Company: NXDT
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001356115-25-000003
Chunk: 277

Company: NEXPOINT DIVERSIFIED REAL ESTATE TRUST
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 277
---
 adjusts its cybersecurity policies, standards, processes and practices as necessary based on the information provided by these assessments and ongoing testing. 

The Audit Committee oversees the Company’s risk management policies, including the management of risks arising from cybersecurity threats. The Audit Committee receives presentations and reports on cybersecurity risks, which address a wide range of topics including annual assessments of internal and third-party policies, vulnerability assessments, technological trends and information security considerations arising with respect to the Company and our Adviser. The Audit Committee also receives prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed. On an annual basis, the Board and the Audit Committee discuss the Company’s approach to cybersecurity risk management with our Adviser, including the Adviser’s Director of Information Technology. 

The Adviser’s Director of Information Technology, in coordination with relevant senior management and personnel of the Adviser, which includes our Adviser’s Chief Financial Officer, Senior Infrastructure Engineer, and Chief Compliance Officer, work to conceive, implement, and monitor the effectiveness of a program designed to protect the Company’s information systems from cybersecurity threats and to promptly respond to any security incidents in accordance with the Company’s business continuity plan. To ensure the effectiveness of these controls, the Adviser’s technology team continually monitors, hardens, and evolves systems’ security postures to model and mirror various security frameworks such as NIST CSF and Azure Security Benchmark. The Adviser’s Director of Information Technology will promptly notify our General Counsel of any cybersecurity events, with material cybersecurity events promptly communicated to the Audit Committee and publicly disclosed as deemed necessary.

The Adviser’s Director of Information Technology has served in various roles in information technology and information security for 25 years, including serving as Global Technology Manager at a multi-national publicly traded broker-dealer, and 15 years as the Director of Information Technology at a privately held financial services firm. The Adviser’s Director of Information Technology holds an undergraduate degree in biochemistry and has attained numerous information technology certifications over the years including Microsoft Certified Systems Engineer (MCSE) and Cisco Certified Network Professional (CCNP).  The Adviser’s Senior Infrastructure Engineer has over 20 years industry experience, holds an undergraduate degree in radiology, and has completed various Microsoft related information technology certifications. Combined, our Adviser’s information technology team has over 50 years of experience covering all major aspects of network architecture and management.

Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and we do