Company: YEXT
Filing Date: 2025-04-28
Form Type: ARS
Source: 0001614178-25-000048
Chunk: 70

Company: Yext, Inc.
Filing Date: 2025-04-28
Form: ARS
Chunk 70
---
 integrity, or availability of our information systems or any information residing therein. We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of potential risks, both internal and external, that could affect our business operations, financial stability, and reputation, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Our risk assessment methodology considers historical data, control effectiveness, and expert analysis to quantify and prioritize risks accordingly. Following these risk assessments, we consider whether and how to adjust our strategies and controls to reduce the potential impact of identified risks. Our management team is responsible for executing risk mitigation plans and monitoring the effectiveness of these measures. We devote significant resources and designate high-level personnel, including our Chief Information Security Officer who reports to our Chief Technology Officer, who in turn reports to our Chief Executive Officer, to manage the risk assessment and mitigation process. We work to educate our employees about cybersecurity risk management and the latest threats to enhance their awareness and to foster a security-conscious culture throughout the organization. As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management. Personnel at all levels and departments are made aware of our cybersecurity policies through training. We have engaged consultants and other third parties in connection with our risk assessment processes. These third parties have assisted us with the design and implementation of our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company. We, like any technology company operating in the current environment, have experienced cybersecurity incidents in the past. However, as of the date of filing this Annual Report on Form 10-K, we have not previously experienced any cybersecurity incidents that were determined to be material. For additional information regarding whether any risks from cybersecurity threats are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, see Item 1A, “Risk Factors,” in this Annual Report on Form 10-K. Governance One of the key functions of our Board of Directors is informed oversight of our risk management