Company: PRSU
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0000950170-25-040127
Chunk: 23

Company: Pursuit Attractions & Hospitality, Inc.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1B
Chunk 23
---
 that may materially affect the Company, see “Risk Factors” under the heading “We are vulnerable to cybersecurity attacks and threats.” (Part I, Item 1A of this 2024 Form 10-K). Cybersecurity Governance Cybersecurity risk management is a part of our risk management process and is subject to oversight by our Board of Directors and management. Our Board of Directors has delegated oversight and mitigation of risks from cybersecurity threats to our Audit Committee. Our Audit Committee receives quarterly reports from either our CIO or our General Counsel concerning any significant cybersecurity threats, risks, and the tools and processes we have implemented for mitigation. Our cybersecurity risk assessment and management processes are implemented and maintained by certain members of management, including the following:•The Information Security Executive Committee consists of our Legal Counsel, Chief Accounting Officer, Chief Compliance Officer, CIO, and Vice President of People & Culture. They are responsible for setting broad policy and communicating to the Chief Executive Officer, Chief Financial Officer, and the Board of Directors on potential material cybersecurity incidents that may require disclosure.•The Information Security Council consists of our CIO, the Senior Director of Information Security, in-house information security experts, and information technology experts and leaders from across the Company. The CIO leads this committee and communicates with the Information Security Executive Committee as required.•The Information Security Team consists of cybersecurity professionals primarily responsible for managing cybersecurity at Pursuit. This team has the primary responsibility for identifying, assessing, and managing material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware, software, and critical data. This team is led by our CIO, who has over 25 years of experience in information technology including cybersecurity oversight. This team includes the following:•The Senior Director of Information Security reports directly to the CIO and is an information security professional with over 20 years of experience in the development and implementation of information security processes, procedures, and practices. 

14

•The Senior Director of Global Infrastructure & Operations reports directly to the CIO and is responsible for implementing, maintaining, and providing oversight of the IT Infrastructure and the Information Security Team. •The Security Engineer leads the day-to-day operations of the Information Security Team and oversees individual analysts and IT experts on the team. •The Security Incident Response Team (“SIRT”) is responsible for executing the IRP. The SIRT comprises individuals from multiple departments, divisions, and disciplines. Members of the SIRT are trained in incident response and reporting procedures.

Item 2. Properties 

We primarily own our properties,