Company: LGCY
Filing Date: 2025-09-25
Form Type: 10-K
Source: 0001493152-25-014945
Chunk: 473

Company: Legacy Education Inc.
Filing Date: 2025-09-25
Form: 10-K
Item: Item 1B
Chunk 473
---
None.

ITEM
1C. CYBERSECURITY

We
recognize the critical importance of maintaining the safety and security of our systems and data and we take a holistic approach to the
oversight and management of cybersecurity and related risks. This approach is supported by our Board of Directors and management who
are actively involved in the oversight of our risk management program.

Like
all companies that utilize technology, we face significant cybersecurity threats that include, among other things, attempts to gain unauthorized
access to sensitive student and employee information; attempts to compromise the integrity, confidentiality and/or availability of our
systems, hardware and networks, and the information on them; insider threats; malware; ransomware; threats to the safety of our directors,
officers and employees; and threats to our facilities, infrastructure and service. As cybersecurity threats may arise, the cybersecurity
team focuses on responding to and containing the threat and minimizing any business impact, as appropriate. In the event of a perceived
threat or possible cybersecurity incident, the cybersecurity team is trained to assess, among other factors, student safety impact, data
and personal information impact, the possibility of business operations disruption, projected cost, if any, and potential for reputational
harm, with support from external technical, legal and law enforcement support, as appropriate.

Management
of the Company is responsible for overseeing our enterprise risk management. In that regard, management receives periodic updates, as
appropriate (and no less frequently than annually), regarding the Company’s cybersecurity risk management processes and the risk
trends related to cybersecurity. Our Board of Directors, in coordination with the Audit Committee, shall review and discuss with management
the Company’s risks related to information security, including cybersecurity.

While
we have experienced minor cybersecurity threats in the past, such as spear phishing or smishing (SMS phishing), to date no such threats
have materially affected the Company or our financial position, results of operations and/or cash flows.

We
continue to invest in the cybersecurity and resiliency of our networks and to enhance our internal controls and processes, which are
designed to help protect our systems and infrastructure, and the information contained therein.

We
maintain cybersecurity insurance coverage in amounts that we believe are adequate to address any incidents such as data destruction,
extortion, theft, hacking, denial of service attacks and other such incidents.

For
more information concerning the risks that we face from cybersecurity threats, please see Part I, Item IA, “Risk Factors”.

ITEM
2. PROPERTIES

Our
executive