TWIN DISC INC 10-K

Item 1B. Unresolved Staff Comments None. Item 1C. Cybersecurity The Company’s Audit Committee is responsible for exercising oversight of management’s identification and management, and planning for, risks from cybersecurity threats. The Company has developed and implemented processes to assess, identify, and manage material risks from cybersecurity threats as part of its overall enterprise risk management system. Its cybersecurity processes include security monitoring and threat hunting through a third-party managed vendor and mandatory, company-wide employee training. The processes also extend to oversight and identification of risks associated with vendors and customers if their computer systems interface with the Company’s information systems. Upon detection of a potentially material cybersecurity incident, the Company initiates its cyber incident procedure to investigate, contain, and remediate the incident. The Company has not experienced any material cybersecurity incidents, and the expenses incurred from any security incidents have been immaterial. However, as discussed under “Risk Factors” in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple and potentially material risks to the Company, including potentially to the Company’s results of operations and financial condition. The Company relies extensively on information technology systems and could face cybersecurity risk. As cybersecurity threats become more frequent, sophisticated, and coordinated, it is reasonably likely that the Company may expend greater resources to continue to modify and enhance protective measures against such security risks.