Company: AOMN
Filing Date: 2025-03-24
Form Type: 10-K
Source: 0001766478-25-000019
Chunk: 117

Company: Angel Oak Mortgage REIT, Inc.
Filing Date: 2025-03-24
Form: 10-K
Item: Item 1C
Chunk 117
---
 addition to its engagement of the IT Service Provider, we and/or Angel Oak Capital may engage other third parties, including auditors and 

51

consultants, to perform assessments or audits of our and/or its cybersecurity policies and procedures and/or to assist with the evaluation of a cybersecurity threat or incident, among other matters.As of the date of this filing, we have not experienced any risks from cybersecurity threats that have materially affected, or are reasonably likely to materially affect, us, including our business strategy, results of operations or financial condition. However, future threats or incidents could have a material impact on our business strategy, results of operations or financial condition. For a discussion of the risks we face from cybersecurity threats, including those that could materially affect us, see “Part I, Item 1A.  “Risk Factors—Risks Related to Our Company—Maintaining cybersecurity and data security is important to our business and a breach of our cybersecurity or data security could result in serious harm to our reputation and have a material adverse impact on our business and financial results” and “— We are highly dependent on information systems, and system failures could significantly disrupt our business, which may, in turn, have a material adverse effect on us.”We maintain a cybersecurity insurance policy to mitigate risks associated with cybersecurity incidents.

Governance

Our Board of Directors holds oversight responsibility over our risk management process, including material risks related to cybersecurity threats. Our Board of Directors administers this oversight function through its committees, including the Audit Committee and the Affiliated Transactions and Risk Committee. A key part of the Audit Committee’s responsibility is overseeing the Cybersecurity Program.

Certain representatives of Angel Oak Capital, including our Manager, regularly report (not less frequently than annually) to the Audit Committee as well as to our full Board of Directors, as appropriate, on cybersecurity matters, primarily through presentations by the Head of IT. Such reporting includes updates on the Cybersecurity Program as it impacts us, the reports and services provided by the IT Service Provider, the external threat environment, risk management strategies and any cybersecurity threats or incidents. Presentations to the Audit Committee or our full Board of Directors may also be provided from time to time by the IT Service Provider or another third party firm providing cybersecurity-related services for us or Angel Oak Capital, including our Manager, as deemed necessary or appropriate. The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity.In addition, the Cybersecurity Program provides for the notification and escalation of identified cybersecurity threats and incidents, with different severity thresholds triggering