Company: LPX
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000060519-25-000005
Chunk: 7

Company: LOUISIANA-PACIFIC CORP
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 7
---
 program is managed by our Information Security Officer (ISO). Our ISO has over six years of cybersecurity experience working in publicly traded companies, with expertise leading risk remediation efforts in vulnerability management, network security, security awareness, threat monitoring, data security and cloud security. 

To more effectively share information and gain consensus regarding cybersecurity initiatives and prevention policies, the Company has in place an Enterprise Risk Management Committee consisting of various members of LP senior leadership including the Chief Legal Counsel and Chief Financial Officer. The Enterprise Risk Management Committee is chaired by our Chief Tax Officer. The ISO, along with her team, is responsible for leading an enterprise-wide information security strategy, including policy, standards, architecture, processes, and security technology. The Enterprise Risk Management Committee (i) meets quarterly and as-needed to review and discuss the Company’s risks, including cybersecurity threats, incident responses, technology, the status of projects to strengthen the Company’s information security systems, assessments of the Company’s cybersecurity program and the emerging threat landscape and (ii) reports risks related to any material cybersecurity incidents, as needed, to the Board of Directors and the Finance and Audit Committee (FAC) of the Board of Directors. 

27

Board ResponsibilitiesOversight of risks from cybersecurity threats is shared by the Board of Directors and the FAC. The FAC oversees our cybersecurity program. The ISO provides the FAC with an annual presentation on our cybersecurity program, emerging threats, and the state of LP’s cybersecurity maturity. In addition, the ISO provides updates to the FAC no less often than annually with respect to additional information regarding the cybersecurity program.

28