Company: LGIH
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001580670-25-000016
Chunk: 460

Company: LGI Homes, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 460
---
 our business; and

•other factors we discuss under the section entitled “Management’s Discussion and Analysis of Financial Condition and Results of Operations.”

You should not place undue reliance on forward-looking statements. Each forward-looking statement speaks only as of the date of the particular statement. We expressly disclaim any intent, obligation or undertaking to update or revise any forward-looking statements to reflect any change in our expectations with regard thereto or any change in events, conditions or circumstances on which any such statements are based. All subsequent written and oral forward-looking statements attributable to us or persons acting on our behalf are expressly qualified in their entirety by the cautionary statements contained in this Annual Report on Form 10-K.

ITEM 1B.    UNRESOLVED STAFF COMMENTS

None.

31

ITEM 1C.    CYBERSECURITY 

Risk Management and Strategy

We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cyber risk awareness. Our Vice President, Information Technology and our information technology group endeavor to evaluate and address cyber risks in alignment with our business objectives, operational needs and industry-accepted standards, such as the National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS) Critical Security Controls frameworks. We have processes and procedures in place to monitor the prevention, detection, mitigation and remediation of cybersecurity risks. These include but are not limited to:•Maintaining a defined and practiced incident response plan;•Employing appropriate incident prevention and detection safeguards;•Maintaining a defined disaster recovery policy and employing disaster recovery software, where appropriate;•Educating, training and testing our user community on information security practices and identification of potential cybersecurity risks and threats; and•Reviewing and evaluating new developments in the cyber threat landscape.Recognizing the complexity and evolving nature of cybersecurity risk, we engage with a range of external support, including cybersecurity consultants, in evaluating, monitoring and testing our cyber management systems and related cyber risks. Our collaboration with these third parties includes audits, threat and vulnerability assessments, company-wide monitoring of cybersecurity risks and consultation on security enhancements.We recognize the risks associated with the use of vendors, service providers and other third parties that provide information system services to us, process information on our behalf, or have access to our information systems, and we have processes in place to oversee and manage these risks.  We conduct annual and periodic assessments of these third-party engagements to evaluate compliance with our cybersecurity standards.To our knowledge, we have not been subject to cybersecurity incidents that