Company: GDOT
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0001386278-25-000009
Chunk: 61

Company: GREEN DOT CORP
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1C
Chunk 61
---
 Security Officer and Chief Technology Officer.  Annually, the Risk Committee reviews and approves the Information Security Program.  Additionally, the Risk Committee is promptly apprised of any cybersecurity incident that meets established reporting thresholds, and receives ongoing updates regarding any such incident until it has been resolved. At each regularly scheduled Board meeting, the Risk Committee Chair provides the full Board with an update on all significant matters discussed, reviewed, considered and approved by the committee since the last regularly scheduled Board meeting.Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by our Chief Information Security Officer and Chief Technology Officer. Such individuals have collectively over 25 years of prior work experience in various roles involving managing information security, developing cybersecurity strategy, implementing effective information and cybersecurity programs and adhering to relevant compliance requirements as well as several relevant degrees and certifications, including undergraduate degrees in information systems and computer engineering, Certified Information Systems Security Professional, Global Information Assurance Certification, and Internal Security Assessor.These members of management are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the Information Security Program described above, including the operation of our incident response plan. If a cybersecurity incident is determined to be a material cybersecurity incident, our incident response plan and cybersecurity disclosure controls and procedures define the process to disclose such a material cybersecurity incident.As discussed above, these members of management report to the Risk Committee of our Board of Directors about cybersecurity threat risks, among other cybersecurity related matters.