XML 64 R29.htm IDEA: XBRL DOCUMENT v3.25.0.1
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Dec. 31, 2024
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]
The Company maintains an Enterprise Risk Management (ERM) program that is designed to identify, analyze and manage risks, including risks from cybersecurity threats. This program scores, ranks, and reports risks to Company management based on the likelihood and impact the risk has relative to the strategic objectives and financial standing of the Company.
The Company maintains a cybersecurity risk management program that includes, but is not limited to, periodic risk assessments and employee awareness training initiatives, as well as the employment of security analytical and assessment tools. We also maintain a cybersecurity incident response plan designed to help the Company defend against evolving cybersecurity threats, which sets out criteria for incident classification and procedures to escalate incidents to the appropriate stakeholders. Internally, we regularly monitor and assess the various components of our cybersecurity infrastructure, with the support of third-party consultants.
The Company has also established a process to identify and assess potential risks arising from cybersecurity threats associated with our use of critical third-party service providers. This process includes, as appropriate, conducting assessments of third-party providers' cybersecurity capabilities and reviewing third party providers’ processes for alignment with our internal cybersecurity requirements.
Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition. We discuss how cybersecurity incidents could materially affect us in our risk factor disclosures in Item 1A of this Annual Report on Form 10-K.
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block] The Company maintains an Enterprise Risk Management (ERM) program that is designed to identify, analyze and manage risks, including risks from cybersecurity threats. This program scores, ranks, and reports risks to Company managemen
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block] Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition. We discuss how cybersecurity incidents could materially affect us in our risk factor disclosures
Cybersecurity Risk Board of Directors Oversight [Text Block]
The Chief Legal and Compliance Officer (CLO), and our dedicated information technology (IT) team, lead the Company's overall cybersecurity efforts. Together, our CLO and IT team have over 40 years of industry experience in implementing and managing information technology and information security systems, and members of our IT team maintain Certified Information Security Manager certifications. The CLO oversees the Company’s cybersecurity risk management through regular meetings with the IT team to discuss, as appropriate, the risks and prevention of cybersecurity threats. Cybersecurity incidents are escalated based on defined incident severity criteria to management. As part of our ERM process, our CLO and other senior management positions report on identified cybersecurity risks, as appropriate, to the Audit Committee and the Board of Directors (Board).
Management is responsible for the day-to-day management of risks we face, while the Board as a whole and through its committees, provides guidance on the oversight of risk management.
The Audit Committee reviews the effectiveness of the Company’s governance and management of cybersecurity risks, including those relating to business continuity, regulatory compliance and data management. The Audit Committee, at least annually, reviews and considers the results of our ERM process, including as it relates to risks from cybersecurity threats, and provides updates, as appropriate or required, to management and the Board.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] The Chief Legal and Compliance Officer (CLO), and our dedicated information technology (IT) team, lead the Company's overall cybersecurity efforts. Together, our CLO and IT team have over 40 years of industry experience in implementing and managing information technology and information security systems, and members of our IT team maintain Certified Information Security Manager certifications. The CLO oversees the Company’s cybersecurity risk management through regular meetings with the IT team to discuss, as appropriate, the risks and prevention of cybersecurity threats. Cybersecurity incidents are escalated based on defined incident severity criteria to management. As part of our ERM process, our CLO and other senior management positions report on identified cybersecurity risks, as appropriate, to the Audit Committee and the Board of Directors (Board).
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] Cybersecurity incidents are escalated based on defined incident severity criteria to management. As part of our ERM process, our CLO and other senior management positions report on identified cybersecurity risks, as appropriate, to the Audit Committee and the Board of Directors (Board).
Cybersecurity Risk Role of Management [Text Block]
Management is responsible for the day-to-day management of risks we face, while the Board as a whole and through its committees, provides guidance on the oversight of risk management.
The Audit Committee reviews the effectiveness of the Company’s governance and management of cybersecurity risks, including those relating to business continuity, regulatory compliance and data management. The Audit Committee, at least annually, reviews and considers the results of our ERM process, including as it relates to risks from cybersecurity threats, and provides updates, as appropriate or required, to management and the Board.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block]
The Chief Legal and Compliance Officer (CLO), and our dedicated information technology (IT) team, lead the Company's overall cybersecurity efforts. Together, our CLO and IT team have over 40 years of industry experience in implementing and managing information technology and information security systems, and members of our IT team maintain Certified Information Security Manager certifications. The CLO oversees the Company’s cybersecurity risk management through regular meetings with the IT team to discuss, as appropriate, the risks and prevention of cybersecurity threats. Cybersecurity incidents are escalated based on defined incident severity criteria to management. As part of our ERM process, our CLO and other senior management positions report on identified cybersecurity risks, as appropriate, to the Audit Committee and the Board of Directors (Board).
Management is responsible for the day-to-day management of risks we face, while the Board as a whole and through its committees, provides guidance on the oversight of risk management.
The Audit Committee reviews the effectiveness of the Company’s governance and management of cybersecurity risks, including those relating to business continuity, regulatory compliance and data management. The Audit Committee, at least annually, reviews and considers the results of our ERM process, including as it relates to risks from cybersecurity threats, and provides updates, as appropriate or required, to management and the Board.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] Together, our CLO and IT team have over 40 years of industry experience in implementing and managing information technology and information security systems, and members of our IT team maintain Certified Information Security Manager certifications.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] As part of our ERM process, our CLO and other senior management positions report on identified cybersecurity risks, as appropriate, to the Audit Committee and the Board of Directors (Board).
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true