Company: DOMO
Filing Date: 2025-04-04
Form Type: 10-K
Source: 0001505952-25-000045
Chunk: 102

Company: DOMO, INC.
Filing Date: 2025-04-04
Form: 10-K
Item: Item 1C
Chunk 102
---
, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards.  We devote significant resources and designate high-level personnel, including our Chief Information Security Officer who reports to our Chief Technology Officer, to manage the risk assessment and mitigation process.  As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management.  Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.  We engage assessors, consultants, and auditors in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. 

We require each third-party service provider which have access to or a relationship to our systems or data to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.  

59

Governance

One of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the audit committee.  

We have a unified and centrally coordinated team, led by our Chief Information Security Officer (CISO), that is responsible for implementing and maintaining centralized cybersecurity and data protection practices in close coordination with executive leadership team including CEO, CTO, CFO, CLO, CHRO, COO, and other members of the senior leadership team. The CISO has extensive experience in the management of cybersecurity risk management programs, having served in various leadership roles in information technology and information security for over 18 years. He also holds an undergraduate degree in information systems and a master’s degree in business administration and accounting. We believe the Company’s business leaders, including our CEO, CFO, CTO, CHRO, COO, and CLO, who have experience managing cybersecurity risk at Domo and at similar companies, have the appropriate expertise, background and depth of experience to manage risks arising from cybersecurity threats. Reporting to