Cybersecurity Risk Management and Strategy Disclosure |
12 Months Ended |
|---|---|
Dec. 31, 2024 | |
| Cybersecurity Risk Management, Strategy, and Governance [Line Items] | |
| Cybersecurity Risk Management Processes For Assessing Identifying And Managing Threats [Text Block] |
Risk Management
Our enterprise risk management program is designed to identify,
Company, including
component of our technology risk management program, specifically our
reliance on technology and potential of cyber risk threats.
responsible for coordinating the various aspects of the information security
Chief Operating Officer (“COO”), management risk committees,
its activities.
Our objective for managing cybersecurity risk is to avoid or minimize the impacts
penetrate, disrupt or misuse systems or information.
regulatory guidance, other industry standards and the National Institute of
Framework, although this does not imply that we meet all technical standards,
CISO and Information Security Officer (“ISO”) along
banks, industry groups, and policymakers to discuss cybersecurity trends and
security program and cyber risk management policies and procedures are periodically
goal of addressing changing threats and conditions.
The parts of our information security program relating to cybersecurity are built
and include the following processes:
◾
Risk-based controls for information systems and information
processes designed to identify,
services we provide to our clients. We
maintain cybersecurity controls. We
and provide alerts regarding suspicious activity,
maintain a risk management infrastructure that implements physical, administrative
designed, based on risk, to protect our information systems and the information
information, intellectual property and proprietary information of our
◾
Incident response program:
We have an
physical and administrative incidents. When a cybersecurity incident occurs,
responsible for leading the initial assessment of priority and severity and
to the appropriate members of management and the Board of Directors.
◾
Training and testing:
We have
regular and on-going education and training for associates, preparedness simulations
and resilience tests. We
remote connections.
◾
Internal and external risk assessments:
network architecture using internal experts and
third-party
partners will periodically
review
program, to assess their design and operating effectiveness and
processes.
Notwithstanding our defensive measures and processes, the threat posed
processes, and controls are designed to mitigate loss from cyber-attacks
in the past, to date, risks from cybersecurity threats have
not materially
from cybersecurity threats, see Item 1A. Risk Factors under the section captioned
breaches and failures of our information systems could significantly disrupt our
misuse of confidential or proprietary information, damage our reputation,
|
| Cybersecurity Risk Management Processes Integrated [Flag] | true |
| Cybersecurity Risk Management Processes Integrated [Text Block] |
Our enterprise risk management program is designed to identify,
Company, including
component of our technology risk management program, specifically our
reliance on technology and potential of cyber risk threats.
|
| Cybersecurity Risk Management Third Party Engaged [Flag] | true |
| Cybersecurity Risk Third Party Oversight And Identification Processes [Flag] | true |
| Cybersecurity Risk Materially Affected Or Reasonably Likely To Materially Affect Registrant [Flag] | false |
| Cybersecurity Risk Materially Affected Or Reasonably Likely To Materially Affect Registrant [Text Block] |
Notwithstanding our defensive measures and processes, the threat posed
processes, and controls are designed to mitigate loss from cyber-attacks
in the past, to date, risks from cybersecurity threats have
not materially
|
| Cybersecurity Risk Board Of Directors Oversight [Text Block] |
Governance
Our CISO is responsible for managing our Corporate Security Department
including cybersecurity risks.
The CISO reports the day-to-day status of the program to the
COO
President.
On a quarterly basis, and as needed, the CISO reports the status of the program, notable
developments related to information security and cybersecurity risks to our Operations
to our Enterprise Risk Oversight Committee (“ROC”).
reports
on the status of the information security program and risks, notable threats and
cybersecurity. In
including remediation efforts and the status of incident
|
| Cybersecurity Risk Board Committee Or Subcommittee Responsible For Oversight [Text Block] |
Our CISO is responsible for managing our Corporate Security Department
including cybersecurity risks.
|
| Cybersecurity Risk Process For Informing Board Committee Or Subcommittee Responsible For Oversight [Text Block] |
On a quarterly basis, and as needed, the CISO reports the status of the program, notable
developments related to information security and cybersecurity risks to our Operations
to our Enterprise Risk Oversight Committee (“ROC”).
|
| Cybersecurity Risk Role Of Management [Text Block] |
The CISO reports the day-to-day status of the program to the
COO
President.
|
| Cybersecurity Risk Management Positions Or Committees Responsible [Flag] | true |
| Cybersecurity Risk Management Positions Or Committees Responsible [Text Block] |
Our CISO is responsible for managing our Corporate Security Department
including cybersecurity risks.
|
| Cybersecurity Risk Process For Informing Management Or Committees Responsible [Text Block] |
On a quarterly basis, and as needed, the CISO reports the status of the program, notable
developments related to information security and cybersecurity risks to our Operations
to our Enterprise Risk Oversight Committee (“ROC”).
reports
on the status of the information security program and risks, notable threats and
cybersecurity. In
including remediation efforts and the status of incident
|
| Cybersecurity Risk Management Positions Or Committees Responsible Report To Board [Flag] | true |