Company: FXC
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000950170-25-027265
Chunk: 26

Company: Invesco CurrencyShares Canadian Dollar Trust
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 26
---
-of-service attacks on websites. Cyber security failures or breaches of the Trust’s third party service providers (including, but not limited to, the Trustee and the Sponsor) have the ability to cause disruptions and impact business operations, potentially resulting in financial losses, the inability of Shareholders or Authorized Participants to transact business in Shares and Baskets respectively, violations of applicable privacy and other laws, regulatory fines, penalties, reputational damage, reimbursement or other compensation costs, and/or additional compliance costs. In addition, substantial costs may be incurred in order to prevent any cyber incidents in the future. The Trust and its Shareholders could be negatively impacted as a result. 

While the Sponsor has established business continuity plans and systems reasonably designed to detect and prevent such cyber attacks from being effective, there are inherent limitations in such plans and systems. For instance, it is possible that certain existing risks have not been identified or that new risks will emerge before countervailing measures can be implemented. Furthermore, the Trust cannot control, or even necessarily influence, the cyber security plans and systems put in place by the Trust’s third party service providers. Since the Trust is dependent upon third party service providers (including the Sponsor and Trustee) for substantially all of its operational needs, the Trust is subject to the risk that a cyber attack on a service provider will materially impair its normal operations even if the Trust itself is not subject to such an attack. In addition, a service provider that has experienced a cyber security incident may divert resources normally devoted to servicing the Trust to addressing the incident, which would be likely to have an adverse effect on the Trust’s operations.

ITEM 1B. UNRESOLVED STAFF COMMENTS 

None. 

ITEM 1C. CYBERSECURITY Cyber threats are considered one of the most significant risks facing financial institutions.  Because the Trust has no directors, principal officers or employees, the Sponsor is responsible for managing cybersecurity risks to the Fund.  To mitigate risk from cyber threats, Invesco Ltd. (“Invesco”), the Sponsor’s parent company, has a designated Global Chief Security Officer (GCSO) who leads the global security department that is responsible for identifying, assessing, and managing cybersecurity threats across the Invesco organization. The GCSO has over 28 years of experience in the public and private sectors, specializing in security, investigations, and incident response. The global security department oversees the following groups across Invesco: Information Security, Global Privacy, Business Continuity & Crisis Management, Resilience, Corporate Security