Company: GCTS
Filing Date: 2025-03-26
Form Type: 424B3
Source: 0000929638-25-001279
Chunk: 87

Company: GCT Semiconductor Holding, Inc.
Filing Date: 2025-03-26
Form: 424B3
Chunk 87
---
 monetary and other losses, including reputational harm, which costs we may not be able to recover. We seek to detect and investigate all security incidents and to prevent their recurrence, but in some cases, we might be unaware of an incident or its magnitude and effects. While we have identified some incidents involving attempts at unauthorized access, we are not aware of any that have succeeded. While we have not experienced any cybersecurity breaches that materially affected our operations, there is no guarantee that we will not occur in the future. In addition, our customers, partners and suppliers may experience cybersecurity attacks that may indirectly affect our ability to conduct business with them or result in cybersecurity breaches in our network, which may adversely affect our business operations. We expect to continue to devote resources to the security of our information technology systems. Item 1B. Unresolved Staff Comments. None. Item 1C. Cybersecurity. Our cybersecurity risk management process is an integral part of our overall enterprise risk management framework. This process, overseen by our Information Technology (“IT”) Director, aims to assess, identify, and manage material risks from cybersecurity threats. Our approach is designed to protect the confidentiality, integrity, and availability of our critical information systems and data, including intellectual property and confidential information. We conduct periodic risk assessments to identify potential internal and external cybersecurity threats. These assessments evaluate the likelihood of the occurrence and potential impact of such threats, as well as the adequacy of our existing policies, procedures, systems, and controls. The Board oversees our cybersecurity risk management process, and the Audit Committee has the authority and power to provide specific oversight of cybersecurity matters. Our IT Director who has extensive experience in information systems and cybersecurity, leads our cybersecurity strategy, policy, standards, architecture, and processes. The IT Director reports to the Chief Financial Officer (“CFO”). The CFO provides regular updates to the Board, Audit Committee, and executive management on the status of our cybersecurity posture and any material threats. 32 Our cybersecurity program employs industry-standard methodologies to manage cybersecurity risks, including secure network infrastructure design, continuous security updates, and automated alerts for suspicious activities. We also conduct regular training for employees at all levels on cybersecurity awareness and the protection of confidential information. In the event of a cybersecurity incident, our incident response process is designed to detect, respond to, and mitigate the impact. Significant incidents are escalated to a team of business leaders, including our Chief Executive Officer, and Chief Financial Officer, who work with our incident response team to assess and address the situation. The Audit Committee oversees management’s response to