Company: FRT-PC
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0000034903-25-000016
Chunk: 52

Company: FEDERAL REALTY INVESTMENT TRUST
Filing Date: 2025-02-13
Form: 10-K
Item: Item 7
Chunk 52
---
 to corporate responsibility are overseen by our Board of Trustees. 

Our development activities have been heavily focused on owning, developing and operating properties that are certified under the U.S. Green Building Council’s® (“USGBC”) Leadership in Energy and Environmental Design™ (LEED®) rating system which serves as a third-party verification that a building or community was designed and built to mitigate its environmental footprint. We currently have 25 LEED certified buildings and our Pike & Rose project has achieved LEED for Neighborhood Development Stage 3 Gold certification. 

Cyber Security

Our chief information officer, who has over 30 years of experience in managing information systems for real estate companies, heads our internal team of technology professionals who are responsible for managing our cybersecurity risks, which includes identifying our primary areas of risk, establishing processes, procedures, and systems to mitigate those risks and identifying and remediating any breaches that may occur. Cybersecurity risk management falls under our general counsel as part of our overall risk management program, which is ultimately overseen by the Audit Committee of the Board of Trustees. Our team is supported by a third party company that we have retained to act as our chief information security officer based on the third party company's experience in preventing cybersecurity incidents, advising clients about appropriate cybersecurity procedures and processes, and assessing the integrity of those procedures and processes. The assessment and management of our cybersecurity risks covers all of our internal systems as well as the systems of third parties who maintain our data.

We rely on our management team's experience in risk management, in consultation with our third party advisor, to appropriately address cybersecurity threats. As part of our processes to manage risks from cybersecurity threats, we have developed and enforce company-wide policies related to password encryption, strength and expiration, we require multi-factor authentication where appropriate, and we conduct regular employee training about our policies and cybersecurity threats. We make use of firewalls, anti-virus software, backups, redundancies, regular penetration testing, and our systems monitor and flag irregularities in how our information systems are accessed or used. Any known cybersecurity incidents would be reported by our chief information officer to our general counsel and disclosure committee for evaluation and remediation, and for a determination of how we might develop further security systems and procedures to address evolving cybersecurity threats. Management provides written and verbal updates to the Audit Committee at least quarterly identifying our primary areas of risk, actions taken or planned to be taken to mitigate those risks, and specific activities undertaken during the quarter, including employee training and the results of that training. Management would also provide updates