Company: SXI
Filing Date: 2025-09-05
Form Type: DEF 14A
Source: 0001437749-25-028442
Chunk: 20

Company: STANDEX INTERNATIONAL CORP/DE/
Filing Date: 2025-09-05
Form: DEF 14A
Chunk 20
---
 zones.

Cybersecurity & Data Privacy

Cybersecurity

Protecting our digital assets and the security of our information systems is a top priority for us. Historically, the nature and scope of our IT applications and systems was almost as diverse as the array of companies that comprised the Standex portfolio. With our transformation into a more focused, high performance operating company over the past several years, we have been rationalizing and standardizing our approach to IT. As a critical component of this effort, we have improved and continue to enhance our IT security controls and protocols.

While management has oversight of cybersecurity execution, the Board and the Audit Committee regularly oversee the general cybersecurity strategy and the efficacy of IT controls. Our Chief Information Officer, together with our Director IT Security, has responsibility for ensuring the effectiveness of access and security controls, the deployment and use of effective security tools, applications and policies and the training of all employees on applicable IT policies and procedures. The Chief Information Officer presents, on a quarterly basis, to the Audit Committee on the status of and plans for IT and IT security. For more detail on our Cybersecurity risk management and strategy, as well as our Cybersecurity governance and oversight processes, please see Item 1C. Cybersecurity of our Annual Report on Form 10-K filed on August 4, 2025.

Over the last three completed fiscal years (FY 2023 - FY 2025), the Company has experienced 15 information security incidents. All information security incidents were investigated, corrective action was taken to mitigate the impacts of the incidents and countermeasures were put in place to mitigate reoccurrence. Total fees expended, as a percentage of revenue, on an annual basis, on these incidents was less that 0.05%. Furthermore, we have not incurred any penalties or made any settlements in relation to these incidents. The Company has not experienced any third-party information security breaches relative to the Company’s information. The Company also maintains cybersecurity risk insurance in such amounts and coverage as the Company deems appropriate.

Data Privacy

We value the right to privacy of our employees, customers and business partners. We are committed to protecting the information we receive by collecting, processing, storing, transmitting and using the data in a lawful manner, consistent with legitimate business reasons. Our employees undergo continuous training on data privacy. Business risks and opportunities related to data privacy and cybersecurity are evaluated annually as part of our Enterprise Risk Management process.

2025 Proxy Statement 27

Human Capital Management

Culture & Employee Engagement

At Standex, we continue