Company: SXT
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001140361-25-005084
Chunk: 34

Company: SENSIENT TECHNOLOGIES CORP
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 34
---
Item 1C.

              Cybersecurity.

Risk Management and Strategy

The Company recognizes the importance of assessing, identifying, and managing material risks associated with cybersecurity threats in order to safeguard our information systems and protect
        the confidentiality, integrity, and availability of our information systems and the information residing therein. We have implemented several cybersecurity processes to aid in our efforts to assess, identify, and manage such material risks.

Our risk management program considers cybersecurity threat risks alongside other risks as part of our overall risk assessment process. We believe that integrating our cybersecurity risk
        management into our broader risk management framework promotes a company-wide culture of cybersecurity risk management and ensures that cybersecurity considerations are an integral part of decision-making at every level.

We employ a wide range of tools, policies, and services, including but not limited to penetration testing, network and endpoint monitoring, vulnerability assessments, information
        segregation, and tabletop exercises to inform our risk identification and assessment. We routinely review and upgrade our information technology and cybersecurity systems in order to better manage, report, and protect the information related to our
        formulas and processes, research and development, trade secrets, products, customers and suppliers, employees, and other sensitive information. We also have a cybersecurity specific risk assessment process that helps us identify our cybersecurity
        threat risks and maturity level by comparing our processes to standards set by the International Organization for Standardization.

To provide for the availability of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and to protect against, detect, and
        respond to cybersecurity incidents, we:

    •

              Run tabletop exercises with our executive team to simulate a response to a cybersecurity incident and use the findings to improve our processes and technologies;

    •

              Conduct regular third-party assessments of our cybersecurity program;

    •

              Undertake regular reviews of our incident response plan and other policies related to cybersecurity;

    •

              Run regular cyber penetration testing;

    •

              Through policy and practice, classify information, restrict access, and require employees to treat sensitive data with care; and

    •

              Conduct an annual employee training program, including regular phishing email simulations for all employees with access to corporate email systems to enhance awareness and responsiveness to such possible threats.

Our incident response plan coordinates the activities we take to prepare for, detect, respond to, and recover from cybersecurity incidents, which include processes to triage, assess
        severity of, escalate, contain, investigate, and remediate the incident, as well as to comply with potentially applicable legal obligations