Company: PNNT
Filing Date: 2025-11-24
Form Type: 10-K
Source: 0001193125-25-293703
Chunk: 9

Company: PENNANTPARK INVESTMENT CORP
Filing Date: 2025-11-24
Form: 10-K
Item: Item 1C
Chunk 9
---
37

CybersecurityThe Company has effective processes in place to assess, identify, and manage material risks from cybersecurity threats. The Company’s business is dependent on the communications and information systems of the Investment Adviser. The Company also relies on the communications and systems of other third-party service providers. Cybersecurity Program OverviewThe Adviser has instituted a cybersecurity program designed to identify, assess, and manage cyber risks applicable to the Company. The Adviser's cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Company relies. The Adviser actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Company. The Company relies on the Adviser to engage external experts, including cybersecurity assessors, consultants, and auditors to evaluate cybersecurity measures and risk management processes, including those applicable to the Company. The Company relies on the Adviser’s risk management program and processes, which include cyber risk assessments.The Company depends on and engages various third parties, including suppliers, vendors, and service providers, to operate its business. The Company relies on the expertise of risk management, legal, information technology, and compliance personnel of the Adviser when identifying and overseeing risks from cybersecurity threats associated with our use of such entities.Board Oversight of Cybersecurity RisksThe Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats.  The Board receives periodic updates from the Company’s Chief Compliance Officer ("CCO") regarding the overall state of the Adviser’s cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents impacting the Company. Management's Role in Cybersecurity Risk Management The Company’s management, including the Company’s Chief Financial Officer (“CFO”) and CCO, is responsible for assessing and managing material risks from cybersecurity threats. The CFO and CCO of the Company oversee the Company’s oversight function generally and rely on Information Technology staff of, and consultants to, the Adviser to manage the assessment and management of material risks from cybersecurity threats. The CFO has been responsible for his oversight function as CFO to the Company for three years and has worked in the financial services industry for more than 30 years, during which time the CFO has gained expertise in assessing and managing risk applicable to the Company. The CCO has been responsible for oversight functions for the Company for three years.  The current CCO has been serving as CCO since April 2025 and has worked in the financial services