Company: SGA
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001558370-25-004153
Chunk: 17

Company: SAGA COMMUNICATIONS INC
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1C
Chunk 17
---
 they are assessing and managing cybersecurity risks in accordance with our processes and procedures. Our CTO has over 25 years' experience managing enterprise information technology systems. 

     Our management team supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment. 

     Pursuant to our CIRP, when a cybersecurity event has been identified through our detection processes, it is assessed in order to determine whether the event is a cybersecurity incident. Our CIRP designates the primary manager of a cybersecurity incident, describes the parties who should be informed about the incident and outlines the processes for containment, eradication, recovery and resolution of the incident. Depending on the severity and impact of a cybersecurity threat, members of our senior management team and Board of Directors are notified of an incident and kept informed of the mitigation and remediation of the incident.