Company: USCB
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001562762-25-000043
Chunk: 12

Company: USCB FINANCIAL HOLDINGS, INC.
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1C
Chunk 12
---
Risk Management and Strategy OverviewCustomers depend on the Company to properly protect nonpublic personal information gathered and stored in connection with the services we provide. The Company realizes that cyber incidents can have financial, reputational, legal, and operational impacts that can significantly adversely affect our customers, capital, and earnings. Therefore, we integrate cybersecurity processes throughout the Company as part of our enterprise-wide governance process. Regulatory agencies are charged with ensuring the Company’s cybersecurity controls and procedures are compliant with the intent of the cybersecurity expectations set forth by the Federal Financial Institutions Examination Council (“FFIEC”). The FFIEC framework offers a set of guidelines and best practices to help financial institutions manage and mitigate cybersecurity risks effectively. It focuses on ensuring the confidentiality, integrity, and availability of sensitive information and systems. The Information Security Officer (“ISO”) is an integral member of the Risk Management and Compliance Department (“RMCD”) of the Bank and who provides expert counsel on matters of cybersecurity and presents periodic reports to the Risk Committee of our Board of Directors. As part of the program, periodic risk assessments are performed to determine the Company’s inherent and residual cybersecurity risk, the maturity level of the program, the risk of cyber threats, and the effectiveness of controls currently in practice. The Company utilizes the National Institute of Standards and Technology (“NIST”) Framework and the FFIEC’s Cybersecurity Assessment Tool (“Cybersecurity Assessment”) to help management identify its risks and determine the Company’s cybersecurity posture. Through the implementation of rigorous procedures and controls, augmented by ongoing training initiatives for both management and staff, the institution cultivates a safe cybersecurity environment. This approach encompasses diverse methodologies including defense-in-depth and proactive security awareness training aimed at fortifying the institutions cybersecurity controls and fostering a resilient operational framework.Assessment and Response to Cyber