Company: LGIH
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001580670-25-000016
Chunk: 535

Company: LGI Homes, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 535
---
31

Table of Contents

ITEM 1C.    CYBERSECURITY 

Risk Management and Strategy

We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cyber risk awareness. Our Vice President, Information Technology and our information technology group endeavor to evaluate and address cyber risks in alignment with our business objectives, operational needs and industry-accepted standards, such as the National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS) Critical Security Controls frameworks. We have processes and procedures in place to monitor the prevention, detection, mitigation and remediation of cybersecurity risks. These include but are not limited to:•Maintaining a defined and practiced incident response plan;•Employing appropriate incident prevention and detection safeguards;•Maintaining a defined disaster recovery policy and employing disaster recovery software, where appropriate;•Educating, training and testing our user community on information security practices and identification of potential cybersecurity risks and threats; and•Reviewing and evaluating new developments in the cyber threat landscape.Recognizing the complexity and evolving nature of cybersecurity risk, we engage with a range of external support, including cybersecurity consultants, in evaluating, monitoring and testing our cyber management systems and related cyber risks. Our collaboration with these third parties includes audits, threat and vulnerability assessments, company-wide monitoring of cybersecurity risks and consultation on security enhancements.We recognize the risks associated with the use of vendors, service providers and other third parties that provide information system services to us, process information on our behalf, or have access to our information systems, and we have processes in place to oversee and manage these risks.  We conduct annual and periodic assessments of these third-party engagements to evaluate compliance with our cybersecurity standards.To our knowledge, we have not been subject to cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, the Company, its operations or financial standing.

Governance

Our cybersecurity risk management program is overseen by management at multiple levels. Our Vice President, Information Technology plays a key role in assessing, monitoring and managing our cybersecurity risks with support from dedicated information technology and security personnel. Our cybersecurity and risk management protocols are led by our Vice President of IT, who has served in this role since 2019. Our Vice President, Information Technology has an MS in Engineering and Technology Management and over 20 years of experience in managing and leading information technology or cybersecurity teams and oversees a team of information technology professionals who identify, assess, and manage cybersecurity threats on an ongoing basis.Our information technology group monitors the latest developments