Company: VLDXW
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0000950170-25-047760
Chunk: 290

Company: Velo3D, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1C
Chunk 290
---
We recognize the critical importance of maintaining the trust and confidence of all our stakeholders. Our Board is actively involved in oversight of our risk management program, and cybersecurity represents an important component of our overall approach to risk management. Our cybersecurity policies, standards, processes, and practices are fully integrated into our risk management program and are based on recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and other applicable industry standards. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Risk Management and Strategy

As one of the critical elements of our overall risk management approach, our cybersecurity program is focused on the following key areas: 

Governance: The Board’s oversight of cybersecurity risk management is supported by the Audit Committee of the Board, which receives, at a minimum, quarterly reports and presentations from our risk management function, our Information Technology department and other members of management. The Board and Audit Committee also receive prompt and timely information regarding material cybersecurity incidents as described below.

Collaborative Approach: We have implemented a comprehensive, cross-functional approach to identifying, preventing, and mitigating cybersecurity threats and incidents, while also executing controls and procedures that provide for the prompt escalation of certain material cybersecurity incidents so that decisions regarding the public disclosure and reporting of such material incidents can be made by management in a timely manner.