Company: EVC
Filing Date: 2025-03-06
Form Type: 10-K
Source: 0000950170-25-034661
Chunk: 58

Company: ENTRAVISION COMMUNICATIONS CORP
Filing Date: 2025-03-06
Form: 10-K
Item: Item 1
Chunk 58
---
 Management and Strategy. We recognize the critical role that cybersecurity plays in protecting our operations, customers, and digital assets. As part of our broader technology and information security risk management framework, our cybersecurity strategy is designed to safeguard the confidentiality, integrity and availability of our systems and data. We continuously assess, strengthen and refine our cybersecurity practices to adapt to an evolving threat landscape.Our cybersecurity risk management program is built on a foundation of monitoring, proactive risk mitigation and adherence to industry best practices. Over the past year, we have implemented several key enhancements to further bolster our cybersecurity defenses. A security awareness training program has been introduced across our company to educate employees on cybersecurity threats and best practices. Additionally, we have expanded our asset management capabilities, improving visibility into our technology infrastructure and evaluating advanced solutions for more comprehensive oversight.To protect against unauthorized access, our identity and access management framework continues to evolve, incorporating multi-factor authentication and single sign-on to enhance access security. In parallel, our vulnerability management program is actively managed to identify, assess, and remediate security risks before they can be exploited. To further secure our infrastructure, we have deployed an advanced endpoint security solution, ensuring that all company devices are protected against malware and other cyber threats.A core component of our security framework is our threat detection and response capability. We have implemented an extended detection and response system that provides continuous monitoring, real-time threat detection and automated response mechanisms to mitigate cybersecurity risks. Our governance, risk and compliance initiatives have also advanced, with ongoing efforts to standardize security policies and align with regulatory and industry standards. Penetration testing is conducted to assess our security posture and identify potential vulnerabilities, ensuring that our defenses remain resilient against emerging threats.Understanding the risks posed by external partners, we have strengthened our third-party risk management program. This initiative focuses on evaluating and monitoring the cybersecurity practices of our vendors, service providers, and business partners to mitigate potential supply chain risks. Additionally, our incident response plan has been enhanced to support swift detection, 

19

containment, and remediation of cybersecurity incidents, ensuring operational continuity and minimal disruption with the addition of an incident response retainer.As of the date of this report, we have not identified any cybersecurity threats, including any past cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, financial condition, or results of operations. We continue to monitor cybersecurity risks closely and remain committed to taking proactive measures to address evolving threats.Cybersecurity Governance. We have established a cybersecurity governance framework to ensure effective oversight, accountability, and strategic alignment across the organization