Company: FOX
Filing Date: 2025-08-06
Form Type: 10-K
Source: 0001628280-25-038077
Chunk: 88

Company: Fox Corp
Filing Date: 2025-08-06
Form: 10-K
Item: Item 1C
Chunk 88
---
generally weekly) updates to the Company’s Executive Chair and Chief Executive Officer, Chief Operating Officer (“COO”), Chief Financial Officer (“CFO”), CTO and Chief Legal and Policy Officer. As part of the Company’s incident response plan process, cybersecurity risk events of a certain criteria are communicated in a timely manner to the Company’s incident response governing body, which is comprised of members of senior management, including the COO, CTO, and CFO. The Company tests the effectiveness of the incidence response plan and assesses its response capabilities by conducting executive tabletop exercises involving detailed topical cybersecurity scenarios with these executives, as well as technical tabletop exercises including technical and operational personnel. The Company also has processes in place that are designed to ensure that decisions regarding public disclosure and reporting of cybersecurity incidents can be made in a timely manner.The Company’s Board has an active role, as a whole and at the committee level, in overseeing the management of the Company’s risks. The Audit Committee of the Board is responsible for (i) overseeing the Company’s policies and practices with respect to risk assessment and risk management, including with respect to cybersecurity and the use of AI, (ii) overseeing the Company’s financial and other major risk exposures and the steps taken to monitor and control them, and (iii) providing guidance to the Board on such matters.The Audit Committee regularly reviews and discusses FOX’s cybersecurity risks and receives updates from the CISO on how the Company identifies, assesses and mitigates these risks. The CISO provides the Audit Committee with quarterly reports regarding cybersecurity issues and risks, including information regarding progress on efforts to strengthen and enhance the Company’s cybersecurity program. The Audit Committee also periodically devotes additional meeting time, as needed, to in-depth discussions on a particularly relevant cybersecurity topic, including industry trends and relative risks. In addition to the quarterly reports, cybersecurity incidents meeting certain criteria are reported to the Audit Committee outside of regularly scheduled quarterly updates as necessary.From time to time, the Company experiences cybersecurity threats and attacks. Although no cybersecurity incident has materially affected the Company’s businesses to date, FOX expects to continue to be subject to cybersecurity threats and attacks and there can be no assurance that the Company will not experience a material incident. For more information, see Item 1A., “Risk Factors—Risks Relating to Cybersecurity, Piracy, Privacy and Data Protection.”