Company: CMCT
Filing Date: 2025-03-07
Form Type: 10-K
Source: 0000908311-25-000017
Chunk: 64

Company: Creative Media & Community Trust Corp
Filing Date: 2025-03-07
Form: 10-K
Item: Item 1A
Chunk 64
---
 information, increased cybersecurity protection and insurance costs, litigation, regulatory enforcement, damage to our tenant and stockholder relationships, material harm to our financial condition, cash flows and the market price of our securities or other adverse effects. Our Operator’s and Administrator’s IT networks and related systems are essential to the operations of our business and our ability to perform day-to-day operations (including managing our building systems). Our Operator and Administrator have implemented processes, procedures and internal controls to help mitigate cybersecurity incidents, but these measures do not guarantee that a cybersecurity incident involving our Operator or Administrator will not occur or that attempted security breaches or disruptions would not be successful or damaging. A cybersecurity incident involving our Operator’s or Administrator’s IT networks and related systems could materially adversely impact our business, financial condition, results of operations, cash flow or our ability to satisfy our debt service obligations or to maintain our level of distributions on our Common Stock or Preferred Stock.

Our Operator, Administrator and their respective affiliates, in the course of providing onsite property management, leasing, accounting and/or services to us, collect and retain certain personal information provided by our tenants and vendors. Our Operator, Administrator and their respective affiliates rely on computer systems to process transactions and manage our business. We can provide no assurance that the data security measures designed to protect confidential information on such systems established by our Operator, Administrator and their respective affiliates will be able to prevent unauthorized access to such personal information. There can be no assurance that their efforts to maintain the security and integrity of the information collected and their computer systems will be effective or that attempted security breaches or disruptions will not be successful or damaging. Even the most well protected information, networks, systems and facilities remain potentially vulnerable because the techniques used in such attempted security breaches evolve and generally are not recognized until launched against a target, and, in some cases, are designed not be detected and, in fact, may not be detected. Accordingly, our Operator, Administrator and their respective affiliates may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures, and thus it is impossible for us to entirely mitigate this risk.

14

If we fail to maintain an effective system of internal control over financial reporting, we may not be able to accurately report our financial results.

An effective system of internal control over financial reporting is necessary for us to provide reliable financial reports, prevent fraud and operate successfully as a public company. As part of our ongoing monitoring of internal controls, we may discover material weaknesses or significant deficiencies in our internal controls that we believe require remediation. If we discover such