Company: PLPC
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001628280-25-012640
Chunk: 33

Company: PREFORMED LINE PRODUCTS CO
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1C
Chunk 33
---
Item 1C. Cybersecurity

Cybersecurity Risk Management and Strategy

The Company has implemented information security programs to, among other actions, assess, identify and manage material risks from cybersecurity threats. These programs include periodic risk assessments, company-wide testing initiatives, periodic phishing tests and annual audits. As the Company assesses its risks and determines how to implement risk management programs, the following factors, among others, are considered: likelihood and severity of risk, impact on the Company and others if a risk materializes, feasibility and cost of controls, and impact of controls on operations and others. The Company also utilizes an independent cybersecurity advisor to provide periodic objective assessments of the Company’s capabilities and to conduct advanced attack simulations.Further, as of part of the Company’s overall information security program, the Company conducts a security awareness program, which includes training that reinforces the Company’s security management policies, standards, and practices, as well as the 

14

expectation that employees comply with these policies, standards and practices. The Company’s security awareness program engages personnel through mandatory periodic training on identifying potential cybersecurity risks and protecting the Company’s resources and information. The Company also annually engages third parties (as well as its internal audit department) to audit the Company’s information security programs. The Company uses a variety of processes to address cybersecurity threats related to the use of third-party technology and services, including pre-acquisition diligence, imposition of contractual obligations, and ongoing monitoring. To date, there has not been any previous cybersecurity incident that has materially affected the Company's business strategy, results of operations or financial condition.

See Item 1A. Risk Factors under the heading of “The Company employs information technology systems to support its business, and any material breach, interruption or failure may adversely impact the Company’s business.” for additional information on cybersecurity threats that could have a material impact on the Company. The Risk Factors section should be read in conjunction with this Item 1C. 

Cybersecurity Risk Governance and Oversight

The Company’s Board of Directors maintains an active role in the Company’s overall enterprise risk oversight to identify and mitigate broader systemic risks. The Audit Committee is responsible for overseeing and reviewing the Company’s information security programs, including cybersecurity. The Director of Global Information Systems, who manages information security training and awareness program, updates the Audit Committee periodically regarding information security matters. The findings from the Company’s annual third-party and internal information security audits also are reported to the Audit Committee. The Company also actively engages with key vendors and industry participants as part of its efforts, which are reported