GUIDED THERAPEUTICS INC 10-K Cybersecurity GRC - 2024-03-28

Page last updated on April 11, 2024

GUIDED THERAPEUTICS INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-28 17:15:08 EDT.

Filings

10-K filed on 2024-03-28

GUIDED THERAPEUTICS INC filed an 10-K at 2024-03-28 17:15:08 EDT
Accession Number: 0001477932-24-001549

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. CYBERSECURITY Cybersecurity is an area of increasing concern to management and our investors. By design, our device and software (LuViva) are not connected to the internet. Patient results cannot be saved to the device and must first be downloaded to a flash drive and then transferred to another computer or cloud-based system to be saved. The design of our product limits our exposure to the compliance requirements of NIST 800 - 171. Our Company generally keeps all employee personally identifiable information with our payroll service provider. Each year the provider furnishes us with their SOC report which includes their cybersecurity policies and procedures. The board of directors, as a whole, has oversight responsibility for our strategic and operational risks, while we engage consultants who are responsible for day-to-day assessment and management of cybersecurity risks and who report regularly to the board of directors. We have previously experienced cybersecurity incidents, from time to time. These incidents have not materially affected our business strategy, results of operations or financial condition. We are not currently aware of any cybersecurity incidents that would have a material effect on our business strategy, results of operations or financial condition. Nevertheless, there is always a risk that a phishing attempt, ransomware or other attack by a bad actor could have a material adverse effect on our financial position or results of operations. Based on information currently available, management does not believe that there is a reasonably likely risk of these issues, nevertheless the possibility of one occurring cannot be completely ruled out.

Company Information