Company: RSI
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001793659-25-000047
Chunk: 196

Company: Rush Street Interactive, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1C
Chunk 196
---
 our Audit Committee, Compensation Committee and NCG Committee. Our Audit Committee periodically reviews our cybersecurity, information technology, data protection, privacy and compliance risk management, as well as performs other risk oversight functions. Through its regular meetings with management, including the accounting and finance, legal, internal audit, regulatory compliance and information technology and security functions, the Audit Committee reviews and discusses our cybersecurity risk management 

59

practices and policies and periodically updates the Board or relevant members or committees thereof, about any material risks and the appropriate mitigating factors. 

Our Chief Information Officer, who has information technology, engineering, product and security knowledge, experience and skills gained over a decade of experience leading product and engineering organizations, our Chief Information Security Officer, who also has over two decades of cybersecurity experience in both public and private organizations, and certain members of their teams as well as outside advisors who have cybersecurity experience are responsible for implementing and maintaining cybersecurity and data protection practices at the Company and reporting on cybersecurity matters to the relevant members of management. This team is supported, from time to time, by third-party consultants and service providers with specific areas of cybersecurity expertise. Management is responsible for identifying, assessing and managing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, and maintaining cybersecurity policies and procedures. Management also regularly communicates cybersecurity risks and activities with other members of management and, as appropriate, to our Board or relevant members or committees thereof, including the Audit Committee. 

We, like many other companies in the gaming and entertainment space, including some of our market access partners and suppliers, experience routine cybersecurity threats such as DDOS, phishing or social engineering attacks. While our business strategy, results of operations and financial condition have not been materially affected by risks from any such cybersecurity threats, including as a result of previously identified cybersecurity incidents, we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information on our cybersecurity related risks, see Item 1A Risk Factors of this Annual Report on Form 10-K.