GALECTIN THERAPEUTICS INC 10-K Cybersecurity GRC - 2024-03-29

Page last updated on April 11, 2024

GALECTIN THERAPEUTICS INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-29 07:51:05 EDT.

Filings

10-K filed on 2024-03-29

GALECTIN THERAPEUTICS INC filed an 10-K at 2024-03-29 07:51:05 EDT
Accession Number: 0001140361-24-016452

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Risk management and strategy We have policies and processes designed to protect our information technology systems, which are managed by outside consultants. Our cybersecurity consultants resolve issues in a timely manner in the event of a cybersecurity threat or incident. As part of our broader risk management framework, from time to time, we seek to identify potential cybersecurity risks to our business and improve our policies and processes to address such risks. We have designed our business applications to minimize the impact that cybersecurity incidents could have on our business and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality reviews and communication and reporting structures, among other processes. We have an incident response plan in place that outlines containment, eradication and recovery plans in the event of a cybersecurity threat or incident. We engage a third-party consultant to assist us with designing controls and our cybersecurity risk management framework. We are also engaging with a third party to perform penetration testing. We also retain third parties to assist with the monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. With respect to third parties that manage or use our information technology or data, we obtain reports to assess the security of their systems and processes. We engage in ongoing monitoring of third-party providers to ensure compliance with our cybersecurity standards. We have not encountered cybersecurity threats or incidents that have had a material impact on our business. Cybersecurity Governance Our Nomination and Corporate Governance Committee has specific oversight responsibility for cybersecurity The Nomination and Corporate Governance Committee reviews and discusses with management our policies, practices and risks related to information security and cybersecurity. Our chief financial officer has primary responsibility for assessing, monitoring and managing cybersecurity risks. We utilize cybersecurity consultants to monitor and report cybersecurity threats or incidents to our chief financial officer and to resolve issues arising from such threats or incidents. Our chief financial officer updates the Nomination and Corporate Governance Committee on any risks related to cybersecurity as needed.

Company Information