Company: XXII
Filing Date: 2025-03-20
Form Type: 10-K
Source: 0001558370-25-003345
Chunk: 19

Company: 22nd Century Group, Inc.
Filing Date: 2025-03-20
Form: 10-K
Item: Item 1C
Chunk 19
---
Item 1C. Cybersecurity

The Company recognizes the critical importance of maintaining the trust and confidence of our customers, clients, business partners and employees. The Board has delegated to the Audit Committee oversight of cybersecurity and other information technology risks affecting the Company. The Audit Committee and senior management are actively involved in oversight of the Company’s risk management program, and cybersecurity represents an important component of the Company’s overall approach to enterprise risk management (“ERM”). In general, the Company seeks to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that the Company collects and stores by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Risk Management and StrategyAs one of the critical elements of the Company’s overall ERM approach, the Company’s cybersecurity program is focused on the following key areas: