Company: TRTN-PA
Filing Date: 2025-02-28
Form Type: 20-F
Source: 0001660734-25-000004
Chunk: 92

Company: Triton International Ltd
Filing Date: 2025-02-28
Form: 20-F
Item: Item 16K
Chunk 92
---
ITEM 16K. CYBERSECURITY

Triton maintains a cybersecurity risk management program designed to identify, protect, detect and mitigate cybersecurity threats and ensure the reliability of our system applications and infrastructure (our "Information Security Program"). Our Information Security Program, which is integrated within the Company’s enterprise risk management framework, leverages recognized best practices and standards, including the National Institute of Standards and Technology cybersecurity framework, and is comprised of a robust set of cybersecurity tools, processes and procedures as further described below.

Our internal information security team is led by Triton’s Chief Information Officer, who has held this role for 15 years and holds over 30 years of experience in information technology, audit and risk management and holds certifications as a Certified Information Systems Security Professional, Certified Fraud Examiner and Certified Information Systems Auditor. Our Director, Information Security and Compliance holds over nine years of experience in cybersecurity management and oversight and over 20 years in information technology portfolio, program and application management positions. Additionally, others in our information technology team have relevant security experience and certifications. Our internal resources are augmented by external cybersecurity partners, including those described below. Our information security leadership team is responsible for assessing and managing the Company’s Information Security Program, informs senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents and supervises such efforts. We also take a cross-departmental approach to managing cybersecurity risk and have formed a Cybersecurity Incident Response Team ("CIRT") comprised of senior representatives from primary corporate functions as well as senior representatives from field operations to ensure a coordinated and effective response and ongoing business continuity in the face of cybersecurity threats and incidents.

Triton’s Board is responsible for oversight of information technology and cybersecurity-related matters and monitoring cybersecurity risk management, and the Board actively engages with senior management on the state of the Company’s Information Security Program. The information security leadership team prepares briefings for the Board on the effectiveness of the Company’s cyber risk management program, typically on a quarterly basis, which include a review of key performance indicators, training and test results and related remediation, and recent threats and how the Company is managing those threats.

Triton’s Information Security Program includes policies and procedures concerning cybersecurity matters, which include a cybersecurity incident response plan as well as other policies that directly or indirectly relate to cybersecurity, such as policies related to password standards, antivirus protection, remote access, multi-factor authentication, confidential information and the use of electronic devices, electronic communications and social media. We perform routine vulnerability scanning of our network, with a focus on timely remed