Company: KVHI
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0001007587-25-000003
Chunk: 90

Company: KVH INDUSTRIES INC \DE\
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1C
Chunk 90
---
 larger, well-known third-party service providers with significantly greater cybersecurity capabilities than we possess. Because we rely on their greater expertise, our ability to identify and remediate weaknesses or vulnerabilities in the services they provide is limited. We have not engaged third parties to assess our cybersecurity defenses or to audit our cybersecurity program, nor have we conducted direct or indirect technical evaluations of the information systems that our third-party service providers use.

Our Information Security Officer (“ISO”) is responsible for implementing, supervising and maintaining the WISP, including the implementation of prevention measures. The ISO reports directly to the VP Network Systems/Services Engineering, who is also our Chief Information Security Officer (“CISO”). The CISO establishes the company-wide system security plan and defines the parameters of users’ access privileges. The CISO has over 30 years in the network, security systems engineering fields and has been with KVH for 15 years. Before KVH, the CISO worked in the telecom and ISP spaces covering transport, design and implementations. In these roles, the CISO was responsible for all network-oriented security and developed in-depth experience on core security platforms. At KVH, the CISO has been lead on security as a service for customer implementations.We have also implemented an Incident Response Plan (“IRP”), which provides a set of guidelines on the appropriate responsive actions to take in the event of a cybersecurity incident, depending on the particular facts and circumstances of the incident.The audit committee assists the Board of Directors in overseeing our cybersecurity program. Both the Board of Directors and the audit committee receive regular reports regarding material cybersecurity developments. In the case of a security incident, the ISO will report the incident directly to the Chief Executive Officer, Chief Financial Officer, CISO and Senior Vice President, General Counsel & Compliance Officer. The breach will then be communicated to the audit committee dependent on the materiality of the incident.

Aside from our general efforts to protect ourselves from global cybersecurity threats, for the period covered by this annual report, management has not identified any risks from cybersecurity threats or cybersecurity incidents that we believe have had a material effect, or that are reasonably likely to have a material effect, on our business strategy, results of operations or financial condition. However, we cannot provide any assurance that they will not be materially affected by such threats or incidents in the future.