Company: NSP
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0001000753-25-000008
Chunk: 44

Company: INSPERITY, INC.
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1C
Chunk 44
---
Item 1C. Cybersecurity.

We recognize the critical importance of developing, implementing, and maintaining a robust cybersecurity risk management, strategy, and governance program in order to safeguard the confidentiality, integrity, and availability of our systems and information.

Board Oversight of Cybersecurity Matters 

Our Board has established oversight mechanisms to help ensure effective governance in managing risks associated with cybersecurity threats. 

In addition to the updates that our Board receives on cybersecurity matters, the Board’s Finance, Risk Management and Audit Committee (the “FRMA Committee”) is tasked with overseeing enterprise risk management. The FRMA Committee reviews and discusses major risk exposures with management, including cybersecurity risks, and steps management has taken to monitor and control such exposures, including our guidelines and policies concerning risk assessment and management. 

Management of and Reporting on Cybersecurity Matters

Our management assumes responsibility for assessing, identifying, and managing cybersecurity risks, threats, and incidents. 

In particular, our Senior Vice President of Innovative Technology Solutions (“SVP-ITS”) is responsible for our overall technology strategy, including overseeing our information security function and plays a pivotal role in assessing and managing all cybersecurity risks, threats, and incidents. The SVP-ITS reports directly to our President and Chief Operating Officer (“President and COO”) and maintains regular dialogue with our President and COO and other key members of our senior management to ensure these individuals are appropriately apprised of our latest cybersecurity posture and developments, such as new threats, incidents, risks, and risk management solutions. Our SVP-ITS prepares reports for each regular Board meeting regarding significant developments in these topics to support the Board in its efforts to have appropriate information to exercise oversight on critical cybersecurity issues. Our current SVP-ITS has decades of experience overseeing leading systems and software development efforts with critical cybersecurity components.  

The SVP-ITS is supported by dedicated information technology and security personnel and resources, including team members that have numerous cybersecurity certifications. Collectively, these personnel and resources allow us to strategically integrate cybersecurity into our broader risk management framework and decision-making process.  

We also have an Enterprise Risk Management Steering Committee (the “ERM Steering Committee”), which is responsible for formally identifying and evaluating risks that may affect our ability to execute our corporate strategy and fulfill our business objectives, including cybersecurity risks. The ERM Steering Committee is chaired by the Company’s chief financial officer and includes the Company’s SVP-ITS, general counsel, internal audit director, and other members of management. The ERM Steering Committee conducts an annual comprehensive risk review of our overall risk profile and analyzes