PaxMedica, Inc. 10-K Cybersecurity GRC - 2024-03-11

Page last updated on April 11, 2024

PaxMedica, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-11 16:45:51 EDT.

Filings

10-K filed on 2024-03-11

PaxMedica, Inc. filed an 10-K at 2024-03-11 16:45:51 EDT
Accession Number: 0001558370-24-002911

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy We continue to assess and improve the capabilities of our people, processes, and technologies in order to address our cybersecurity risks. Our cybersecurity risks, and the controls designed to mitigate those risks, are included as a party of our overall risk management governance which is reviewed yearly by our Board of Directors. Risks from cybersecurity threats are regularly evaluated as a part of our broader risk management activities and as a component of our internal control system. Cybersecurity awareness, including specific topics related to social engineering and email frauds, are included as a part of our annual employee training program. We have processes and controls, in particular with respect to our financial and reporting technology, to prevent and minimize cybersecurity risks and attacks. We rely on industry-standard third-party software 53 Table of Contents and vendors for our core systems, including data storage, analysis and backup. As discussed under Item 9A Disclosure Controls and Procedures, we are in the process of improving and enhancing our information technology policies and procedures for our information systems, including cybersecurity capabilities. Governance Our Board of Directors is responsible for overseeing our cyber security risk management and strategy. Our senior leadership, including our Chief Financial Officer and controller, regularly meets with and provides periodic briefings to our Board of Directors regarding our company performance and risk management, which include reports of any cybersecurity incidents and improvements and strategy of the Company s cybersecurity risk management. The Audit Committee of the Board of Directors will regularly review cybersecurity requirements and risks on a quarterly basis. Notwithstanding the approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. See Item 1A. Risk Factors for a discussion of cybersecurity risks.

Company Information