Company: FOX
Filing Date: 2025-08-06
Form Type: 10-K
Source: 0001628280-25-038077
Chunk: 87

Company: Fox Corp
Filing Date: 2025-08-06
Form: 10-K
Item: Item 1C
Chunk 87
---
ITEM 1C.    CYBERSECURITY

The Company maintains a cybersecurity program that is designed to identify, detect, assess and manage cybersecurity risks. The Company’s senior management and its Board are actively involved in the oversight of the Company’s risk management program, of which cybersecurity is an important part. The Company’s cybersecurity program, which aligns to the National Institute of Standards and Technology Cybersecurity Framework (the “NIST Framework”) includes, among other things:•    regular internal and external penetration testing of our technology environments at the application, infrastructure and network level, covering the systems, products and practices collecting or storing confidential business and personal information— including user data—in accordance with the Company’s security policies. This testing is conducted multiple times a year by third-party firms;•    third-party provider security assessments to evaluate associated risks and appropriate internal and third-party provider security controls;•    processes to manage security risks and vulnerabilities;•    mandatory company-wide cybersecurity compliance and information handling training;•     a documented cybersecurity incident response plan that establishes procedures, roles, responsibilities and communication protocols for internal staff and external resources in the event of a cybersecurity incident;•    cybersecurity tools that assist with the automation and orchestration of security alert response based on the relative risk; and•     threat intelligence sharing relationships with industry partners, peers, and government agencies, as needed and appropriate.FOX’s cybersecurity program is based on recognized best practices and standards applicable to our industry. The Company engages a third-party firm to assess the overall maturity of its program against the NIST Framework on a bi-annual basis. This evaluation includes an assessment of how the program evaluates and 

30

mitigates risk, as well as how it compares against industry benchmarks. The results of this evaluation are provided to the Audit Committee of the Board.The Company’s Chief Information Security Officer (“CISO”) leads the Company’s dedicated information security department, which monitors FOX’s prevention, detection, mitigation and remediation efforts related to cyber threats. The CISO regularly consults with the Company’s Co-Chief Privacy Officers, and the Company’s Chief Technology Officer (“CTO”) provides additional oversight of the cybersecurity program, and previously served as the Company’s CISO. The CISO has over 15 years of experience in cybersecurity, information security and technology, including a background in broadcast media and networking and systems engineering, and has held numerous industry certifications.The CISO is in regular communication with senior management regarding cybersecurity matters and provides frequent routine (