Company: APPF
Filing Date: 2025-02-06
Form Type: 10-K
Source: 0001433195-25-000013
Chunk: 50

Company: APPFOLIO INC
Filing Date: 2025-02-06
Form: 10-K
Item: Item 1C
Chunk 50
---
 vectors. The CISO oversees a team of information security professionals who are devoted full time to assessing, identifying and managing cybersecurity threats on a day-to-day basis. The CISO attends each quarterly meeting of the RCOC to brief members on information security matters and discuss cybersecurity risks generally.In addition, our management team has established an Enterprise Risk Management Program (the "ERM Program"), which includes processes designed to assess, identify, manage, categorize, and monitor key current and evolving risks facing AppFolio, including cybersecurity risks. Management is made aware of current and evolving cybersecurity risks through ERM Program reporting and periodic updates at weekly executive leadership team meetings. In the event of a material or potentially material cybersecurity incident, senior members of management are promptly informed of such incident and oversee response and disclosure efforts pursuant to the terms of a documented incident response plan.

Notwithstanding the foregoing efforts, there can be no assurance that our cybersecurity risk management program will entirely eliminate all risks from cybersecurity threats or incidents. Like many other businesses, we have experienced, and expect to continually be subject to, cyber-attacks. While these past cyber-attacks have not materially affected and, in our belief, are not reasonably likely to materially affect us, future cybersecurity incidents and threats may materially affect us, including by affecting our business strategy, results of operations, or financial condition. See Item 1A., "Risk Factors" for additional details regarding cybersecurity risks.