Company: PSEWF
Filing Date: 2025-03-04
Form Type: 20-F
Source: 0000950170-25-032340
Chunk: 164

Company: Paysafe Ltd
Filing Date: 2025-03-04
Form: 20-F
Item: Item 16I
Chunk 164
---
 also reviews at least quarterly the major data management risk exposures, and the steps management has taken to monitor and control such exposures. The Joint COO Risk Committee also provides quarterly validation of information technology, information security, operational and data management risks at the Company and divisional levels in accordance with the Enterprise Risk Governance Policy, Enterprise Risk Lifecycle Policy, and Global Enterprise Risk Management Policy. The Committee reports to the Risk Oversight Committee of the Board.
The Technology Operations Committee is chaired by the Chief Operating Officer and is comprised of senior leaders across Technology and Operations departments, including the CISO. The Technology Operations Committee meets monthly and reviews key metrics across the Chief Operating Officer’s organization, including cybersecurity events & incidents, network & endpoint controls, vulnerability

management, security awareness, phishing simulation results, regulatory training, access management, IT incidents, and change management.
The Company operates a Business Continuity Management System which is certified as compliant with ISO22301:2019. In support of this program, our Operational Resilience Steering Committee meets quarterly and is chaired by our Chief Operating Officer. The remit of this committee is to ensure the Operational Resiliency program is suitable to maintain the delivery of services and minimize impact to our customers in the event of an unplanned disruption, along with oversight of operational resiliency, business continuity, disaster recovery, and crisis management achievements and provide support and direction to overcome challenges in realizing the program’s aims & objectives. Core members of this committee include our Chief Information Security Officer, Chief Legal and People Officer, Chief Financial Officer, Chief Risk and Compliance Officer and Chief Growth Officer, along with representation from our Technology Operations leadership. This committee is used as a vehicle to present overall performance of the program including delivery of metrics regarding business impact assessments (BIAs), Disaster Recovery Testing results, along with any audit findings and non-conformities.
In 2024, the Company began preparing for the Digital Operational Resilience Act (DORA), effective January 17, 2025, across the EU. To align our Operational Resilience program with DORA, we have enhanced the program by mapping critical business capabilities to associated technologies and third-party information and communication technology (ICT) service providers, establishing a dedicated ICT Risk Management Framework aligned with our overarching Enterprise Risk Management Framework, revising our ICT Incident and Cybersecurity Incident Response procedures to align with emerging regulatory reporting criteria, and introduced revised contractual terms for ICT service providers supporting critical functions.
The Company also has various steering committees created for specific security improvement initiatives, as deemed necessary, to ensure that