Company: LANDO
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001495240-25-000005
Chunk: 76

Company: GLADSTONE LAND Corp
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 76
---
 applications; ▪frequent systems backups with recovery capabilities; and ▪regular vulnerability scans and penetration testing.Contractually, we require the ISP to annually provide us with a third-party report on its systems and on the suitability of the design and operating effectiveness of its controls relevant to information and cyber security.  In addition to the ongoing dialogue and technology interaction between the Director of IT, our Adviser and Administrator, and the ISP, any significant findings in these reports are shared with us, including our Board of Directors and other officers, to enhance ongoing monitoring and assessment of our information technology and cybersecurity risk management. While our ISP works to create a hardened information technology systems environment, our Adviser and Administrator also regularly trains employees working on our behalf on the evolving threats and educates them on cybersecurity risks to provide an additional protection barrier through end-user knowledge.  Whether it is communicating information about the latest cybersecurity threats, assessing employees’ awareness through mock fraud exercises, social engineering and phishing campaigns, or providing access to a library of educational material about past and newly-evolving cybersecurity attacks, our Adviser and Administrator work in concert with the ISP on our behalf to keep employees servicing us informed so as to provide an additional protection barrier through end-user knowledge.

Notwithstanding our risk management and strategy described above, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.  We are not currently aware of any known cybersecurity risks that may materially impact our operations, though we may not be able to determine the likelihood of such risks.  See Part I, Item 1A, “Risk Factors—Risks Relating to Our Business and Operations—Cybersecurity risks and cyber incidents may adversely affect our business by causing a disruption to our operations or the operations of businesses in which we invest, a compromise or corruption of our confidential information, and/or damage to our business relationships, all of which could negatively impact our business, financial condition, and operating results,” for a discussion of risks related to cybersecurity and cyber incidents.

Governance

Our Board of Directors is actively engaged in overseeing our cybersecurity and information security program.  Our Board of Directors receives regular reports during board meetings from our CCO on our and our Adviser’s and Administrator’s efforts concerning information security and addressing information technology and cybersecurity risks no less than quarterly and regularly receives updates from third parties on various business risks, which include cybersecurity matters.  The reports are distributed to our Board of Directors, and our CCO engages in detailed discussions with the independent board members during the