Xenia Hotels & Resorts 10-K Item 1C cybersecurity disclosure describes its NIST CSF-aligned corporate cybersecurity risk management program, REIT-structure reliance on third-party hotel operators/managers/franchisors for property-level systems, Audit Committee oversight, and ERMC/VP of IT governance. The filing states no known cybersecurity incidents have materially affected the company. No actual breach is disclosed.