Company: UONE
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0001041657-25-000013
Chunk: 76

Company: URBAN ONE, INC.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1C
Chunk 76
---
ITEM 1C. CYBERSECURITY

Disclosure Regarding Cybersecurity Risk Management

Assessment and Management of Cybersecurity Risks:Urban One has implemented a structured approach to assessing, identifying, and managing cybersecurity risks. This framework includes ongoing monitoring of threats, the implementation of security controls, and proactive adaptation to evolving risks. Our cybersecurity strategy is designed to safeguard corporate assets, data, and critical systems while ensuring operational resilience.

32

Table of Contents

Our cybersecurity risk management process includes:•Continuous enterprise-wide risk monitoring to assess and respond to emerging cyber threats. Our enterprise risk management assesses the characteristics and circumstances of the evolving business environment and seeks to identify both the potential impacts to our company of a particular risk and the speed with which the risk may manifest;•The deployment of technical security controls, including encryption, endpoint detection and response, and network security protections across our enterprise;•Enterprise-wide employee security awareness programs, including social engineering and phishing simulations and mandatory training;•Collaboration with external cybersecurity experts for penetration testing, vulnerability management, and incident response support; and•Security evaluations for vendors and other third-party service providers to help mitigate supply chain risks. These evaluations include reviewing our service provider and vendor management programs and the related agreements to require prompt notification of cyber incidents, outages and software vulnerabilities to facilitate timely assessment and disclosure of third-party cyber risks. Generally, we require our third-party providers to abide by confidentiality and security processes, particularly for third-party data-processing activities. Our evaluations also include inquiries about the vendor’s or service provider’s cybersecurity history, including any breaches or other incidents. Our third-party security evaluations are limited by their disclosures; therefore, a risk-based approach is used in making vendor and contractual decisions based on those disclosures and the totality of the circumstances, such as whether the third party will have access to personal information or our network.Through these measures, Urban One is committed to maintaining a strong cybersecurity posture and protecting against potential security threats.Material Effects of Cybersecurity Threats and Incidents:Cybersecurity threats have the potential to impact our operations, financial condition, and reputation. While we have not experienced any material cybersecurity incidents during the reporting period (See Note 21 - Subsequent Events), we recognize that such incidents could result in:•Disruption of operations, impacting revenue and productivity; •Unauthorized access to or theft of sensitive data, potentially leading to regulatory and legal implications; and•Reputational harm, affecting customer trust and investor confidence.Urban One employs continuous threat monitoring, security awareness initiatives, and incident