Company: DOMO
Filing Date: 2025-04-04
Form Type: 10-K
Source: 0001505952-25-000045
Chunk: 12

Company: DOMO, INC.
Filing Date: 2025-04-04
Form: 10-K
Item: Item 1
Chunk 12
---
, theft, misuse, unauthorized access, or other security incidents or vulnerabilities affecting the data. We have also designed and implemented a combination of people, process and technology to reduce the impact of a security incident at a third-party vendor, business partner, or customer. 

As part of our security program, we conduct application security assessments, vulnerability management, penetration testing, security audits, and ongoing risk assessments. We also maintain a variety of incident response plans, backup and recovery plans and business continuity/disaster recovery plans that are utilized when incidents are detected. We require employees with access to information systems, including all corporate employees, to undertake data protection and cybersecurity training and compliance programs annually.

We have a unified and centrally-coordinated team, led by our chief information security officer, that is responsible for implementing and maintaining centralized cybersecurity and data protection practices in in close coordination with executive leadership team including CEO, CTO, CFO, CLO, CHRO, COO, and other members of the senior leadership team. Reporting to our chief information security officer are a number of experienced security, governance, risk and compliance professionals. In addition to our in-house cybersecurity capabilities, we also engage with external assessors, consultants, auditors, or other third parties to assist with assessing, identifying, and managing cybersecurity risks.

Our cybersecurity risks and risk management activities are evaluated as part of our enterprise risk assessments which are also reviewed by the Audit Committee (the "Audit Committee") of our Board of Directors. In addition, we have established a Security Steering Committee, which is comprised of executives and senior leaders from the Product and Infrastructure organizations, in addition to the Information Security and Product Security organization leaders. The Security Steering Committee meets monthly to evaluate cybersecurity related risks and mitigations, including prioritization of efforts to reduce the overall cybersecurity risk for the company from the engineering and product development perspective.

Benchmarks and Applications — Ecosystem 

We built the Domo platform with the explicit goal that it be extended and leveraged by a rich ecosystem of partners, developers, business experts and entrepreneurs. Each of the core pieces of the Domo platform has been engineered from the ground up to be extensible and accessible through APIs and SDKs. We have also created the Domo Appstore, a marketplace for the distribution of additive capabilities and pre-built content from the Domo ecosystem, such as a new data connector, a best-practice dashboard, or a fully functioning custom solution, to extend their Domo experience. Third parties are able to rapidly develop rich applications that leverage the collective power of the Domo