Protagonist Therapeutics, Inc 10-K Cybersecurity GRC - 2024-02-27

Page last updated on April 11, 2024

Protagonist Therapeutics, Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-27 16:33:25 EST.

Filings

10-K filed on 2024-02-27

Protagonist Therapeutics, Inc filed an 10-K at 2024-02-27 16:33:25 EST
Accession Number: 0001558370-24-001850

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity In the ordinary course of our business, we collect, use, store, and transmit confidential, sensitive, proprietary, and personal information. The secure maintenance of this information and our information technology ( IT ) systems is important to our operations and business strategy. To this end, we have documented cybersecurity policies and standards and we assess risks from cybersecurity threats and monitor information systems for potential cybersecurity issues. These processes are managed and monitored by a dedicated cybersecurity team, including third-party service providers and led by our Head of IT, and include mechanisms, controls, technologies, systems, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the data and maintain a stable information technology environment. For example, we use processes and tools to conduct vulnerability testing, data recovery testing, security audits, and ongoing risk assessments, including due diligence on and audits of our key technology vendors, CROs, and other contractors and suppliers. We also conduct regular employee training on matters such as phishing and email security best practices, among other topics. In addition, we consult with outside advisors and experts when appropriate to assist with assessing, identifying, and managing cybersecurity risks, including to anticipate future threats and trends, and their impact on our risk environment. 52 Table of Contents Our current Head of IT reports directly to our Chief Financial Officer and has over twenty years of experience managing information technology and cybersecurity matters, holds a Master of Science degree in Telecommunications and Computer Networks and is Project Management Professional, Certified Scrum Master and IT Infrastructure Library certified. He, together with our senior leadership team, is responsible for assessing and managing cybersecurity risks. We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. In the last fiscal year, we have identified and mitigated certain known cybersecurity threats, which we determined are not reasonably likely to materially affect us, and have strengthened our cybersecurity ecosystem. However, cybersecurity attack techniques change frequently, and with increased volume and sophistication of such attacks there is the potential for us to be adversely affected. Additional information on the cybersecurity risks we face is discussed in Part I, Item 1A, Risk Factors - Significant disruptions of information technology systems or breaches of data security could adversely affect our business. Our Board as a whole has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks, including oversight of cybersecurity risks. Our Board receives at least two updates each year on cybersecurity and information technology matters and related risk exposures from our Head of IT as well as other members of our senior leadership team.

Company Information