Company: CTRM
Filing Date: 2025-05-14
Form Type: 20-F
Source: 0001140361-25-018945
Chunk: 29

Company: Castor Maritime Inc.
Filing Date: 2025-05-14
Form: 20-F
Item: Item 16K
Chunk 29
---
 Science in information technology fields). The ITC Department is also expected to keep abreast of cybersecurity best practices and procedures. The ITC Department is responsible for assessing, identifying and mitigating material cybersecurity risks, including at a strategic level, monitoring for, defending against and remediating cybersecurity incidents and implementing and making improvements to our overall cybersecurity strategy. The ITC Department utilizes key performance indicators and metrics to monitor their performance and track progress towards goals established by the ITC Department.    
   With regards to our asset management segment, responsibility for overseeing cybersecurity risks is integrated into the purview of the IT service provider MPC IT Services GmbH (“MPC IT”). MPC IT is responsible for monitoring, detecting and assessing cybersecurity risks and incidents in our asset management segment. MPC IT maintains a robust cybersecurity infrastructure with centralized management of all client systems, ensuring streamlined oversight and consistent enforcement of security policies across the organization.     
  As we do not have a dedicated board committee solely focused on cybersecurity, our full Board oversees the implementation of our cybersecurity strategy, as well as cybersecurity risks, with the aim of protecting our interests and assets. Our cybersecurity strategy was developed by the ITC Department and approved by senior management. The Board receives periodic reports and presentations on cybersecurity risks from the ITC Department, including regarding recent incidents or breaches (if any), vulnerabilities, mitigation strategies and the overall effectiveness of our cybersecurity program. These reports highlight significant or emerging cybersecurity threats, their potential impact on the organization, ongoing initiatives to mitigate risks and any proposed actions or investments required to enhance our cybersecurity posture.
  
    

 
PART III