Company: FCAP
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001171843-25-001868
Chunk: 897

Company: FIRST CAPITAL INC
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1C
Chunk 897
---
 integrity and availability of the Company’s data for the benefit of our customers, employees and shareholders. We regularly engage third-party consultants to assess the effectiveness of our strategy, tools and techniques, and overall information security program. Independent oversight and assurance activities specifically include internal audits, vulnerability assessments and penetration testing. The Company’s cybersecurity professionals are well-trained on how to protect customer and employee information through ongoing education and awareness initiatives.  The CIO and other members of the information technology team receive ongoing training related to developing threats, proactive solutions and industry best practices in order to effectively protect the Company and its stakeholders.

36

The Company maintains a third-party risk management program designed to identify, analyze and monitor risks, including cybersecurity risks, associated with vendors and outside service providers. Our vendor risk management team collaborates closely with the information security team to ensure third parties meet certain information security control requirements. Our information security team proactively monitors our internal systems and email gateways for phishing email attacks. Remote connections are also assessed and monitored given a portion of our workforce works remotely.  Personnel serve as members of both teams helping to effectively identify and communicate issues as they develop.