Company: STAA
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000950170-25-024813
Chunk: 138

Company: STAAR SURGICAL CO
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1C
Chunk 138
---
 respect to risk assessment and risk management, including guidelines and policies to govern the process by which the Company’s exposure to risk is handled. The Audit Committee receives reports from management on the Company’s cybersecurity risks and the Company’s cybersecurity program. In addition, management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents. The Audit Committee regularly updates the Board on such matters ,and the Board also periodically receives presentations from management directly on our cybersecurity risk management.Our management team is responsible for assessing and managing our material risks from cybersecurity threats and reporting on such risks to the Audit Committee. Our management team oversees efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include threat briefings from internal personnel and external service providers, as well as alerts and reports produced by security tools deployed in the information technology environment.STAAR utilizes internal personnel and external service providers to support the Company’s cybersecurity efforts. Our Chief Information Officer (CIO) leads a team of IS professionals who have primary responsibility for our overall cybersecurity risk management program and supervises both our internal personnel and our retained external