Company: SKLZ
Filing Date: 2025-11-06
Form Type: 10-K
Source: 0001801661-25-000050
Chunk: 103

Company: Skillz Inc.
Filing Date: 2025-11-06
Form: 10-K
Item: Item 1C
Chunk 103
---
ITEM 1C. CYBERSECURITY

We take a comprehensive approach to cybersecurity risk management. While securing our customers and stakeholders’ data is a top priority, like many companies with a public presence, we are subject to human-targeted and AI-assisted cyberattacks. Our board of directors (the "Board") and our management are involved in the oversight of our risk management program, of which cybersecurity represents an important component. As described in more detail below, we have established policies, standards, processes and practices designed to assess, identify, and manage material risks from cybersecurity threats. We have devoted significant financial and personnel resources to implement and maintain security measures in an effort to meet regulatory requirements and customer expectations, and we intend to continue to make significant investments in our data and cybersecurity infrastructure. There can be no guarantee that our policies and procedures will be effective, as cyber criminals are becoming more sophisticated and effective every day and increasingly targeting enterprise software companies. Although our Risk Factors include further detail about the material cybersecurity risks we face, we believe that risks from prior cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that such incidents will not materially affect us, including 

43

TABLE OF CONTENTS

our business strategy, results of operations, or financial condition. For the year ended December 31, 2024, we are not aware of any material cybersecurity incidents that had a significant impact on our operations or financial condition.  For more information on our cybersecurity related risks see the risk factor entitled “We rely on information technology (“IT”) and other systems and platforms, and any failures, errors, defects or disruptions in our or our vendors’ or other partners’ systems or platforms could diminish our brand and reputation, subject us to liability, disrupt our business, affect our ability to scale our technical infrastructure and adversely affect our business, financial condition, operating results and growth prospects” in Part I, Item 1A Risk Factors of this Annual Report on Form 10-K, above.Risk Management and StrategyOur policies, standards, processes and practices designed to assess, identify, and manage material risks from cybersecurity threats are integrated into our overall risk management program. These policies, standards, processes, and practices are based on maintaining a security-in-depth methodology as informed by the National Institute of Standards and Technology (“IST”) Cybersecurity Framework, the International Organization for Standardization (“ISO”)/IEC 27001 and other applicable industry standards