Company: AEHR
Filing Date: 2025-07-28
Form Type: 10-K
Source: 0001654954-25-008553
Chunk: 216

Company: AEHR TEST SYSTEMS
Filing Date: 2025-07-28
Form: 10-K
Item: Item 1B
Chunk 216
---
 our Board of Directors is informed oversight of our risk management processes, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, as well as through the Audit Committee of the Board of Directors (the “Audit Committee”). The Audit Committee has primary responsibility for oversight of information security risks, including fraud, vendor, data protection and privacy, business continuity and resilience, and cybersecurity risks, and provides regular updates to the Board of Directors on such matters. The Audit Committee receives regular reports from our Chief Operating Officer on, among other things, the Company’s cyber risks and threats, the status of projects to strengthen the Company’s information security systems, assessments of the Company’s security program and the emerging threat landscape. Information security risk is a significant oversight focus area for the Audit Committee, as well as the entire Board of Directors. Over the course of fiscal year 2024, the Audit Committee received four separate cybersecurity briefings from our Chief Operating Officer.

Our Chief Operating Officer is primarily responsible for assessing and managing our material risks from cybersecurity threats. Our Chief Operating Officer, who leads a team responsible for enterprise-wide cybersecurity strategy, policy, standards, architecture and processes, has extensive experience and background in information technology, cybersecurity, enterprise strategy, risk management. Additionally, our Chief Operating Officer chairs our Cybersecurity Incident Response Team, which is responsible for prevention, identification, containment, eradication and remediation of cybersecurity incidents. He consults with experts in enterprise security and risk management to ensure our intellectual property and devices are protected. While we have not experienced a material information security (cybersecurity) incident, we maintain an information security (cybersecurity) risk insurance policy as a matter of good practice.

Item 2. Properties

The Company’s principal administrative and production facilities are located in Fremont, California, in a 51,289 square foot building. The Company’s lease was renewed in December 2022 and expires in September 2030 with an option to extend the lease for another five years. In April 2025, it became reasonably certain that the Company would exercise the five-year lease extension option due to the remodeling of the Fremont office. The Company leases a 492 square foot sales and support office in Utting, Germany. The lease, which began February 1, 1992 and contains an automatic twelve months renewal, at rates