heading: Education and Awareness

body_start: We require annual training for personnel for information sec

separator: dash


heading: Identification and Protection

body_start: Our cybersecurity program has established processes to ident

separator: period


heading: Response and Recovery

body_start: In the event of a cybersecurity incident, our initial focus


heading: Education and Awareness

body_start: Our cybersecurity education and awareness program for employ


heading: MATERIAL EFFECTS FROM RISKS OF CYBERSECURITY THREATS

body_start: While the Company experiences minor data and cybersecurity i

separator: caps


heading: Education & Interactive Training

body_start: We provide cybersecurity training to associates, which inclu


heading: Threat and Vulnerability Management

body_start: We, along with our external partners, use resources, technol


heading: Cybersecurity and Compliance Assessment Practices

body_start: We conduct regular cybersecurity assessments with independen


heading: Education and Interactive Training


heading: MANAGEMENT'S ROLE IN CYBERSECURITY RISK MANAGEMENT

body_start: Our CISO leads the Information Security team and has global


heading: Product and Services Cybersecurity

body_start: Our product development processes apply development, securit


heading: Product and Services Cybersecurity

body_start: The Special Activities Committee of our Board of Directors h


heading: Response to Security Vulnerabilities

body_start: In response to identified risks, management may take certain


heading: Employees and Training

body_start: Employees are the first line of defense against cybersecurit


heading: Employees and Training

body_start: Employees are an important defense against cybersecurity thr


heading: Tools and Safeguards

body_start: As part of our cybersecurity defense strategy, we employ too


heading: Training

body_start: We provide mandatory cybersecurity training to employees and


heading: Assessments

body_start: We examine the effectiveness of our cyber defenses through v


heading: RISKS FROM CYBERSECURITY THREATS

body_start: Although cybersecurity risks have not materially affected us


heading: Monitoring and Mitigation

body_start: We maintain a range of tools and services to aid in and info


heading: Training

body_start: We provide data security and privacy awareness and training


heading: Strategy and Testing

body_start: As mentioned above, the Company employs a layered, defense-i


heading: Governance and Oversight Management Role

body_start: The Company takes a layered approach to the governance of it


heading: CISO and Cybersecurity Team

body_start: Our Information Security function is led by our CISO and is


heading: Technology

body_start: Tyler also utilizes technology to help harden our environmen

separator: colon


heading: CYBERSECURITY RISK GOVERNANCE

body_start: We are committed to appropriate cybersecurity governance and


heading: INFORMATION TECHNOLOGY AND CYBERSECURITY

body_start: Our business and support functions utilize information syste


heading: CYBERSECURITY RISK MANAGEMENT FRAMEWORK

body_start: The Company employs a multi-faceted cybersecurity risk manag


heading: ROLE OF THE BOARD OF DIRECTORS

body_start: The Audit Committee oversees the Company's risk management a


heading: Management and Strategy

body_start: Senior management takes the guidance provided by the Board o


heading: Response to Security Vulnerabilities

body_start: In response to identified risks, management may take certain


heading: Employees and Training

body_start: Employees are the first line of defense against cybersecurit


heading: Breaches in Information Technology Security

body_start: The General Partner and the Trading Advisor maintain informa


heading: Identity and Access Management

body_start: The Company requires authorization of all personnel, includi


heading: Application and Product Security

body_start: The Company's application security program is based on the O


heading: Process

body_start: An educated workforce needs a governance framework to guide


heading: Integration with Overall Risk Management

body_start: Our cybersecurity processes are integrated into our overall


heading: BOARD AND AUDIT COMMITTEE OVERSIGHT

body_start: One of the key functions of our Board is informed oversight


heading: Risks from Cybersecurity Threats

body_start: As of the date of this Annual Report on Form 10-K, the Compa


heading: Response and Recovery

body_start: Working with our third-party security operations center, we


heading: Oversight and Governance

body_start: Cybersecurity risk management is overseen at the highest lev


heading: Education and Incident Reporting

body_start: We have instituted a company-wide security awareness trainin


heading: CYBERSECURITY RISK MANAGEMENT, GOVERNANCE AND RISK ASSESSMENT

body_start: The Company is committed to protecting the confidentiality,


heading: CYBERSECURITY RISK ASSESSMENT

body_start: The CISO is responsible for assessing and managing the Compa


heading: Threat and Vulnerability Management

body_start: We maintain a threat and vulnerability management program th


heading: Monitoring and Response

body_start: We have 24x7 security cybersecurity monitoring, which utiliz


heading: Training and Awareness

body_start: We provide ongoing education and training to employees regar


heading: Process

body_start: We maintain processes and policies to try to anticipate secu


heading: Technology

body_start: We seek to automate processes and remove the potential for h


heading: Education and Awareness

body_start: Our cybersecurity team provides ongoing information security


heading: Management and Strategy

body_start: We employ processes for assessing, identifying, and managing


heading: Backup and Recovery

body_start: Estrella stores all critical data in the cloud and does not


heading: Governance

body_start: Management, provided by Ashford Inc., is ultimately responsi


heading: CYBERSECURITY INCIDENT RESPONSE PROCESS

body_start: We maintain and actively update a cybersecurity incident res


heading: BOARD OVERSIGHT OF CYBER RISK

body_start: Our Board is engaged in the oversight of cybersecurity threa


heading: Governance

body_start: The Audit Committee of the Board of Directors oversees our c


heading: Education and Training

body_start: We conduct mandatory training for all employees to communica


heading: Assessment and Testing

body_start: We engage in periodic assessments and testing of our policie


heading: Governance

body_start: Our audit committee oversees our ERM program, including the


heading: Education and Awareness

body_start: We provide mandatory training for our personnel regarding cy


heading: Education and Awareness

body_start: We provide regular, mandatory training for our employees reg


heading: Detection

body_start: Our cybersecurity program includes robust tools and processe


heading: Response

body_start: Our Cyber Security Incident Response Plan (the "Response Pla


heading: Detection

body_start: Our cybersecurity program includes tools and processes desig


heading: Third - Party Risk Management

body_start: We maintain a risk - based approach to identifying and overs


heading: Reviews of IT Internal Controls

body_start: Reviews are performed by the Company's internal audit team t


heading: Education and Awareness

body_start: Regular privacy and security training for employees is condu


heading: CYBERSECURITY RISK MANAGEMENT STRAGEY

body_start: We have developed and implemented cybersecurity risk managem


heading: Security and Application Lifecycle Security

body_start: We perform analysis of security requirements for all systems


heading: Training and Awareness

body_start: We provide awareness training to our employees to help ident


heading: Risks from Material Cybersecurity Threats

body_start: Despite ongoing cyber-attacks, such as unauthorized access,


body_start: Cybersecurity risks are seamlessly integrated into the Compa


heading: CYBERSECURITY RISK

body_start: The operation of our businesses is dependent on the secure f


heading: Regulatory and Legal Compliance

body_start: Cybersecurity incidents may subject us to regulatory investi


heading: Risks from Cybersecurity Threats

body_start: We have not encountered cybersecurity challenges that have m


heading: Process

body_start: We use a multi-layered defensive cybersecurity strategy base


body_start: The Nominating and Corporate Governance Committee, which is


heading: Nominating and Corporate Governance Committee


heading: Monitoring and Consultation Services

body_start: Continuous monitoring of our systems for suspicious activiti


heading: Management and Strategy

body_start: The Company relies extensively on various information system


heading: Training and Awareness

body_start: Mandatory cybersecurity training for all employees upon onbo


heading: Management and Strategy

body_start: We employ processes for assessing, identifying, and managing


heading: Monitoring and Logging

body_start: The data centers support robust monitoring and logging capab


heading: Response

body_start: The data centers have established incident response procedur


heading: Assessment and mitigation

body_start: We conduct periodic and event-driven risk assessments to ide


heading: Governance

body_start: Matson's Board of Directors has oversight of the Company's r


heading: Risks from Cybersecurity Threats

body_start: Information relating to risks from cybersecurity threats is


heading: Responsibility for Cybersecurity Risks

body_start: Our CIO has developed expertise in cybersecurity, compliance


heading: Education and Awareness

body_start: The Company provides regular, mandatory training for personn


heading: Detection and Analysis

body_start: Under the Security Incident Response Policy, all EVgo employ


body_start: Cybersecurity risks are seamlessly integrated into the Compa


heading: Training

body_start: All Ulta Beauty associates have a role as stewards of Compan


heading: Response to Security Vulnerabilities

body_start: In response to identified risks, management may take certain


heading: Employees and Training

body_start: Employees are the first line of defense against cybersecurit


heading: Training and awareness

body_start: We use a combination of online training, including mandatory


heading: Director of Cybersecurity

body_start: With over 30 years of experience in the information technolo


heading: Education and Awareness

body_start: The Company requires employees to complete periodic mandator


heading: Monitoring and Detection

body_start: Continuous monitoring systems are deployed to detect potenti


heading: Detection and Analysis

body_start: Under our Security Incident Response Policy, all of our empl


heading: Training and awareness

body_start: We use a combination of training and education, including ma


body_start: Our cybersecurity processes are integrated into our overall


heading: Policies and Training

body_start: We maintain security policies, standards, and processes that


heading: Education and Awareness

body_start: We provide regular training for our employees regarding cybe


heading: Role of Management

body_start: Our Senior Vice President, Information Technology and our Di


heading: Management and Strategy

body_start: The Company relies extensively on various information system


heading: Management and Strategy

body_start: We employ processes for assessing, identifying, and managing


heading: Monitoring and Consultation Services

body_start: Continuous monitoring of our systems for suspicious activiti


heading: Training and Awareness

body_start: Mandatory cybersecurity training for all employees upon onbo


heading: Defense and Continuous Monitoring

body_start: We work to protect our computing environments and products f


heading: Regulatory and Legal Compliance

body_start: Cybersecurity incidents may subject us to regulatory investi


heading: Protection of Sensitive Information

body_start: We maintain collection, storage, and access controls of pers


heading: Leadership and Governance

body_start: We have a team of skilled internal and external cybersecurit


heading: Protection of Sensitive Information

body_start: We enforce collection, storage, and access controls of perso


heading: Education and Awareness

body_start: The Company provides regular, mandatory training for all per


heading: Tracking and Controlling Risks

body_start: Collection and reporting of status information about risks a


heading: Risks from Cybersecurity Threats

body_start: Although risks from cybersecurity threats, including as a re


heading: Governance

body_start: Management, provided by Ashford Inc. is ultimately responsib