Company: HEI-A
Filing Date: 2025-12-22
Form Type: 10-K
Source: 0000046619-25-000082
Chunk: 47

Company: HEICO CORP
Filing Date: 2025-12-22
Form: 10-K
Item: Item 1C
Chunk 47
---
Item 1C.    CYBERSECURITY

Overview

The Company prioritizes cybersecurity as a strategic pillar integral to its business strategy, risk management, and governance frameworks.  The Board of Directors and executive management play an active role in evaluating the effectiveness of our cybersecurity policies, practices, and procedures.  Regular updates are provided by the Chief Information Officer to ensure cybersecurity risks are continuously monitored and addressed across all business functions.  Our cybersecurity program incorporates policies, procedures, systems, and controls designed to safeguard the accessibility, confidentiality, and integrity of our data and systems.  These processes are shaped by industry trends, and the evolving cybersecurity landscape.

Cybersecurity Risk Management and StrategyOur cybersecurity program is an integral part of our overall risk management framework and is aligned with recognized industry standards, such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF).  The cybersecurity program is designed to identify, detect, protect against, respond to, and recover from cyber threats.  Our program safeguards the confidentiality, integrity, and availability of our systems and data through a comprehensive and multi-layered approach.We deploy robust controls, including firewalls, anti-malware systems, intrusion detection and prevention, encryption, and access controls.  These measures are supplemented by continuous monitoring, vulnerability assessments, and penetration testing conducted both internally and by third-party assessors.  Insights from these assessments inform the enhancement of our security controls and help us mitigate emerging threats effectively.  We also actively engage with key consultants as part of our continuing efforts to evaluate and enhance the effectiveness of our cybersecurity program.

27

Index

We proactively monitor networks for suspicious activity and collaborate with governmental and industry partners to stay informed on emerging cybersecurity risks.  We also emphasize a culture of vigilance through regular employee training that includes phishing awareness, malware prevention, and reporting protocols.

Governance and Oversight

Our governance and oversight framework for cybersecurity risks operates at multiple levels within the organization.  The Board of Directors has final oversight responsibility for cybersecurity-related matters and receives regular updates from the Chief Information Officer and senior management on the status of the cybersecurity program, vulnerability assessments, strategic initiatives, and any significant incident response activities.

The Chief Information Officer has over 28 years of experience in cybersecurity and is responsible for designing and implementing the organization's cybersecurity strategy.  The cybersecurity program and the Information Security Team are led by the Senior IT Director, who reports to the Chief Information Officer.  The Senior IT Director has over 21 years of experience in cybersecurity.  The Information Security Team is