10-K/A: Value Line Inc. Files Amended 10-K to Include Cybersecurity Details

Value Line, Inc. has filed an amendment to its annual report to include a section on cybersecurity, which was inadvertently omitted from the original filing.

Summary

• Value Line, Inc. filed an amendment to its original Form 10-K to include a section on cybersecurity.
• The original Form 10-K for the fiscal year ended April 30, 2024, was filed on July 26, 2024.
• The amendment includes Part I Item 1C, Cybersecurity, which was previously omitted.
• The company maintains a cybersecurity program and regularly assesses and strengthens it.
• Management is responsible for the day-to-day administration of the company's risk exposures.
• A committee of senior leaders, chaired by the Executive Director of Information Technology, oversees cybersecurity.
• Third-party services are engaged to conduct security control evaluations, including penetration testing and audits.
• The company relies on third-party service providers for information systems and monitors associated cybersecurity risks.
• The Audit Committee oversees the company's risk management program, including technology and cybersecurity risks.
• The company believes it has not encountered a cybersecurity event that has had a material impact on its business.

Sentiment

Score: 7

Explanation: The document is a routine amendment to include a missing section, and the company appears to be taking cybersecurity seriously. There are no indications of significant issues, but there are inherent risks associated with cybersecurity.

Positives

• The company has a proactive approach to cybersecurity, with continuous assessment and strengthening of its program.
• The company engages third-party services to evaluate security controls.
• The Audit Committee actively oversees the company's risk management program, including cybersecurity.
• The company has not experienced a material cybersecurity event.

Risks

• A cyber-attack at a third-party service provider could have a significant impact on the company's business.
• The company relies on third-party service providers for information systems, which introduces potential vulnerabilities.

Management Comments

• Management believes that information security is a critical component of the company's business strategy.
• Management is responsible for the day-to-day administration of the company's risk exposures.
• Management believes that currently they have not encountered a cybersecurity event that has had a material impact on their business.

Industry Context

The inclusion of a detailed cybersecurity section in the amended 10-K reflects the increasing importance of cybersecurity for all businesses, particularly those that handle sensitive data. This is in line with industry trends and regulatory expectations.

Comparison to Industry Standards

• Many companies in the financial and information services sectors are increasing their focus on cybersecurity, reflecting a broader trend.
• The use of third-party penetration testing and independent audits is a common practice among companies seeking to strengthen their cybersecurity posture.
• The establishment of a committee of senior leaders to oversee cybersecurity is also a common practice in the industry.
• Companies like Moody's and S&P Global, which are also in the financial information sector, have similar cybersecurity programs and disclosures.

Stakeholder Impact

• The inclusion of the cybersecurity section may reassure shareholders about the company's commitment to protecting its data and systems.
• The company's proactive approach to cybersecurity may also benefit customers by ensuring the security of their data.

Key Dates

Keywords

cybersecurity, information security, risk management, audit committee, penetration testing, third-party service providers, security controls, Form 10-K, amendment