XML 45 R27.htm IDEA: XBRL DOCUMENT v3.26.1
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Dec. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]
The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. The Company has designed and implemented a cybersecurity incident response plan and related processes, which are overseen by a team of internal cybersecurity professionals, including individuals with over ten years’ experience handling vulnerability and security management, system upgrades, mitigation initiatives, user education and system re/accreditation. The Company provides regular desk-top educational training and incident simulation exercises to better address potential cyber security incidences and response thereto.
Cybersecurity threats are identified by the Incident Response Team ("Response Team") pursuant to the Cybersecurity Response Policy ("Cybersecurity Policy") and escalated to the Enterprise Risk Management Executive Committee ("ERM Committee") or member thereof pursuant to criteria set forth in this policy (See “Governance—Management” below for further discussion of the ERM Committee and the members of management comprising the ERM Committee). These processes also include overseeing and identifying risks from cybersecurity threats associated with the use of third-party service providers.
The Company's Senior Director of IT ("SDIT") oversees the Company's incident response plan and related processes designed to assess and manage material risks from cybersecurity threats. The SDIT is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents pursuant to criteria set forth in the Company’s incident response plan and related processes. The experience of the Company's Response Team includes cybersecurity incident response, in-depth security assessments, and security evaluation exercises to evaluate security profile, security research, education and outreach, and security tool development.
The Company uses a third-party consultant for monitoring, management, and identification of cyber security risks. The Response Team also conducts regular internal testing of the Company’s cyber security systems.
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block]
The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. The Company has designed and implemented a cybersecurity incident response plan and related processes, which are overseen by a team of internal cybersecurity professionals, including individuals with over ten years’ experience handling vulnerability and security management, system upgrades, mitigation initiatives, user education and system re/accreditation. The Company provides regular desk-top educational training and incident simulation exercises to better address potential cyber security incidences and response thereto.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Board of Directors Oversight [Text Block]
The Audit Committee operates under a written charter adopted by the Company’s Board of Directors. The Audit Committee oversees, among other things, a system of internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The Audit Committee is also responsible for the adequacy and effectiveness of the Company’s internal controls, including those internal controls that are designed to assess, identify, and manage material risks from cybersecurity threats.
The Audit Committee is informed of material risks from cybersecurity threats pursuant to escalation criteria set forth in the Company’s disclosure controls and procedures. Further, the ERM Committee reports material risks from cybersecurity threats to the Company’s Audit Committee and/or Board of Directors on a regular basis. The Company’s Board of Directors has received training on cyber security and governance of the Company’s processes for minimizing threats and response to incidences.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] The Company’s management, including members of its ERM Committee, the Response Team, and the Company’s SDIT, assess and manage material risks from cybersecurity threats. The ERM Committee is responsible for establishing and monitoring the integrity and effectiveness of controls and other procedures, which are designed to ensure that (1) all information required to be disclosed is recorded, processed, summarized, and reported accurately and on a timely basis, and (2) all such information is accumulated and communicated to the Audit Committee, as appropriate, to allow for timely decisions regarding such disclosures. The controls and procedures subject to the ERM Committee’s oversight include processes related to managing material risks from cybersecurity threats. Accordingly, the Company’s cybersecurity risk management processes have been integrated into the Company’s overall enterprise risk management processes.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block]
The Company’s management, including members of its ERM Committee, the Response Team, and the Company’s SDIT, assess and manage material risks from cybersecurity threats. The ERM Committee is responsible for establishing and monitoring the integrity and effectiveness of controls and other procedures, which are designed to ensure that (1) all information required to be disclosed is recorded, processed, summarized, and reported accurately and on a timely basis, and (2) all such information is accumulated and communicated to the Audit Committee, as appropriate, to allow for timely decisions regarding such disclosures. The controls and procedures subject to the ERM Committee’s oversight include processes related to managing material risks from cybersecurity threats. Accordingly, the Company’s cybersecurity risk management processes have been integrated into the Company’s overall enterprise risk management processes.
The Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, and Vice President of Legal comprise the Company’s ERM Committee. The ERM Committee is responsible for establishing and monitoring the integrity and effectiveness of controls and other procedures, including controls and procedures related to managing material risks from cybersecurity threats, which are designed to ensure
that (1) all information required to be disclosed is recorded, processed, summarized, and reported accurately and on a timely basis, and (2) all such information is accumulated and communicated to management and the Audit Committee, as appropriate, to allow for timely decisions regarding such disclosures.
The SDIT or a delegate thereof informs the ERM Committee of cybersecurity incidents that may be material pursuant to escalation criteria set forth in the Company’s Cybersecurity Policy and related processes. The SDIT periodically reports to the ERM Committee concerning material risks from cybersecurity threats to the extent necessary pursuant to the escalation criteria set forth in the Company’s processes described herein.
Cybersecurity Risk Role of Management [Text Block]
The Company’s management, including members of its ERM Committee, the Response Team, and the Company’s SDIT, assess and manage material risks from cybersecurity threats. The ERM Committee is responsible for establishing and monitoring the integrity and effectiveness of controls and other procedures, which are designed to ensure that (1) all information required to be disclosed is recorded, processed, summarized, and reported accurately and on a timely basis, and (2) all such information is accumulated and communicated to the Audit Committee, as appropriate, to allow for timely decisions regarding such disclosures. The controls and procedures subject to the ERM Committee’s oversight include processes related to managing material risks from cybersecurity threats. Accordingly, the Company’s cybersecurity risk management processes have been integrated into the Company’s overall enterprise risk management processes.
The Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, and Vice President of Legal comprise the Company’s ERM Committee. The ERM Committee is responsible for establishing and monitoring the integrity and effectiveness of controls and other procedures, including controls and procedures related to managing material risks from cybersecurity threats, which are designed to ensure
that (1) all information required to be disclosed is recorded, processed, summarized, and reported accurately and on a timely basis, and (2) all such information is accumulated and communicated to management and the Audit Committee, as appropriate, to allow for timely decisions regarding such disclosures.
The SDIT or a delegate thereof informs the ERM Committee of cybersecurity incidents that may be material pursuant to escalation criteria set forth in the Company’s Cybersecurity Policy and related processes. The SDIT periodically reports to the ERM Committee concerning material risks from cybersecurity threats to the extent necessary pursuant to the escalation criteria set forth in the Company’s processes described herein.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block]
The Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, and Vice President of Legal comprise the Company’s ERM Committee. The ERM Committee is responsible for establishing and monitoring the integrity and effectiveness of controls and other procedures, including controls and procedures related to managing material risks from cybersecurity threats, which are designed to ensure
that (1) all information required to be disclosed is recorded, processed, summarized, and reported accurately and on a timely basis, and (2) all such information is accumulated and communicated to management and the Audit Committee, as appropriate, to allow for timely decisions regarding such disclosures.
The SDIT or a delegate thereof informs the ERM Committee of cybersecurity incidents that may be material pursuant to escalation criteria set forth in the Company’s Cybersecurity Policy and related processes. The SDIT periodically reports to the ERM Committee concerning material risks from cybersecurity threats to the extent necessary pursuant to the escalation criteria set forth in the Company’s processes described herein.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] The Company has designed and implemented a cybersecurity incident response plan and related processes, which are overseen by a team of internal cybersecurity professionals, including individuals with over ten years’ experience handling vulnerability and security management, system upgrades, mitigation initiatives, user education and system re/accreditation.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block]
The Audit Committee operates under a written charter adopted by the Company’s Board of Directors. The Audit Committee oversees, among other things, a system of internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The Audit Committee is also responsible for the adequacy and effectiveness of the Company’s internal controls, including those internal controls that are designed to assess, identify, and manage material risks from cybersecurity threats.
The Audit Committee is informed of material risks from cybersecurity threats pursuant to escalation criteria set forth in the Company’s disclosure controls and procedures. Further, the ERM Committee reports material risks from cybersecurity threats to the Company’s Audit Committee and/or Board of Directors on a regular basis. The Company’s Board of Directors has received training on cyber security and governance of the Company’s processes for minimizing threats and response to incidences
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true