Company: MHLA
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0001412100-25-000011
Chunk: 99

Company: Maiden Holdings, Ltd.
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1C
Chunk 99
---
Item 1C. Cybersecurity. 

Cybersecurity Risk Management and Strategy

The Company employs a comprehensive, cross-departmental approach to continuously assess, identify, and manage potential cybersecurity risks. Our cybersecurity risk management program involves collaboration between our employees, the information technology (“IT”) team, our Chief Information Security Officer (“CISO”), and our Enterprise Risk Management Committee, as overseen by the Board of Directors, primarily through its Audit Committee. The Company’s cybersecurity policies, standards, processes, and practices are integrated into the Company’s overall risk management program and we regularly consider cybersecurity risks in the context of material risks to the Company.Our cybersecurity risk management program categorizes cybersecurity risks into five areas: identify, protect, detect, respond, and recover. We regularly assess the cybersecurity threat landscape, employing a layered cybersecurity strategy that emphasizes prevention, detection, and mitigation through a variety of technical and operational measures. As a part of our cybersecurity risk management program, our information security program is tailored to address identified risks, while aligning with pertinent business requirements.We foster a shared responsibility for the Company’s cybersecurity with all our employees, conducting periodic phishing simulation campaigns and providing regular, mandatory security awareness training to enhance awareness and readiness against cyber threats. Certain roles require additional role-based, specialized cybersecurity training. To protect our data and information systems, we maintain Company-wide cybersecurity policies and procedures regarding encryption requirements, malware protection, remote access, multifactor authentication, confidential and privacy information, and internet, social media, email, and wireless device usage. The CISO and IT team review and update such policies and procedures to adapt to evolving cybersecurity landscapes, industry best practices, and regulatory and statutory updates. Our CISO conducts thorough reviews of these updates at least annually to ensure their continued relevance and effectiveness in safeguarding the Company’s assets and business interests.We continually seek to improve our cybersecurity posture, encompassing end-user training, layered defenses, critical asset identification and protection, enhanced monitoring and alerting, and engagement with third-party experts as needed to evaluate the efficacy of our security measures. We engage reputable third-party tools and products to assist in the monitoring, protection, detection, and potential remediation of cybersecurity threats and incidents. We also regularly evaluate cybersecurity risks associated with our use of third-party service providers, conducting an annual review of hosted applications and assessing their cybersecurity preparedness.

Cybersecurity Governance and Oversight

Our CISO is primarily responsible for the assessment and management of the Company’s material cybersecurity risks and the related cybersecurity risk management policies and procedures. Our CISO oversees our cybersecurity risk management