Asure

Overview

Asure maintains a dedicated Security Operations Team responsible for identifying, assessing, mitigating, and reporting material cybersecurity risks to executive management. Cybersecurity risks, emerging threats, and Asure’s current security posture are presented to the board of directors quarterly, with the board responsible for risk management.

Security and incident response

• Continuous monitoring program provides real-time feedback on security events.
• Security events are triaged and remediated.
• Critical incidents are escalated according to Asure’s Incident Response Policy.
• Critical incidents are reported to the board as required by the Incident Response Policy.

Leadership and reporting

• The Security Operations Team is led by the VP of Information Security.
• The VP holds a CISSP certification and has 19 years of experience in information security, risk management, application security, security operations, and incident management.
• Executive management receives regular monthly reports from the VP of Information Security.

Governance structure

The board of directors oversees risk management and receives quarterly presentations on cybersecurity risks, threats, and the company’s security posture.

Physical footprint

• Principal offices: Austin, Texas (approximately 9,500 square feet).
• Additional leased office suites in Alabama, California, Florida, Georgia, New Jersey, New York, North Carolina, Ohio, South Dakota, Tennessee, Texas, Virginia, and Vermont.
• Management believes the leased properties are adequate for current operations and can accommodate future physical expansion.

Legal and regulatory status

• As of December 31, 2025, Asure was not a party to any material legal proceedings.
• Mine safety disclosures: not applicable.