Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Cybersecurity Risk Management and Strategy

We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems, information, and our customers’ data. Our cybersecurity policies, standards, processes, and practices are part of our information security management program, which is aligned to our ISO 27001 certification, an international standard to manage information security.

Our cybersecurity risk management program includes a secure software development program intended to reduce the introduction of risks into our software, a software vulnerability and patch management program, and cybersecurity incident detection, response, and recovery programs, among others. Our cybersecurity risk team aims to integrate cybersecurity risks into our overall company’s risk management system and processes on an on-going basis.

Key elements of our cybersecurity risk management program include, but are not limited to the following:

●

a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents and risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;

●

a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;

●

the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security processes; and

●

a third-party risk management process for key service providers based on our assessment of their criticality to our operations and respective risk profile.

We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition.

Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block]

We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition.

Cybersecurity Risk Board of Directors Oversight [Text Block]

Cybersecurity Governance

Our Board of Directors considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management program.

Additionally, our risk monitoring systems, including our cybersecurity monitoring systems, are regularly audited by our internal auditors as well as cyber security audit companies. We consider the results of external and internal audits of our risk detection and monitoring systems and implement modifications as necessary.

The Audit Committee receives reports from management and the internal auditor on our cybersecurity risks. In addition, management updates the Audit Committee and Board of Directors, as necessary, regarding significant cybersecurity incidents. In addition, the Audit Committee regularly receives reports from management on such topic.

Our cybersecurity management team, including our Chief Financial Officer, VP Information Technology, Chief Information Security Officer and General Counsel and Chief Legal Officer, are responsible for assessing and managing our material risks from cybersecurity threats. The team is primarily responsible for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. By the nature of our business, our management team gained expertise in cybersecurity, each member bringing years of experience and strategic leadership in cyber security.

Our cybersecurity management team is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.

Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block]

Our cybersecurity management team, including our Chief Financial Officer, VP Information Technology, Chief Information Security Officer and General Counsel and Chief Legal Officer, are responsible for assessing and managing our material risks from cybersecurity threats.

Cybersecurity Risk Management Positions or Committees Responsible [Flag]

true

Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block]

Our cybersecurity management team is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.