Company: YEXT
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001614178-25-000030
Chunk: 81

Company: Yext, Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1C
Chunk 81
---
, as of the date of filing this Annual Report on Form 10-K, we have not previously experienced any cybersecurity incidents that were determined to be material. For additional information regarding whether any risks from cybersecurity threats are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, see Item 1A, “Risk Factors,” in this Annual Report on Form 10-K.

Governance

One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. The audit committee of our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. 

Members from our legal, finance, internal audit and technology leadership comprise a management committee on cybersecurity (the “Cybersecurity Risk Committee”), which is primarily responsible to assess and manage our material risks from cybersecurity threats. The composition of our Risk Management Committee reflects a diverse and comprehensive range of expertise, critical for overseeing the effective evaluation and management of potential material cybersecurity risks within Yext. Members of the Cybersecurity Risk Committee hold advanced degrees in key fields relevant to our risk management efforts, including computer science, information security assurance, business administration, engineering, as well as legal, finance, and accounting disciplines. This combination of specialized knowledge and experience, reinforced by industry recognized certifications in these areas, positions the Cybersecurity Risk Committee to effectively evaluate and manage potential material cybersecurity risks. 

Our Chief Information Security Officer and our Cybersecurity Risk Committee oversee our cybersecurity policies and processes, including those described in “Risk Management and Strategy” above. The processes by which our Chief Information Security Officer 

   39

and our Cybersecurity Risk Committee are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents includes the following: •Continuous monitoring to detect and respond to potential cybersecurity incidents promptly, including the use of advanced security technologies and threat intelligence;•Engagement with external cybersecurity experts to conduct independent assessments of our cybersecurity posture, ensuring that our defenses remain robust against an evolving the threat landscape;•Development and testing of incident response processes, plans and procedures to ensure preparedness in the event of a cybersecurity incident, including clearly defined roles and responsibilities enabling a swift and coordinated response;•Communication and update channels that allow for the timely dissemination of information regarding cybersecurity incidents and the effectiveness of implemented controls. This includes regular reporting to senior management, Cybersecurity Risk Committee and, as appropriate, to the Board of Directors; and•