Company: ARRY
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001820721-25-000023
Chunk: 67

Company: Array Technologies, Inc.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1C
Chunk 67
---
 leadership, innovation and technology, corporate governance and finance.Management’s Role Managing RiskThe chief information officer and the chief financial officer are responsible for updating the Nominating and Corporate Governance Committee on cybersecurity risks and our mitigation strategies. They provide quarterly updates to the Nominating and Corporate Governance Committee, as well as comprehensive briefings at least once per year and appropriate briefings during any potentially material cybersecurity incident. These briefings encompass a broad range of topics, including:•results of internal assessments and audits by third parties;•the current cybersecurity landscape and emerging threats;•the status of ongoing cybersecurity initiatives and strategies;•incident reports and lessons learned from any cybersecurity events; and •compliance with regulatory requirements and industry standards.In addition to regular scheduled meetings, the Nominating and Corporate Governance Committee, our chief information officer and our chief executive officer maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive periodic updates on significant developments in the cybersecurity landscape to support proactive and responsive board oversight. The Nominating and Corporate Governance Committee actively participates in strategic decisions related to cybersecurity, reviewing and offering guidance on major initiatives and any potentially material cybersecurity incident. This involvement ensures that cybersecurity considerations are integrated into our broader strategic objectives.Risk Management PersonnelPrimary responsibility for assessing, monitoring and managing our cybersecurity risks rests with the chief information officer, Jovan Kangrga. Mr. Kangrga has managed cybersecurity and information security at Array for the past five years and has over 14 years of total experience as an information technology executive for publicly listed companies. Mr. Kangrga holds B.S. degrees in finance and computer science from Arizona State University as well as a M.B.A. from Western International University. He manages a team with over 40 years of combined experience in cybersecurity. Our chief information officer reports to our chief financial officer, and both our are responsible for updating the chief executive officer, the Nominating & Corporate Governance Committee, and our board of directors on cybersecurity issues.Ongoing Education and MonitoringThe chief information officer leads our cybersecurity team, which remains current with the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing 

37

education is crucial for the effective prevention, detection, mitigation and remediation of cybersecurity threats and incidents. The chief information officer implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits, including penetration testing, to identify potential vulnerabilities. In the event of a cybersecurity incident, we are equipped with a well-defined incident response plan.