Company: NPO
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0001164863-25-000009
Chunk: 193

Company: Enpro Inc.
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 193
---
 “lunch and learns”, monthly communication updates, and relevant cybersecurity learning modules; •Insurance - cybersecurity insurance policies and periodic reviews of our policies and coverage levels; and

15

•Monitoring Legal/Regulatory Developments – review of emerging data protection, data privacy, and other relevant cybersecurity laws and regulations to determine appropriate changes to cybersecurity controls and processes.

Please see 1A. Risk Factors in this Form 10-K for more information regarding cybersecurity-related risks that could materially affect our business strategy, results of operations, or financial condition, including under the heading “Our business may be adversely affected by information technology disruptions”.

Board and Management Oversight

Our Board of Directors has delegated to its Audit and Risk Management Committee (the “Audit Committee”), which consists of all of our non-management directors, the authority and responsibility to oversee our company’s compliance program, including our cybersecurity program. Accordingly, the Audit Committee oversees our approach to cybersecurity risk management and plays a critical role in the governance of our cybersecurity risk management program. From a management perspective, our Chief Information Security Officer (“CISO”) and Senior Vice President and Chief Information Officer (“CIO”) lead our cybersecurity efforts.  Our CISO has extensive experience in cybersecurity, including creating and supporting cybersecurity programs for larger publicly-traded companies, obtaining cybersecurity certifications, participating in relevant cybersecurity leadership communities, and public speaking engagements on cybersecurity topics. He leads a cross functional cybersecurity team, which includes members of our legal department and internal audit function.  As part of his job function, our CISO is charged to remain informed of the latest developments in cybersecurity, including the evolving threat landscape, as well as risk management improvement methods. This continual focus and understanding of the threat landscape, as well as risk treatment practices, is required to ensure that the CISO can effectively manage the Company’s efforts to prevent, detect, mitigate, and remediate cybersecurity incidents.  Our CISO implements a program and supporting processes to proactively assess systems for vulnerabilities, while taking a risk-based approach to prioritize remediation steps. Should a cybersecurity incident occur, the CISO would reference an incident response plan and supporting playbooks to support the incident response process. We regularly test our incident response process by leveraging a combination of internal resources and trusted third-party consultants to test our response readiness and the completeness of our incident response plan through the use of tabletop exercises.Our CISO and CIO regularly advise the Audit Committee on cybersecurity risks and the company’s cybersecurity program, including quarterly updates and comprehensive briefings to the Audit Committee annually. During these briefings, our cybersecurity