Company: ADAMM
Filing Date: 2025-04-28
Form Type: DEF 14A
Source: 0001273685-25-000038
Chunk: 40

Company: ADAMAS TRUST, INC.
Filing Date: 2025-04-28
Form: DEF 14A
Chunk 40
---
 prioritizes the swift recovery of information technology systems, data, and infrastructure and the efficient restoration of servers and applications to their normal operational state in the event of a significant disaster.

• Insurance. We maintain a breach response insurance policy.

• Enterprise Risk Assessment. The Company completes an annual enterprise risk assessment that includes cybersecurity risks and mitigants. The results of the enterprise risk assessment are shared with the Board of Directors on an annual basis.

| 39 |

• Implemented Programs for a Hybrid Work Environment. We have implemented initiatives relating to mobile device management, cloud storage services, endpoint protection, and identity and access management. For example, we have implemented a service that focuses on mobile device management and mobile application management, as well as data classification and file server data loss protection measures. We have further implemented endpoint protection and endpoint detection and response which provides visibility that is designed to identify unauthorized systems and applications.

• Ongoing Monitoring. Our information security procedures are designed to evolve as information security risks and considerations change over time.

Our Board of Directors exercises oversight of information security risk primarily through the Audit Committee. The Head of Information Technology provides information security updates to named executive officers and briefs our Board of Directors and Audit Committee on relevant information security issues on a quarterly basis. We also make available periodic cybersecurity training for members of our Board of Directors.

| 40 |

### CERTAIN RELATIONSHIPS AND RELATED TRANSACTIONS
There were no material related party transactions during 2024.

#### Related Person Transaction Policy
Our Board of Directors has adopted a written policy regarding the approval of any “related person transaction,” which is any transaction or series of transactions in which we or any of our subsidiaries is or are to be a participant, the amount involved exceeds $120,000 and a “related person” (as defined under SEC rules) has a direct or indirect material interest. Under the policy, a related person would need to promptly disclose to our Secretary any related person transaction and (i) all material facts about the transaction, (ii) the benefits to us of the related party transaction, (iii) if applicable, the availability of other sources of comparable products and services and (iv) an assessment of whether the proposed transaction is on terms that are comparable to the terms available to an unrelated third party or to employees generally. Our Secretary, together with outside legal counsel, would then assess whether the proposed transaction is a “related person transaction” and, if so, communicate that information to the Audit Committee. Based on its consideration of all of the relevant facts and circumstances, the