Company: BCG
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001410578-25-000604
Chunk: 22

Company: Binah Capital Group, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1C
Chunk 22
---
ITEM 1C. CYBERSECURITY

Cybersecurity Risk Management We maintain written policies and procedures that outline the Company’s comprehensive information security program (CISP). The Chief Information Security Officer (CISO) has the responsibility for implementation and maintenance of the CISP. In addition to SEC and FINRA regulatory requirements, we leverage established security frameworks, such as the National Institute of Standards and Technology Cybersecurity Framework, as guides to continually improve our policies and procedures. In addition, our employees are required to complete a cybersecurity training program each year, which is supplemented with additional awareness efforts, including phishing campaigns and informational notifications.We employ a variety of security tools and components to monitor, identify and block cybersecurity threats. In the event of a cybersecurity incident, the Company has an incident response team (IRT) whose role is to respond quickly and effectively. The IRT utilizes an incident response plan for the implementation of the its incident response capabilities that provides (i) a definition of “reportable incidents/events”, and (ii) “metrics” for evaluating the IRT’s response capabilities and effectiveness. The checklist is periodically reviewed by the IT Department for lessons learned from both mock and actual incidents, and to assure compliance with most current industry best practices and latest regulatory developments. The incident response plan includes processes through which cybersecurity