Company: FCRX
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000950170-25-023153
Chunk: 125

Company: Crescent Capital BDC, Inc.
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1
Chunk 125
---
 intrusions, but these measures, as well as our increased awareness of the nature and extent of a risk of a cyber-incident, may be ineffective and do not guarantee that a cyber-incident will not occur or that our financial results, operations or confidential information will not be negatively impacted by such an incident.Third parties with which we do business (including those that provide services to us) may also be sources or targets of cybersecurity or other technological risks. We outsource certain functions and these relationships allow for the storage and processing of our information and assets, as well as certain investor, counterparty, employee and borrower information.While we engage in actions to reduce our exposure resulting from outsourcing, ongoing threats may result in unauthorized access, loss, exposure or destruction of data, or other cybersecurity incidents, with increased costs and other consequences, including those described above. Privacy and information security laws and regulation changes, and compliance with those changes, may also result in cost increases due to system changes and the development of new administrative processes.

50

ITEM 1B.	UNRESOLVED STAFF COMMENTS 

None. 

ITEM 1C.	CYBERSECURITYThe Company is externally managed by the Adviser and has no employees or internal information systems. Thus, the Company relies on the Adviser and the Administrator, their parent company, Crescent, as well as the custodian and other service providers to protect the Company’s information from cybersecurity threats. The Company’s Chief Compliance Officer (the “CCO”), together with Crescent’s  Head of Information Technology,  oversee the Company's risk management policies and procedures related to cybersecurity risks, subject to the oversight of the Board of Directors. Crescent uses various security tools and procedures that help the Company identify, escalate, investigate, resolve and recover from cybersecurity incidents in a timely manner.  The CCO and Crescent also review key Company service providers’ compliance and risk management policies and procedures related to cybersecurity matters, evaluate such service providers’ use of information systems which have the potential to subject the Company to information technology vulnerabilities and receive reports from the Company’s service providers regarding any cybersecurity threats and incidents. As part of the oversight of the Company’s key service providers, Crescent engages a third-party consultant to conduct a cybersecurity assessment and preparedness analysis on such service providers on an annual basis. The CCO and the Head of Information Technology provide regular reports to the Board of Directors regarding significant risks to the Company, including, among others, those relating to cybersecurity. In addition, the CCO informs the Board of Directors regarding material cybersecurity matters as