SES AI Corp 10-K

Item 1B. Unresolved Staff Comments None. Item 1C. Cybersecurity Cybersecurity is an important priority at SES, and we actively manage this critical risk through comprehensive measures. Our processes for assessing, identifying, and managing material risks from cybersecurity threats are still in development and have yet to be integrated into our overall risk management system and processes. ● Proactive Defense: We utilize industry-standard mechanisms to assess, identify, and address potential threats from cybersecurity incidents. Our dedicated information technology (IT) team continuously monitors the evolving cybersecurity landscape and develops robust response processes to swiftly and effectively handle emerging threats. ● Structured Framework: Our company-wide cybersecurity policy outlines our security posture and incident response protocol, ensuring clear escalation procedures to inform senior management, the Audit Committee, and the Board of Directors of cybersecurity events as needed. ● Independent Oversight: The Audit Committee , composed entirely of independent directors under SEC and NYSE rules, oversees our cyber risk exposure and evaluates our risk mitigation strategies. The committee, in turn, briefs the Board of Directors on any material cyber risks and events. There is currently no management position directly responsible for overseeing our cybersecurity risk. Rather, our broader information technology department works closely with members of management to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs, although we are currently seeking to hire a director of cybersecurity to oversee our information security program. While cybersecurity threats remain a reality for all organizations, SES is committed to proactive risk management and continuous improvement in our security posture. At times we also engage assessors, consultants, auditors, or other third parties to assist with assessing, identifying, and managing cybersecurity risks. We face risks from cybersecurity threats that could have a material adverse effect on our relationship with our partners, suppliers and eventual customers, or on our business, operations or products. We have experienced, and will likely continue to experience, cybersecurity 30 Table of Contents incidents in the normal course of our business; however, to our knowledge, we did not experience a material cybersecurity incident during fiscal 202 5. See “Part I, Item 1A. Risk Factors – Risks Related to Privacy and Security – If we experience a significant cybersecurity breach or disruption in our information systems or any of our partners’ information systems, our business could be adversely affected.” Item 2. Properties We have leased facilities located in Woburn, Massachusetts in the United States, as well as in Shanghai and Shenzhen, China and Chungju and Seoul, South Korea. For more information, see “Part I, Item 1. Business—Our Facilities,” as well as “Leases” in Note 13 to the consolidated financial statements included in Item 8 of this Form 10-K. Item 3. Legal Proceedings The information required by this Item is provided under “Legal Contingencies” in Note 14 to the consolidated financial statements included in Item 8 of this Form 10-K and is incorporated herein by reference. Item 4. Mine Safety Disclosures Not applicable. PART II