Company: VRE
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000924901-25-000011
Chunk: 140

Company: Veris Residential, Inc.
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 140
---
ITEM 1C.    CYBERSECURITY

The Company’s information technology, communication networks, system applications, accounting and financial reporting platforms and related systems, and those that are offered to residents and tenants are integral to the operation of the business.  The Company utilizes these systems, among others, for financial analysis, management, and reporting, for facilitation of operations, including monitoring and optimization of various building management systems, for initiation, generation, and completion of resident leasing, for internal communications, and for various other aspects of the business. The Company’s cybersecurity strategy is focused on detection, protection, incident response, security risk management and mitigation, and resiliency of the cybersecurity infrastructure. The Company has implemented or is in the process of continuously evaluating, testing and updating various information security processes, policies and protective technologies designed to identify, assess and manage material risks from cybersecurity threats to the Company’s critical computer networks, third-party hosted services, communications systems, hardware and software, and critical data, including confidential information that is proprietary, strategic or competitive in nature, as well as any personally identifiable information related to the Company’s residents’ and employees’ personal data.The Company’s cybersecurity risk management relies on a multidisciplinary team, including its information technology and cybersecurity team, legal department, executive management, and third-party service providers to identify, assess, and manage cybersecurity threats and risks. In 2023, the Company expanded its team by adding a full-time Chief Information Security Officer (CISO), reporting directly to the Chief Operating Officer, responsible for managing the internal and external cybersecurity resources. The CISO has over 30 years of experience in corporate enterprise infrastructure and data security management held at a senior management level, acting in both a corporate as well as consulting role within many highly regulated industries.  The CISO is responsible for having successfully developed and implemented several cyber security programs within prominent companies within the retail, financial and life science sectors. The Company identifies and assesses risks from cybersecurity threats by monitoring and evaluating the cybersecurity threat environment and the Company’s risk profile. This multi-faceted approach to cybersecurity includes physical, administrative, and technical safeguards.  During the year ended December 31, 2024, the Company utilized the National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF), to assess and report to the Company’s executive management and Board of Directors on the current maturity of operational and procedural controls for securing and safeguarding the Company’s information technology assets.  The Company will continue to utilize the NIST CSF