including on cybersecurity initiatives, notable incidents, and risks. Our Chief Risk Officer at least annually reports directly to the board of directors including on cybersecurity incidents and risks. Our overall cybersecurity risk management is overseen by the Risk Committee of our board of directors who assists our senior management and the board of directors with their overall risk management responsibilities. Audit or assurance procedures of Controlling Department, internal audit departments and other functions include testing of IT, information security and data protection controls. Our financial reporting department ensures financial performance reliability under U.S. regulatory requirements and provides an independent objective assurance to evaluate the effectiveness of our governance. The department is directly subordinate to the Audit Committee of our board of directors. Notwithstanding our defensive measures and processes, the threats posed by IT failures and cyber-attacks are always present. The potential impact of risks from IT incidents, including whether such IT incidents may be associated with cybersecurity threats to the Company, is assessed on an ongoing basis. We do not maintain insurance policies to mitigate cybersecurity risks because such insurance may not be available or may be more expensive than the perceived benefit. Further, any insurance that we may purchase to mitigate certain risks may not cover all losses. For further discussion of risks from cybersecurity threats, see the section captioned "Risks Related to Information Technology and Cybersecurity" in "Risk Factors" in Part I Item 1A of this annual report. ITEM 2. PROPERTIES We lease and own a number of properties across our business segments: Brokerage, Banking, Insurance, and Other, through which we conduct our operations. We currently lease office space for 257 retail, executive, administrative and operational facilities among other places in Kazakhstan, Cyprus, Uzbekistan, Azerbaijan, Armenia, the United States, Turkey, Germany, Spain, France, Greece, Austria, Bulgaria, Poland, Netherlands and Kyrgyzstan. Our total aggregate leased square footage is approximately 884,115 square feet. We own 37 buildings consisting of an aggregate of approximately