Orange County Bancorp discloses in its 10-K Item 1C that it has not experienced any cybersecurity event with a material effect on its business, results of operations, or financial condition. The filing details its cybersecurity governance, including oversight by a Cybersecurity Management Committee and the Board of Directors, and describes its risk mitigation program involving internal resources, third-party vendors for scanning and testing, and insurance coverage.