Company: FR
Filing Date: 2025-02-14
Form Type: 10-K
Source: 0000921825-25-000019
Chunk: 63

Company: FIRST INDUSTRIAL REALTY TRUST INC
Filing Date: 2025-02-14
Form: 10-K
Item: Item 1C
Chunk 63
---
ain written playbooks, which provide sequential instructions on the appropriate steps to take in the wake of various cyberattacks, including a playbook for each of the following: ransomware attack, a data breach, loss of third-party data and partial and full disaster recovery plans; and

•Retain a leading incident response provider to assist with security incidents as well as an attorney that serves as our data breach coach who specializes in data privacy and cyber security, and has relationships with third-party forensics investigators, crisis communications professionals and other services and organization we may need if a data breach is encountered.

In order to recover systems or assets affected by a cybersecurity incident, we maintain and regularly test full backups of our business systems data. These backups are stored in multiple locations, both online and offline. 

While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business, operations or financial condition, there can be no guarantee that we will not experience such an incident in the future. See Risk Factors for more information on our cybersecurity risks. 

Our cybersecurity program is overseen by a highly experienced team, including the Chief Information Officer (who reports directly to our Chief Executive Officer), our Senior Director of Information Technology, our Senior Director of Business Systems Applications and our Information Technology Security Manager. Collectively, this team has decades of expertise in information technology, and the Information Technology Security Manager holds a master's degree in Network Security. They meet regularly to discuss key cybersecurity risks and strategies, reporting to the Audit Committee annually or as necessary, in accordance with our cybersecurity incident protocols.

The Audit Committee, as delegated by our Board of Directors, is responsible for reviewing, with management, our internal control systems with respect to information technology security. The Audit Committee Chairperson also participates in our annual overall risk assessment process. In addition to the foregoing, from time to time, the Board of Directors is updated concerning the Company’s internal control systems with respect to information technology security.

21