Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

We have developed and implemented a cybersecurity risk management program designed to protect the confidentiality, integrity, and availability of our critical assets and information.

We design and assess our program based on the ISO 27001 and NIST frameworks, as a guide to help us identify, assess, mitigate and manage cybersecurity risks relevant to our business, impacted by industry trends and threats, regulatory updates, technological changes and strategic business direction.

Our cybersecurity risk management program is integrated into our overall enterprise risk management program and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.

Key aspects of our cybersecurity risk management program include:

•

Conducting periodic risk assessments aimed at identifying significant cybersecurity risks to our critical assets, information, products, services, and the broader corporate environment;

•

Overseeing the following: (i) our cybersecurity risk assessment processes and procedures, (ii) the implementation and management of our security controls, and (iii) our prevention, detection and response strategies to cybersecurity incidents;

•

Engaging leading external service providers, when suitable, to evaluate, test, or support various aspects of our security posture and controls;

•

Implementing cybersecurity awareness training programs for our employees (based on their role), incident response teams, and senior management;

•

Developing a cybersecurity incident response plan outlining procedures for addressing cybersecurity incidents;

•

Implementing a third-party cyber risk management process for assessing and managing risks associated with relevant vendors and suppliers; and

•

Generating proactive alerts based on data analysis from platform usage.

All guidelines are documented in our Risk Management Policy, which includes transparent procedures and escalation paths. We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. See “Part 6 - Risk Factors – Risks Related to Privacy, Data, and Cybersecurity.”

Cybersecurity Risk Management Processes Integrated [Text Block]

We have developed and implemented a cybersecurity risk management program designed to protect the confidentiality, integrity, and availability of our critical assets and information.

Cybersecurity Risk Third Party Oversight and Identification Processes [Flag]

true

Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block]

All guidelines are documented in our Risk Management Policy, which includes transparent procedures and escalation paths. We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. See “Part 6 - Risk Factors – Risks Related to Privacy, Data, and Cybersecurity.”

Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block]

Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to its audit committee oversight of cybersecurity and other information technology risks. Our audit committee oversees management’s implementation of our cybersecurity risk management program.

Cybersecurity Risk Role of Management [Text Block]

Our audit committee reports to the full board of directors regarding its activities, including those related to cybersecurity. Our board of directors also receives briefings from management on our cybersecurity risk management program. Directors receive presentations on cybersecurity topics from our VP Chief Information Security Officer (CISO), internal security staff or external experts as part of the Committee’s continuing education on topics that impact public companies.

Our management team, led by our VP CISO with 25 years of relevant experience, is informed of and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the information technology environment.

Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block]

Our audit committee reports to the full board of directors regarding its activities, including those related to cybersecurity. Our board of directors also receives briefings from management on our cybersecurity risk management program. Directors receive presentations on cybersecurity topics from our VP Chief Information Security Officer (CISO), internal security staff or external experts as part of the Committee’s continuing education on topics that impact public companies.