Applied Therapeutics Inc. 10-K Cybersecurity GRC - 2024-03-06

Page last updated on April 11, 2024

Applied Therapeutics Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-06 07:19:47 EST.

Filings

10-K filed on 2024-03-06

Applied Therapeutics Inc. filed an 10-K at 2024-03-06 07:19:47 EST
Accession Number: 0001558370-24-002541

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY. We leverage well-known and established third parties as industry partners to support our key business processes and utilize the services of reputable external advisory firms for running important functions such as cybersecurity assessments and technical security management activities, including network security management. We engaged an independent cybersecurity advisory service firm to perform a focused cybersecurity assessment to better understand our current cybersecurity threats and risks and build a foundation for establishing a cybersecurity risk assessment framework to identify, assess and manage cybersecurity risks arising from our business operations. To date, risks from cybersecurity threats, including those resulting from any previous cybersecurity incidents, have not materially affected us, including our operations or financial standing. We do not believe that cybersecurity threats resulting from any previous cybersecurity incidents of which we are aware are reasonably likely to materially affect us. 80 Table of Contents For additional information regarding risks from cybersecurity threats, please refer to Item 1A, Risk Factors, in this annual report on Form 10-K. One of the key functions of our Board of Directors is informed oversight of our risk management processes, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, as well as through the Audit Committee of the Board of Directors (the Audit Committee ). The Audit Committee oversees our risk management program, which focuses on the most significant risks we face. Audit Committee meetings include discussions of specific risk areas throughout the year, including, among others, those relating to cybersecurity. Our Chief Financial Officer or Chief Operating Officer reports on our enterprise risk profile on an annual basis or as needed. Our Audit Committee also engages with external counsel on legal matters related to cybersecurity incident management and reporting. Our Chief Financial Officer and Chief Operating Officer are jointly responsible for managing cybersecurity risks and implementing the required policies across the Company. Our Chief Executive Officer is responsible for making strategic decisions and approving external communication releases related to cybersecurity risks or incidents.

Company Information