Company: PBH
Filing Date: 2025-05-09
Form Type: 10-K
Source: 0001295947-25-000017
Chunk: 58

Company: Prestige Consumer Healthcare Inc.
Filing Date: 2025-05-09
Form: 10-K
Item: Item 1C
Chunk 58
---
 and continued availability of information possessed by the Company; •A third-party cybersecurity risk management process for service providers, suppliers and vendors performed throughout the year.

25

We have not identified any risks from known cybersecurity threats, including any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. For a detailed discussion on the Company’s cybersecurity related risks, see “Risk Factors” relating to information technology contained in Part 1, Item 1A of this Annual Report on Form 10-K. 

Cybersecurity GovernanceOur Board of Directors considers cybersecurity risk a part of its overall risk oversight function. The VP of IT/CISO reports to the CFO & COO, who regularly reports to the Board of Directors and Audit Committee regarding cybersecurity risks and our risk management program. The Audit Committee oversees management’s implementation of our cybersecurity risk management program, including reviewing risk assessments and policies with respect to the Company’s IT systems, privacy, information governance and cybersecurity management. The Audit Committee meets with management at least annually, and as necessary, to review the Company’s IT security program, compliance and controls with the CFO & COO and/or CISO, including the potential impact of data privacy risk exposures on the Company’s business, financial results, operations and reputation, the steps management has taken to monitor and mitigate such exposures, and major legislative and regulatory developments that could materially impact the Company’s data privacy risk exposure.Our VP of IT/CISO and CFO & COO are responsible for assessing and managing our material risks from cybersecurity threats. The cyber security risk management team is led by our VP of IT/CISO, who has significant experience across digital innovation and technology-enabled growth, information security, infrastructure, operations and compliance. The team, which includes personnel with Certified Information Systems Security Professional ("CISSP") certification from the International Information System Security Certification Consortium, has primary responsibility for our overall cybersecurity risk management program and oversees both our internal cybersecurity personnel and our retained external cybersecurity consultants. Members of our executive leadership team, including our CFO & COO and our Senior Vice President and General Counsel, as well as the other members as needed, supervise efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public, or private sources, including external consultants engaged by us, alerts and reports produced by security tools deployed in the IT environment.