LEAP THERAPEUTICS, INC. 10-K Cybersecurity GRC - 2024-03-18

Page last updated on April 11, 2024

LEAP THERAPEUTICS, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-18 06:50:36 EDT.

Filings

10-K filed on 2024-03-18

LEAP THERAPEUTICS, INC. filed an 10-K at 2024-03-18 06:50:36 EDT
Accession Number: 0001410578-24-000218

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to maintain the security, confidentiality, integrity, and availability of our business systems and confidential information, including personal information and intellectual property. Our cybersecurity program includes systems and processes for assessing, identifying and managing material risks from cybersecurity threats and include maintenance and monitoring of information security policies aligned with Information Technology controls user and employee awareness of cyber policies and practices information systems configuration management infrastructure security systems and cyber threat operations with continuous monitoring and threat hunting. This program includes processes to oversee and identify material risks from cybersecurity threats associated with our use of third - party service providers. We also engage a range of third - party experts in connection with various security implementation, and maintenance activities related to our cybersecurity program. Our cybersecurity program is integrated into our overall risk management systems, business continuity and incident response plan. As part of our overall risk management program, we maintain an insurance portfolio with comprehensive cyber coverage. Our Director of Information Technology consults with third - party security advisors and provides input to each of these programs to ensure that material risks from cybersecurity threats are appropriately assessed, identified, and managed. As of the date of this report, there have been no cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, operations, or financial condition. 38 Table of Contents Governance While our audit committee has oversight responsibility for risk management generally, the Director of Information Technology is specifically responsible for overseeing our cybersecurity program to ensure that cybersecurity risks are identified, assessed, managed, and monitored. Our Director of Information Technology provides periodic updates to senior management in this regard and covers the state of our cybersecurity program to information asset protection, core security and endpoint security, and cyber threat operations. These updates include descriptions of cybersecurity incidents of interest, including those associated with our third - party service providers. The board of directors will be informed promptly of material risks from cybersecurity threats. We strive to create a culture of cybersecurity resilience and awareness and believe that cybersecurity is the responsibility of every employee and contractor. At the same time, primary responsibility for assessing, monitoring, and managing our cybersecurity risks lies with our Director of Information Technology.

Company Information