Company: COHU
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0001437749-25-004612
Chunk: 48

Company: COHU INC
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1
Chunk 48
---
 in the loss of sales or curtailed growth. While we maintain general liability and cybersecurity insurance coverage, such coverage might not be adequate or otherwise protect us from liabilities or damages with respect to claims alleging compromises of customer data, that such coverage will continue to be available to us on acceptable terms or at all, or that such coverage will pay future claims. The successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), could have an adverse effect on our business.

29

We currently are, and in the future may be, subject to litigation or regulatory proceedings that could have an adverse effect on our business.

From time to time, we may be subject to litigation or other administrative, regulatory or governmental proceedings, including tax audits and resulting claims that could require significant management time and resources and cause us to incur expenses and, in the event of an adverse decision, pay damages or incur costs in an amount that could have a material adverse effect on our financial position or results of operations.

			Item 1B. 

			Unresolved Staff Comments.

None.

			Item 1C. 

			Cybersecurity.

Risk Management and Strategy

We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our intellectual property and data. We maintain policies and procedures designed to allow management to assess, identify, and manage material risks from cybersecurity threats. We integrate our cybersecurity policies and procedures into our overall enterprise risk management program, which is implemented by management and overseen by the Board of Directors (the “Board”) through its Audit Committee.

We utilize the Center for Internet Security (“CIS”) Critical Security Controls as a framework for managing our cybersecurity program. The CIS framework outlines 18 critical control areas relating to organizational security and provides effective methodologies, guidelines, and industry standard best practices to develop and manage a comprehensive cybersecurity program. Additionally, we align our controls to various international security certifications and standards and have adopted best practices from industry leading frameworks. Our cybersecurity program includes policies and procedures relating to encryption, data loss prevention technology, authentication technology, access control, anti-malware software, third-party risk monitoring, insider risk management and identity management. We engage third-party services to conduct evaluations of our security controls, whether through penetration testing, independent audits, or consulting on best practices to address new challenges. These evaluations include testing both the