Company: NGVT
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001653477-25-000015
Chunk: 691

Company: Ingevity Corp
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 691
---
 protecting trade secrets, intellectual property, clinical trial data, third-party information, and employee data.Industry-Standard Frameworks and Policies. We incorporate industry-standard frameworks, policies, and practices such as ISO 27001 which are designed to protect the confidentiality and privacy of information.Protection Mechanisms. We currently adhere to the ISO 27001 information security framework and are advancing our program having achieved ISO 27001 certification in 2024. We continuously monitor our enterprise network and have deployed detective and preventative controls. In-depth third-party security assessments are conducted annually. Incident Response and Testing. We maintain a robust cybersecurity incident response plan that incorporates regular simulations, drills, vulnerability scans, penetration testing and third-party assessments to evaluate and enhance our cybersecurity controls and resilience.Third-Party Monitoring. We partner with a managed security services provider for 24/7 monitoring of our enterprise network. We require third-party service providers with access to personal, confidential or proprietary information to implement and maintain comprehensive cybersecurity measures aligned with applicable legal standards and industry best practices.Our proactive approach to cybersecurity involves the integration of leading technologies and collaboration with third-party experts to ensure alignment with industry standards. We believe these measures contribute to the protection of both our organization's and our clients' sensitive information.

During the past three years, there have been no material impacts from cybersecurity threats or cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company’s business strategy, results of operations, 

23

or financial condition. Despite our security architecture and controls, and those of our third-party providers, we may be vulnerable to cyber-attacks, computer viruses, security breaches, ransomware attacks, inadvertent or intentional employee actions, system failures, and other risks that could materially impact our financial results and our results of operations.