Company: MHLA
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0001412100-25-000011
Chunk: 100

Company: Maiden Holdings, Ltd.
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1C
Chunk 100
---
 and information security programs and provides quarterly status reports to the Audit Committee. Our CISO possesses over 25 years of experience in various technology and cybersecurity operations, holds the Certified Chief Information Security Officer (CCISO) certification from EC-Council and certifications from ISC2, Information Systems Security Management Professional (ISSMP), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified in Governance, Risk and Compliance (CGRC) as well as ISACA certifications of Certified Information Security Manager (CISM) and Certified in Risk and Information Systems Control (CRISC). Other key members of management assist our CISO in the oversight of cybersecurity risk management.We have established an incident response team which is composed of individuals from our various IT and managerial functions and consults with members of internal departments, as needed to perform an impact analysis of security incidents which may have a material effect on the Company, The Audit Committee has responsibility for oversight of information and cybersecurity risks and assessment of cyber threats and defenses, and it oversees management to ensure that the processes designed, implemented, and maintained with respect to such risks are functioning as intended and adapted when necessary to respond to changes in our strategy, as well as emerging risks. Given the importance of information security and cybersecurity to our stakeholders, our Enterprise Risk Management Committee and our Audit Committee review quarterly reports from our CISO regarding the Company’s cybersecurity strategies for mitigating known risks, newly identified risks, existing projects, and key performance insights and engage in discussions with management based on such reports and other recent developments.

Cybersecurity Incident Reporting and Management

We have not experienced any cybersecurity incidents that have a material impact on our business strategy, results of operations, or financial condition. Nor have we identified vulnerabilities to known threats that are reasonably likely to materially affect the same.  However, we remain vigilant and prepared to respond effectively to any incidents, should they arise.

45