Company: KODK
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0000950170-25-040256
Chunk: 58

Company: EASTMAN KODAK CO
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1B
Chunk 58
---
, business and financial condition” in this Form 10-K. 

27

Table of Contents

GovernanceConsistent with the overall risk management governance structure, management is responsible for the day-to-day management of cybersecurity risk while the Board and its Audit and Finance Committee perform an oversight function.Board Oversight. The Board has delegated to its Audit and Finance Committee the responsibility for overseeing cybersecurity risk exposures in addition to our broader risk management program. Management (including the Chief Information Officer (“CIO”) and the CISO) reports at least annually to the Audit and Finance Committee on information security and data privacy and protection. These presentations address a wide range of topics, including trends in cyber threats and the status of initiatives intended to bolster  security systems and the cyber readiness of personnel.Management’s Role. The IT Security Team addresses and responds to cyber risk, including cyber risks related to security architecture and engineering, identity and access management and security operations. The team oversees compliance with the cybersecurity framework within the organization and facilitates cybersecurity risk management activities throughout the organization. The IT Security Team also assists with the review and approval of policies, completes benchmarking against applicable standards, and oversees the security awareness program.The IT Security team is led by the CISO. The CISO reports to the CIO who, in turn, reports to the Executive Chairman and Chief Executive Officer. The CISO has 40 years of IT experience, with over 20 of those focused on IT security functions and strategies. Collectively, the other members of the IT Security Team have decades of relevant education and experience and maintain a wide range of industry certifications. Cybersecurity training is provided for the IT Security Team upon joining the IT Security Team, on an annual basis and more frequently when necessary.As noted previously, the CISO is a member of the Council, which meets monthly to provide operational direction to the IT Security Team considering the evolving risk landscape. The IT Security Team and the Council, through ongoing communication, help monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents. The CISO or CIO, in consultation with the Council and other members of senior management, reports such threats and incidents to the Audit and Finance Committee, as appropriate. These reports may be included in, or in addition to, the regular annual reports to the Audit and Finance Committee.

ITEM 2. PROPERTIES

Kodak's worldwide headquarters is located in Rochester, New York.

Kodak owns 11 million square feet and leases, as a lessee, approximately 4 million square feet of space that includes