Company: GMRE
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001558370-25-001938
Chunk: 22

Company: Global Medical REIT Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1C
Chunk 22
---
ITEM 1C. CYBERSECURITY

​

Information about cybersecurity risks and our risk management processes is collected, analyzed and considered as part of our overall enterprise risk management. The Company recognizes the critical importance of maintaining the trust and confidence of our tenants and business partners. The Board plays an active role in overseeing management of our risks, and cybersecurity represents an important component of the Company’s overall approach to risk management and oversight. We believe we have built a strong and collaborative risk management culture focused on awareness which supports appropriate understanding and management of our key risks. Each employee is accountable for identifying, monitoring and managing risk within their area of responsibility.​The Company maintains cybersecurity prevention and response plans and procedures (the “Cybersecurity Policies”) that set forth the Company’s plan to prevent, manage, report and resolve cybersecurity events. The Cybersecurity Policies set forth the Company’s policies and procedures for cybersecurity event prevention, including the Company’s (i) network and computer systems acceptable use policy, (ii) data backup procedures, (iii) business continuity plan, (iv) data retention policy, (v) disaster recovery plan, (vi) email use and security policy, (vii) network change management procedures, and (viii) password and authentication requirements policy. The Cybersecurity Policies also (i) provide indicators that Company employees should be aware of to recognize a cybersecurity event, (ii) outline the roles and responsibilities for Company employees and other third parties with respect to the Company’s cybersecurity incident response team (“CSIR Team”), (iii) set forth the steps to take in response to a cybersecurity incident, including