Company: IMXI
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001683695-25-000030
Chunk: 61

Company: International Money Express, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1C
Chunk 61
---
ITEM 1C.     CYBERSECURITY

The Company faces risks from cybersecurity incidents that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. Cybersecurity incidents may target and compromise our systems, as well as confidential consumer, employer, and agent information that we store and manage in connection with some of our services. Any cybersecurity incidents 

26

affecting our computer networks, databases, third-party services or facilities could lead to potential interruptions of our operations or our ability to manage and report our operating results. Cybersecurity incidents may also result in the inappropriate use or disclosure of personal information, which could adversely affect consumers’ confidence in our or our agents’ or digital partners' business and expose us to liabilities. As a result, we are required to expend significant capital and other resources to protect us against these security breaches or to alleviate problems caused by these breaches. Intermex has experienced, and may continue to experience, cybersecurity threats in the normal course of its business. To date, however, these events have not had a material adverse effect on the Company’s business, financial condition, results of operations, cash flows or reputation. See Item 1A. Risk Factors for additional information on how risks could materially affect the Company.To mitigate cybersecurity risks, the Company has designed and implemented a Cybersecurity and Information Security Program ("Cybersecurity Program"), which is managed and executed by our Chief Information Security Officer (“CISO”). Our CISO has over 20 years of experience in information technology and cybersecurity primarily focused in the financial services industry. Our CISO is an experienced professional in technology, security, risk management, and compliance principles related to most United States and global financial services related regulations. Also, our CISO holds and maintains an active Certified Information Systems Security Professional certification as well as other relevant technical certifications. The Board of Directors of the Company (the "Board") generally oversees management’s processes for identifying and mitigating risks we are exposed to, including cybersecurity risks, to help align our risk exposure with our strategic objectives, and has delegated specific oversight of cybersecurity risk management to the Board’s Audit Committee. At least on a quarterly basis, or more frequently as may be warranted, the Board and the Audit Committee are apprised of cybersecurity incidents, if any, and initiatives related to any identified heightened risks. In addition, the CISO provides a comprehensive annual report on cybersecurity as well as quarterly updates to the Audit Committee, the Board and Internal Technology Steering Committee (“IT Steering Committee”), which is