Company: CCO
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0001334978-25-000008
Chunk: 64

Company: Clear Channel Outdoor Holdings, Inc.
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 64
---
 have experienced, and may in the future experience, whether directly or through our supply chain partners, cybersecurity incidents. While prior cybersecurity incidents have not had a material impact on the Company, future cybersecurity incidents, including breaches, could have a material impact on our business, operations and reputation. For additional information about the Company’s cybersecurity risks, please refer to “Technology Risks” in Item 1A of this Annual Report on Form 10-K.

Governance

Our Board of Directors has delegated oversight of risks related to cybersecurity to the Audit Committee. The Audit Committee is, therefore, charged with reviewing our cybersecurity processes for assessing key strategic, operational and compliance risks. Our Corporate Compliance Officer briefs the Audit Committee on cybersecurity risks at each of its meetings, which occur at least four times each year. These briefings include an assessment of cyber risks, an overview of the cyberthreat landscape, updates on cybersecurity incidents, and reports on our investments in cybersecurity risk mitigation strategies and technologies and related corporate governance. In addition, our domestic and European chief technology officers brief the Audit Committee on cybersecurity risks at least annually. The Audit Committee then provides updates on significant cybersecurity matters to the Board periodically.

25

Table of Contents

Regional heads of cybersecurity and chief technology officers oversee their respective cybersecurity programs, including regional Cybersecurity Steering Committees (each, a “CSSC”), which are comprised of senior executives and extended leadership, and which provide oversight of cybersecurity investments by monitoring, evaluating, approving and supporting actions related to cybersecurity risk, incident management, investment and prioritization of projects and services. Each CSSC meets quarterly and reports to the Company’s senior management team, including the Corporate Compliance Officer, on progress towards specific cybersecurity objectives. A strong partnership exists between our information technology, enterprise security, internal audit, and legal and compliance functions so that identified issues are addressed in a timely manner and incidents are reported to the appropriate regulatory bodies as required.

Our Corporate Compliance Officer is Lynn A. Feldman, the Company’s Executive Vice President, Chief Legal Officer and Corporate Secretary. Ms. Feldman has over 20 years of experience leading the legal and risk management departments of public companies. Her areas of responsibility cover privacy, cybersecurity risk and data protection; governance, including with respect to cybersecurity; and global legal compliance and reporting. For additional information about Ms. Feldman’s experience, please refer to the “Information About Our Executive Officers” section in this Annual Report on Form 10-K. Our domestic Chief Technology Officer, Christian Aaselund, oversees the integration and security of the Company’s digital products