Company: INRE
Filing Date: 2025-03-05
Form Type: 10-K
Source: 0000950170-25-033568
Chunk: 134

Company: Inland Real Estate Income Trust, Inc.
Filing Date: 2025-03-05
Form: 10-K
Item: Item 1A
Chunk 134
---
 actual or threatened terrorist attack, other act of violence or war, including armed conflicts, could result in increased volatility in, or damage to, the United States and worldwide financial markets and economy.

Item 1B.	Unresolved Staff Comments

None.

Item 1C.	CybersecurityAssessment, Identification and Management of Material Risks from CybersecurityWe rely on the cybersecurity strategy and policies implemented by Inland. Inland’s cybersecurity strategy prioritizes detection and analysis of and response to known, anticipated or unexpected threats, effective management of security risks and resilience against cyber incidents. Inland’s cybersecurity risk management processes include technical security controls, policy enforcement mechanisms, monitoring systems, tools and related services, which include tools and services from third-party providers, and management oversight to assess, identify and manage risks from cybersecurity threats. Inland has implemented and continues to implement risk-based controls designed to prevent, detect and respond to information security threats and we rely on those controls to help us protect our information, our information systems, and the information of our investors, and other third parties who entrust us with their sensitive information.

30

Inland’s cybersecurity program includes physical, administrative and technical safeguards, as well as plans and procedures designed to help our sponsor and Business Manager to prevent and timely and effectively respond to cybersecurity threats and incidents, including threats or incidents that may impact us and our Business Manager. Inland’s cybersecurity risk management process seeks to monitor cybersecurity vulnerabilities and potential attack vectors, evaluate the potential operational and financial effects of any threat and mitigate such threats. The assessment of cybersecurity risks, including those which may impact us and our Business Manager, is integrated into Inland’s risk management program. In addition, Inland periodically engages with third-party consultants and key vendors to assist it in assessing, enhancing, implementing, and monitoring its cybersecurity risk management programs, including performing penetration testing of Inland’s networks, and security assessments of the effectiveness of Inland’s information technology environment to identify potential vulnerabilities.Inland’s cybersecurity risk management and awareness programs include periodic identification and testing of vulnerabilities as well as regular phishing simulations for all of the employees of the Business Manager and its affiliates. Inland undertakes periodic internal security reviews of its information systems and related controls, including systems affecting personal data and the cybersecurity risks of our Business Manager and our critical third-party vendors (including the transfer agent) and other partners.Inland has established a Computer Security Incident Response Team (“Inland CSIRT”), which aims to manage and mitigate the impact of cybersecurity breach events, including those arising from or impacting