Company: EVCM
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001853145-25-000009
Chunk: 96

Company: EverCommerce Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1C
Chunk 96
---
 topics from our Senior Vice President of Security Operations and internal security staff.

Our management team, including our Chief Information Security Officer (CISO)/Senior Vice President of Information Technology and Security (SVP), is responsible for assessing and managing, and mitigating cyber risk and security threats. The Security team has primary responsibility for our overall cybersecurity risk management program and supervises both internal cybersecurity personnel and external cybersecurity consultants and contractors. The Security team members have diverse experience in security strategy, architecture, and operations. Additionally, the CISO/SVP has more than 30 years’ experience leading transformative security and technology. The CISO/SVP has earned the following certifications: Certified Information Systems Manager, Department of Homeland Security, Certified Incident Command, Certified Technical Emergency Response Training, Certified Incident Response, and the penetration testing team leader holds Offensive Security Certified Professional and Certified Red Team Operator certifications and the additional Security Operations team members hold a Security + certification.Our Security Operations team, in coordination with our legal and compliance teams, supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment. Our Security Operations team meets monthly with key executives and management to provide updates regarding the Company’s cybersecurity efforts. For more information, see the section titled “Risk Factor— Unauthorized disclosure, destruction or modification of data, disruption of our software or services or cyber breaches could expose us to liability, protracted and costly litigation and damage our reputation.”