Company: SXI
Filing Date: 2025-08-04
Form Type: 10-K
Source: 0001437749-25-024450
Chunk: 1245

Company: STANDEX INTERNATIONAL CORP/DE/
Filing Date: 2025-08-04
Form: 10-K
Item: Item 1B
Chunk 1245
---
None.

Item 1C. Cybersecurity

   Cybersecurity Risk Management and Strategy
    
   Like other global companies, we face various cybersecurity threats that could have a material adverse effect on our business strategy, results of operations or financial condition. Cybersecurity, therefore, is an important element of our business and our overall enterprise risk management program, and while we have experienced a small number of cyber incidents over the last few years, none to date have been material or had a material adverse effect on our business or financial condition. To mitigate the risk, we have established a multilayered approach to assessing, identifying and managing material risks from cybersecurity threats, which includes the following:
    
     ●  An annual cybersecurity risk assessment as part of our Enterprise Risk Management (ERM) program, which reviews and evaluates the potential impact and likelihood of various cyber risks and defines a framework for mitigating measures and residual risk. 

     ●  A cybersecurity roadmap that is built from the risk assessment and feeds into our annual IT expenditure plan and which outlines the actions and investments we intend to take to enhance our cybersecurity posture and capabilities. 

     ●  A continuous cybersecurity risk monitoring and response process, which involves daily review and real-time alerts of security incidents, a multi-disciplinary escalation and review process, and a reporting and filing protocol for material incidents within four business days of materiality determination. 

     ●  A periodic cyber risk assessment conducted by independent experts, which provides an external validation and benchmarking of our cybersecurity practices and performance. 

   As part of our cybersecurity program, we have and will continue to engage third parties, such as consultants, network security firms, auditors, and forensics providers, to assist us in assessing, managing, or investigating cyber risks or incidents. For example, we have engaged industry recognized third parties to monitor and conduct penetration and vulnerability testing on our networks and to assist us in the conduct of tabletop exercises.
    
   In order to oversee and identify risks from cybersecurity threats associated with our use of third-party service providers, we perform third-party risk assessments designed to help protect against the misuse of IT by third parties and business partners and generally request that third-party service providers provide us information about their security policies and procedures. 

      13

      Table of Contents

   Cybersecurity Governance and Oversight
    
   We have a cybersecurity governance structure that involves the oversight and involvement of our board of directors and senior management.
    
   Our board of directors, through its Audit Committee, maintains oversight