Company: ASTE
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000792987-25-000013
Chunk: 298

Company: ASTEC INDUSTRIES INC
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 298
---
 have experienced cybersecurity incidents in the past, we do not believe that any risks from cybersecurity threats have materially affected or are reasonably likely to materially affect our business or financial condition. However, there can be no assurance that we will not suffer a significant event in the future that could materially affect our business, financial position, results of operations or cash flows. For more information on how cybersecurity risk may materially affect our business, financial positions, results of operations or cash flows, please refer to Part I, Item 1A. Risk Factors hereof.

Governance

Our Board of Directors has primary responsibility for evaluating cybersecurity risk management, overseeing our major cybersecurity risk exposures and the steps management has taken to monitor and control these exposures, including policies and procedures for assessing and managing risk, as well as oversight of compliance related to legal and regulatory exposure. 

The management positions responsible for assessing and managing cybersecurity risks include our Director of Cybersecurity and our Chief Information Officer ("CIO"), who reports directly to our Chief Executive Officer ("CEO"). Our CIO is responsible for ensuring that we have a cybersecurity risk management program in place that is fully aligned with business requirements and strategy. Our CIO and Director of Cybersecurity both have over 20 years of cybersecurity oversight experience. Our CIO previously served as CIO for a New York Stock Exchange listed manufacturing company prior to joining the Company. Additionally, our Director of Cybersecurity has experience developing and implementing cybersecurity programs for multiple manufacturing firms.

19

Table of Contents

As part of our defined cybersecurity policies and cybersecurity incident response plan, management is regularly updated on the status of the execution of our cybersecurity strategy and daily operations of the program. This includes regular reporting and evaluation of all cybersecurity incidents, not only those that may be deemed material.Our CIO, supported by our Director of Cybersecurity, provides quarterly reports to the Board, which, generally includes:•Our cybersecurity risk profile;•Any changes to our cybersecurity strategy;•Status of the execution of the cybersecurity strategy; and•Summary of any material cybersecurity incidents that have occurred over the past quarter, including the nature, impact and resolution of incidents.In the event of a material cybersecurity incident, communication to the Board is provided pursuant to our cybersecurity incident response plan.