Company: MVIS
Filing Date: 2025-03-26
Form Type: 10-K
Source: 0001641172-25-000783
Chunk: 167

Company: MICROVISION, INC.
Filing Date: 2025-03-26
Form: 10-K
Item: Item 1C
Chunk 167
---
Risk
Management and Strategy

Our
Cybersecurity Processes 

We
continue to strengthen our cybersecurity measures to safeguard our information systems based on industry standards. Our measures include
policies to promote internal compliance by our employees, policies and procedures to regularly evaluate the security of our information
systems and implementation of third-party products, including intrusion prevention and detection solutions, multifactor identification
and anti-virus software, to help detect and protect against potential cybersecurity threats. We educate our staff on cybersecurity matters
with periodic risk awareness information, phishing awareness campaigns, and training materials. Moreover, given the rapid growth of our
global operations in 2023 due to the Ibeo acquisition, and our expectations for near- and long-term strategic growth, our Information
Technology, or IT, team is prioritizing enhancements to our response system and continuity plans.

A
key dimension to the security and effectiveness of our information system is our compliance with standards that are unique to the industries
in which we operate. For instance, it is critical that our information system achieves TISAX certification. Established by the German
Association of the Automotive Industry, Trusted Information Security Assessment Exchange, or TISAX, is a globally recognized assessment
and exchange mechanism for information security in the automotive industry. Automotive OEMs rely on the TISAX label to ensure that suppliers
and partners have a solid information security management system in place. To successfully complete the TISAX assessment process in our
German and U.S. operations, we are actively evaluating our cybersecurity measures and seeking enhancements, including engaging a third-party
auditor and global standardization of our cybersecurity training program, to ensure a comprehensive and robust system.

    19

We
evaluate our third-party information system providers, as well as any other provider that may have access to our data, for their maturity
and reliability, and as a matter of policy we choose to only work with reputable vendors.

Risks
from Cybersecurity Threats

We
have not
encountered cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our
operations or financial condition. A cybersecurity incident could be deemed to have a material impact on our operations if it caused a
disruption to our ability to function as a global organization, including the interruption of our internal and external communications, public
reporting, or management of our operations. Refer to “Item 1A. Risk Factors” in this annual report on Form 10-K, including
“Our operations could be adversely impacted by information technology