Company: CIMO
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001628280-25-006426
Chunk: 166

Company: CHIMERA INVESTMENT CORP
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 166
---
, manage and escalate risks as appropriate. The financial reporting unit operates under the requirements of the Sarbanes Oxley . The “Third Layer of Defense” consists of many of our internal controls which are subject to an independent evaluation by our third-party internal auditors. As an independent third party, the mandate of the internal auditor is to objectively assess the adequacy and effectiveness of our internal control environment to improve risk management, control and governance processes. Periodic reporting from the risk management unit is provided to executive management and to the Audit Committee of the Board of Directors. 

Cybersecurity Risk

Our cybersecurity risk management and strategy is incorporated into our Enterprise Risk Management process. Our Board of Directors, in coordination with the Audit Committee and the Risk Committee, oversees management of cybersecurity risk. Please refer to Item 1C, “Cybersecurity” in this Annual Report on Form 10-K for  additional information about our cybersecurity risk management, strategy and governance. 

Business Continuity Plan 

Our Business Continuity Plan is prepared with the intent of providing guidelines to facilitate (i) employee safety and relocation; (ii) preparedness for carrying out activities and receiving communication; (iii) resumption and restoration of systems and business processes and (iv) the protection and integrity of the Company’s assets. 

Our Business Continuity Plan is designed to facilitate business process resilience in a broad range of scenarios with a dedicated Disaster Recovery Team which is comprised of executive management, head of technology, and professionals across our various business units. Our Business Continuity Plan identifies the critical systems and processes necessary for business operations as well as the resources, employees, and planning needed to support these systems and processes. Critical systems and processes are defined as those which have a material impact on core operations, financial performance, or regulatory requirements. This includes applications which facilitate financial transactions, transaction settlements, financial reporting, and business communication and the personnel who perform such actions. Our Business Continuity Plan provides guidelines to aid in the timely resumption of business operations and for communication with employees, service providers and other key stakeholders needed to support these operations. Our Business Continuity Plan is a "living process" that will evolve with the input and guidance of the key stakeholders, subject matter experts and industry best practices and is reviewed and updated at least annually.

73

Item 8.  Financial Statements and Supplementary Data                                                                                                 

Our consolidated financial statements and the related notes, together with the Reports of Independent Registered Public Accounting Firm thereon, are set