Solid Power, Inc. 10-K

Item 1B. Unresolved Staff Comments None. Item1C. Cybe rsecurity Risk Management and Strategy We use various tools and methodologies, including third-party services, to assess, identify, and manage cybersecurity threats. For example, we utilize third-party services to monitor the security and integrity of our information systems and the other third-party information systems upon which we rely on an ongoing basis. We also engage a third-party cybersecurity auditor for periodic penetration and vulnerability testing and assessment of our processes. Our information technology department oversees cybersecurity risk management and reports significant incidents to management. We consult with our advisors as appropriate, including on materiality analysis and disclosure matters, and management makes the final materiality determinations and disclosure and other compliance decisions. We have not identified risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, but we cannot guarantee that we will not be materially affected in the future by such risks or any future cybersecurity incidents. For more information, see “Part I, Item A. Risk Factors—Risks Related to Legal and Regulatory Compliance—We may be adversely impacted by a disruption or failure of our information technology infrastructure, data security breach, or failure to comply with privacy laws.” Governance The Board has delegated primary responsibility for oversight of our cybersecurity risk exposures to the Audit Committee of the Board, and the Audit Committee of the Board receives routine updates on cybersecurity matters from our Director of Information Technology and other members of management. Our Director of Information Technology leads our cybersecurity efforts and has 15 years of information technology experience. There are no management positions directly responsible for overseeing our cybersecurity risk. Rather, our Director of Information Technology and our broader information technology department work closely with members of management to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs . Item 2. Properti es We currently operate out of two facilities in Colorado. We lease approximately 38,000 square feet in Louisville, Colorado under a lease that expires in December 2029. Most of this facility, which we refer to as SP1, is used for cell production, research and development, quality control, and general office space. We lease approximately 75,000 square feet in Thornton, Colorado under a lease that expires in March 2029. Most of this facility, which we refer to as SP2, is used for pilot production of electrolyte, research and development, quality control, and general office space. In addition, we lease general office space in the Republic of Korea that is immaterial to our financial statements.