Risk Factors Dashboard

Risk Management and Strategy

We have implemented and maintain various information security processes designed to identify, assess, and manage material risks from cybersecurity threats to our critical computer networks, hardware, software, third-party hosted services, and data.

We rely on third-party service providers to help manage our information systems, including network security service providers with experienced information technology professionals. We also work with third parties to identify, assess, and manage actual and perceived cybersecurity threats and risks, and we evaluate cybersecurity risk as part of our overall risk management strategy. With the assistance of these third-party service providers, we implement and maintain various technical, physical, and administrative controls and processes to manage and mitigate material risks from cybersecurity threats to our information systems. This includes procedures for incident detection and response, network security controls, access controls, physical security, systems monitoring, and backup and recovery procedures.

Our operations rely on third-party service providers and software programs. For instance, our accounting and financial reporting-related systems use software obtained from third-party service providers, and these systems are necessary for the efficient and consistent operation of our business. We use these systems to communicate with tenants, banks, vendors, and others, and to manage our accounting, financial reporting, and for other recordkeeping purposes. We, thus, maintain a process to identify and evaluate cybersecurity risks and incidents associated with key third-party providers. When utilizing third-party software for key services, we seek to engage those that are reliable, reputable, and maintain cybersecurity controls. To address risks associated with third-party providers for critical services, we review available audit reports of controls from such providers to assess and manage any identified risks.

Governance

Our Board maintains oversight responsibility of risks from cybersecurity threats. This oversight is facilitated primarily through the Audit Committee, which is responsible for oversight of our information system risk, including cybersecurity threats. The Audit Committee oversees the risk management program designed to implement adequate controls to mitigate cybersecurity risks. The Committee oversees the risk management program designed to implement adequate controls to mitigate cybersecurity risks.

The Audit Committee receives periodic updates from management on potential risks, threats, and controls to mitigate identified risks. The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity. The full Board also receives briefings from management on the cybersecurity risk management program, as needed.

Our management, represented by our Chief Financial Officer, provides leadership for implementation and maintenance of our cybersecurity risk management processes. Management currently manages key functions for the Company’s accounting, finance, and treasury strategies, including risk management. Lyke currently manages key functions for the Company’s accounting, finance, and treasury strategies, including risk management. In addition, Management oversees the Company’s managed IT solutions service provider which includes, among other services:

The Chief Financial Officer is notified in real time by the managed service provider for matters requiring immediate attention. Management also reviews a standardized monthly report with key IT systems data and statistics, including red flags requiring resolution, if any. Lyke also reviews a standardized monthly report with key IT systems data and statistics, including red flags requiring resolution, if any. Management reports serious cybersecurity incidents to the Committee and our Board.