Company: USCB
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001562762-25-000043
Chunk: 13

Company: USCB FINANCIAL HOLDINGS, INC.
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1C
Chunk 13
---
security ThreatsIt is the policy of the Company and its technology service providers (“TSPs”) to ensure that they can identify, mitigate, and respond to cyber-attacks involving destructive malware and invasive attacks such as phishing, ransomware, malware, DDoS attacks, etc. This commitment aligns with the Company’s risk appetite, Incident Response Policy, and Business Continuity Plan, which incorporates business continuity planning and testing activities to enhance response and recovery capabilities. The Company realizes that it faces a variety of risks from cyber-attacks involving destructive malware, including liquidity, capital, operational, and reputation risks, due to events such as fraud, data loss, and disruption of customer service. As such, it is the policy of the Company to ensure that its risk management processes, and business continuity planning address these risks by: ● Establishing a comprehensive governance program encompassing policies and procedures to administer and oversee the information/cybersecurity programs to ensure adherence to regulatory guidance and industry best practices. ● Securely configuring systems and services to mitigate the impact of cyberattacks. This includes measures such as logical network segmentation, hard backups, maintaining an inventory of authorized devices and software, and physical segmentation of critical systems. Consistency in system configuration fosters a secure network environment by removing or disabling unused applications, functions, or components. ● Implementing and testing controls around critical systems on a regular basis to ensure appropriate access control and segregation of duties. Limits on sign-on attempts for critical systems are enforced, with accounts being locked upon threshold exceedance. Alert systems notify of baseline control changes on critical systems, with the effectiveness and adequacy of controls periodically tested and the results reported to senior management and, if applicable, the Risk Committee, along with