Company: LPSN
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001102993-25-000018
Chunk: 99

Company: LIVEPERSON INC
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1C
Chunk 99
---
 Certified 

42

Information Systems Security Professional (“CISSP”), Certified Information Systems Auditor (“CISA”), Certified Information Security Manager, and Certified in Risk and Information Systems Control. Many members of the information security team also hold CISSP, CISA and other security related certifications. The information security team is made aware of security risks and incidents through a number of channels and activities:•performance of risk assessments on at least an annual basis by the Security Risk Committee;•providing SOC capabilities for the detection and response of cyber incidents;•serving as the point of contact for reporting actual or suspected cyber incidents;•managing compliance and certification for in-scope security related compliance frameworks and regulations;•managing internal and external penetration tests, vulnerability scans, and the Company’s vulnerability disclosure program; and•monitoring of cyber threat intelligence and evaluation and analysis of the potential impact of “zero day” vulnerabilities. Our Board of Directors takes an active role in overseeing the management of cybersecurity risks to the Company. The information security team provides periodic reports to the Cybersecurity and Technology Committee of the Board, as well as to the full Board, the Company’s Chief Executive Officer and other members of senior management, as appropriate. These reports include updates on the Company’s cyber risks and threats, the status of projects to strengthen its information security systems, assessments of the cybersecurity program and the emerging threat landscape. The cybersecurity program is periodically evaluated by internal and external experts with the results of those reviews reported to senior management and the Board of Directors.