Company: TCBI
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0001077428-25-000036
Chunk: 141

Company: TEXAS CAPITAL BANCSHARES INC/TX
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1C
Chunk 141
---
 vulnerability management.The Company's cybersecurity risk management program and strategy are regularly reviewed and updated to ensure that they are aligned with the Company's business objectives and are designed to address evolving cybersecurity threats and satisfy regulatory requirements and industry standards.Material Effects of Cybersecurity ThreatsWhile cybersecurity risks have the potential to materially affect the Company's business, financial condition, and results of operations, the Company does not believe that risks from cybersecurity threats or attacks, including as a result of any previous cybersecurity incidents, have materially affected the Company, including its business strategy, results of operations or financial condition. However, the sophistication of cyber threats continues to increase, and the Company’s cybersecurity risk management and strategy may be insufficient or may not be successful in protecting against all cyber incidents. Accordingly, no matter how well designed or implemented the Company’s controls are, it will not be able to anticipate all cyber security breaches, and it may not be able to implement effective preventive measures against such security breaches in a timely manner. For more information on how cybersecurity risk may materially affect the Company’s business strategy, results of operations or financial condition, please refer to Item 1A. Risk Factors.

Governance

Board of Directors Oversight

The Company’s board of directors is charged with overseeing the establishment and execution of the Company’s risk management framework and monitoring adherence to related policies required by applicable statutes, regulations and principles of safety and soundness. Consistent with this responsibility, the board of directors has delegated primary oversight responsibility (i) of the Company’s general risk management framework to the Risk Committee of the board of directors and (ii) of the Company’s information technology, cybersecurity risk and cybersecurity risk management to the Technology Committee of the board of directors, which was formed in the first quarter of 2025. At least one member of the Risk Committee also serves as a member of the Technology Committee. The Risk Committee previously has received, and the Technology Committee will receive on an ongoing basis, regular updates on the Company’s cybersecurity risks and incidents and the cybersecurity program through direct interaction with the Chief Information Security Officer (“CISO”) and the Chief Security 

30

Officer (“CSO”). The Risk Committee previously has provided, and the Technology Committee will provide on an ongoing basis, updates regarding cybersecurity risks and the cybersecurity program to the full board of directors. Additionally, awareness and training on cybersecurity topics is provided to the board of directors on an annual basis. 

Management's Role

The Information Security department is responsible for implementing and maintaining the Company’s cybersecurity risk management program. The Information Security department consists of cybersecurity and