Zomedica Corp. 10-K Cybersecurity GRC - 2024-04-01

Page last updated on April 11, 2024

Zomedica Corp. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-01 15:56:06 EDT.

Filings

10-K filed on 2024-04-01

Zomedica Corp. filed an 10-K at 2024-04-01 15:56:06 EDT
Accession Number: 0001558370-24-004517

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity Incidents None. Cybersecurity Risk Management and Strategy In the normal course of business, we may collect and store personal information, customer information, and certain sensitive company information, including proprietary and confidential business information, trade secrets, intellectual property, information regarding trial participants in connection with clinical trials, sensitive third-party information, and employee information. To protect this information, our existing cybersecurity policies require monitoring and detection programs, network security measures, and encryption of critical 25 Table of Contents data. We maintain various protections designed to safeguard against cyberattacks, including firewalls and virus detection software. We have established our disaster recovery plan, and we protect against business interruption by backing up our major systems. In addition, we maintain insurance that includes cybersecurity coverage. Our cybersecurity program is led by our Vice President of Technology Innovation and includes a team of information technology professionals. The program is further strengthened through support of our General Counsel. These teams work closely together to support and bolster our cybersecurity program, which incorporates industry-standard frameworks, policies, and practices designed to protect the privacy and security of our sensitive information. Our cybersecurity team informs our Audit Committee on information security and cybersecurity matters as needed. Despite the implementation of our cybersecurity program, our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences to the business. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security. See Risk Factors Risks Related to our Business for additional information about the risks to our business associated with a breach or compromise to our information technology systems.

Company Information