Company: CRUS
Filing Date: 2025-05-23
Form Type: 10-K
Source: 0000772406-25-000014
Chunk: 58

Company: CIRRUS LOGIC, INC.
Filing Date: 2025-05-23
Form: 10-K
Item: Item 1C
Chunk 58
---
, our business strategy, results of operations or financial conditions.  While our cybersecurity risk management strategy is intended to assess, identify and manage material risks from cybersecurity threats, it may not adequately do so in every instance, particularly given the evolving nature of the cybersecurity threat landscape.  We expect that our policies and processes will continue to be subject to update as the risks from cybersecurity threats change.  For more information about risks from cybersecurity threats, and whether they are reasonably likely to materially affect our business strategy, results of operations or financial conditions, please see the Risk factors discussion in Item 1A of this Form 10-K, including “Risks related to system security, cyber-attacks and data breaches”.

Cybersecurity Governance

The Board of Directors’ overall risk oversight function includes receiving reports on the Company’s cybersecurity risks and our risk management processes, and assessing whether our risk management strategies are reasonably designed to address such risks.  The Board has delegated this oversight responsibility to our Audit Committee, which reports periodically to the Board as appropriate.Our Executive Vice President of Global Operations and our Director of Information Security are responsible for ongoing assessment and supervision of cybersecurity risks, supported by a dedicated Information Security team who reports up to those individuals.  Our Director of Information Security has primary oversight of material risks from cybersecurity threats, has over 25 years of experience in cybersecurity-related roles and holds industry-recognized certifications.  Our Executive Vice President of Global Operations and Director of Information Security review and evaluate our cybersecurity readiness through internal cybersecurity measures and metrics, as well as third-party penetration tests and control assessments against industry standards. We also employ various defensive and continuous monitoring techniques designed to escalate potential issues in a timely manner to our Director of Information Security.Our Director of Information Security meets with the Audit Committee at least twice a year to discuss our cybersecurity risks, strategy, and activities, including cybersecurity incidents and responses, cybersecurity systems testing, third-party activities and related topics.  In addition, we have governance and compliance structures that are designed to elevate issues relating to cybersecurity to executive oﬃcers, and, as appropriate, to the Audit Committee and Board.