Company: PIII
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0001628280-25-015305
Chunk: 278

Company: P3 Health Partners Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1C
Chunk 278
---
 deems appropriate, regarding cybersecurity incidents it considers to be significant or potentially significant.The Committee reports to the full Board regarding its activities, including those related to cybersecurity. The full Board also receives briefings from management on our cyber risk management program. Board members receive presentations on cybersecurity topics from our Senior Vice President of Technology and Director of Information Systems Security or other internal security staff or external experts as part of the Board’s continuing education on topics that impact public companies.Our management team, including our Senior Vice President of Technology, Director of Information Systems Security, and Director of Information Systems Governance Risk and Compliance, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our management team’s experience spans all aspects of information technology including cybersecurity, IT operations (infrastructure engineering and architecture design), and IT governance audit compliance across industries such as energy, healthcare, pharmaceuticals, and finance. Our Senior Vice President of Technology’s experience includes over 30 years in technology leadership and management, with 25 years within the healthcare sector, specializing in cybersecurity programs, and establishing technology compliance programs with industry standards such as Sarbanes-Oxley, HIPAA, HITRUST, and NIST. Our Director of Information Systems Security’s experience includes over 20 years in IT, with 12 years within the healthcare sector, managing risk assessments and leading security programs using the HITRUST framework to ensure compliance with HIPAA, NIST, ISO27001, and GDPR. Our Director of Information Systems Governance Risk and Compliance’s experiences includes over 25 years in IT audit and security governance, establishing and leading IT GRC programs, directing IT security initiatives, and maintaining relevant certifications including CDPSE, CRISC, and CISA.Our management team takes steps to stay informed about and monitor efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security 

P3 Health Partners Inc. | 2024 Form 10-K | 50

Table of Contents

personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in our IT environment.