Company: JBI
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001839839-25-000032
Chunk: 91

Company: Janus International Group, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 91
---
 a period of time, which could put our users at risk. Accordingly, our ability to keep our business operating is highly dependent on the proper and efficient operation of IT service providers, and our vendor management process is an important part of our risk mitigation strategy. In particular, we review Service Organization Controls (“SOC”) reports describing vendors’ compliance with cybersecurity best practices when they are available or an appropriate subset of those controls for vendors who do not have a SOC report. Notwithstanding, if there is a catastrophic event, such as an adverse weather condition, natural disaster, terrorist attack, security breach, or other extraordinary event, we, and our service providers, may be unable to provide our services and products for the duration of the event and/or a time thereafter. 

22

Cybersecurity Governance

In light of the pervasive and increasing threat from cyberattacks, the Board and the Audit Committee, with input from management, assess the Company’s cybersecurity threats and the measures implemented by the Company in an effort to mitigate and prevent cyberattacks. The Audit Committee consults with management regarding ongoing cybersecurity initiatives, and requests that management to report to the Audit Committee or the full Board regularly on their assessment of the Company’s cybersecurity program and risks. Both the Audit Committee (on no less than a quarterly basis) and the full Board (on no less than an annual basis) receive regular reports from our Chief Information Officer (“CIO”) on cybersecurity risks, timely reports regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed. The Company’s information security and cybersecurity program is managed by a dedicated CIO, whose team is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes. Our CIO has more than 25 years of experience in privately held and publicly traded companies and has an established track record of developing and overseeing cybersecurity programs. Additionally, our CIO holds a Bachelor of Science in Computer Science, a Master of Science in Information Technology, and specializations in AI Product Management and Machine Learning Operations. Our CIO provides periodic reports to our Board and Audit Committee as well as our Chief Financial Officer and other members of our senior management as appropriate. We have also established cross-functional teams to collaborate and communicate on cybersecurity-related issues. The reports to management include updates on the Company’s cyber risks and threats, the status of projects to strengthen the Company’s information security systems, assessments of the information security program, and the emerging threat landscape. Specifically, our management-driven ERM Committee and Incident Response