Company: STAA
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000950170-25-024813
Chunk: 67

Company: STAAR SURGICAL CO
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1B
Chunk 67
---
 discussing with management the Company’s policies with respect to risk assessment and risk management, including guidelines and policies to govern the process by which the Company’s exposure to risk is handled. The Audit Committee receives reports from management on the Company’s cybersecurity risks and the Company’s cybersecurity program. In addition, management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents. The Audit Committee regularly updates the Board on such matters ,and the Board also periodically receives presentations from management directly on our cybersecurity risk management.Our management team is responsible for assessing and managing our material risks from cybersecurity threats and reporting on such risks to the Audit Committee. Our management team oversees efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include threat briefings from internal personnel and external service providers, as well as alerts and reports produced by security tools deployed in the information technology environment.STAAR utilizes internal personnel and external service providers to support the Company’s cybersecurity efforts. Our Chief Information Officer (CIO) leads a team of IS professionals who have primary responsibility for our overall cybersecurity risk management program and supervises both our internal personnel and our retained external 

31

cybersecurity consultants. Our CIO has over two decades of experience, including experience building IT and IS functions and teams, as well as cybersecurity programs. Our CIO holds an M.B.A. in management, has an audit and accounting background, and serves on the SoCalCIO Board, a Southern California organization developing and supporting local CIOs. The CIO and IS team collaborate closely with STAAR’s legal, privacy, and internal audit functions to address cybersecurity and data privacy risks. The Company’s internal IS and data privacy specialists have certifications from various organizations, including ISC2 (Certified Information Security Systems Professional or CISSP), Global Information Assurance (GIAC), the Computing Technology Industry Association (CompTIA) and International Association of Privacy Professionals (IAPP).

ITEM 2.	Properties

Our operations are conducted in leased facilities throughout the world. STAAR maintains operational and administrative facilities in the U.S., Switzerland, and Japan. Our global administrative offices, principal manufacturing, warehouse, and distribution facilities are located in Monrovia, California. We manufacture the raw material for Collamer lenses in our facility in Aliso Viejo, California. STAAR also operates a technology center housing its research and development (R&D) team and labs in Tustin, California. Our corporate headquarters, including our executive offices, our EVO Experience Center, and additional operational facilities