Company: INVUP
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0001641172-25-001193
Chunk: 1114

Company: Investview, Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1
Chunk 1114
---
 logs off the system of
record to prevent log tampering and provides the cybersecurity team functionality to build alerts on specific use cases that are important
and unique to our business. If our applications fail or our software does not successfully block a malicious electronic communication,
employees are required to notify an immediate supervisor or the cybersecurity team promptly, but in no circumstances later than twenty-four
(24) hours after such occurrence.

24

Upon
detection of a cybersecurity incident and initial intake and validation by our cybersecurity team, our incident response team triages
and evaluates the cybersecurity incident, and, depending on the severity, escalates the incident to management and a cross-functional
working group. Any incident assessed as potentially being or potentially becoming material is immediately escalated for further assessment
and reported to executive management. Determination of what resources are needed to address the incident, prioritizing of response activities,
forming of action plans, and notification of external parties as needed are then undertaken by executive management and the cross-functional
working group, led by our Senior Information Officer (SIO). We consult with outside counsel as appropriate, including on materiality analysis and disclosure matters, and
our executive management makes the final materiality and disclosure determinations, among other compliance decisions.

Governance

Our
board, Senior Information Officer (“SIO”) and management actively assess the Company’s cybersecurity and data privacy
risk management practices with the goal of being proactive rather than reactive. Our SIO and management regularly review the Company’s
cybersecurity and data privacy risks, including our policies, controls and procedures for identifying, managing and mitigating such risks.
Our SIO provides management with periodic reports regarding cybersecurity and data privacy measures and procedures, the identification
of security gaps and compliance with applicable cybersecurity and data privacy regulations. Management then briefs our board at scheduled
meetings regarding cybersecurity and data privacy developments.

Management
and our SIO are responsible for day-to-day monitoring of the prevention, detection, mitigation and remediation of cybersecurity incidents.
Our SIO, who reports to our Chief Operating Officer, has primary oversight of the material risks from cybersecurity and data privacy
matters. Our SIO has more than 20 years of experience across various information technology, information security and management roles,
including leading the development and implementation of cybersecurity and data privacy strategies for the employee and customer-facing
aspects of our business.

In 2024, we did not
identify any cybersecurity incidents or threats that have materially affected or are reasonably likely to materially affect our business
strategy, results of operations