Company: BWMN
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0001628280-25-012365
Chunk: 137

Company: Bowman Consulting Group Ltd.
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1C
Chunk 137
---
 actions that we have taken and continue to take to reduce the risk of cyber incidents and protect its systems and information may not 

39

Table of Content

successfully protect against all cyber incidents. For more information on how cybersecurity risk may materially affect our business strategy, results of operations, or financial condition, please refer to Item 1A Risk Factors.

Cybersecurity Governance

Our Audit Committee and board of directors provide ultimate oversight of our cybersecurity risk management. Our Chief Information Security Officer, who also functions as our Chief Information Officer (“CIO”), provides quarterly reports to the Audit Committee regarding the evolving cybersecurity risk landscape, including emerging risks, as well as our processes, program and initiatives for managing these risks. The Audit Committee regularly reviews and discusses with management the strategies, processes, procedures and controls pertaining to the management of our information technology operations, including cyber risks and cybersecurity.Our CIO, who reports directly to the CEO, has significant professional experience including senior technical leadership roles at public companies and maintains the certified information systems security professional (CISSP) certification. Under the direction of the CIO, our information technology department continuously analyzes cybersecurity and resiliency risks to our business, considers industry trends and implements controls, as appropriate, to mitigate these risks and conducts regular enterprise-wide training on cybersecurity threats for all employees. This analysis drives our long- and short-term cybersecurity strategies, which are executed through a collaborative effort within the department and are communicated to the board of directors regularly.