Ayala Pharmaceuticals, Inc. 10-K Cybersecurity GRC - 2024-04-16

Page last updated on April 16, 2024

Ayala Pharmaceuticals, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-16 16:11:03 EDT.

Filings

10-K filed on 2024-04-16

Ayala Pharmaceuticals, Inc. filed an 10-K at 2024-04-16 16:11:03 EDT
Accession Number: 0001493152-24-014822

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. As a regular part of our ordinary business operations, we collect and store data, including information necessary for our operations, information from our customers, employees, and our business partners. We recognize these networks and systems may be subject to increasing and continually evolving cybersecurity risks. Our Audit Committee is responsible for overseeing risk management and cybersecurity is an integral part of the Company s overall risk management program. Our risk management process is designed to identify, prioritize, and monitor risks that could affect our ability to execute our corporate strategy and fulfill our business objectives and to appropriately mitigate such risks. Our management team is involved in assessing and managing the Company s material risks from cybersecurity threats, including by hiring appropriate personnel, considering cybersecurity risk in our enterprise risk management strategy, helping prepare for cybersecurity incidents, and participating in the cybersecurity incident response and remediation process for incidents escalated to it including determining materiality. Our management that is involved in these processes includes our Chief Financial Officer, our VP of regulatory affairs as well as an external IT company, who collectively share risk management, compliance and technical experience. Management also escalates, as appropriate, reports relating to cybersecurity incidents or threats to our Board or to its Audit Committee. 18 While we have not yet experienced any material impacts from a cyber-attack, any one or more future cyber-attacks could materially adversely impact the Company, including a loss of trust among our customers, departures of key employees, general diminishment of our reputation and financial losses from remediation actions, loss of business or potential litigation or regulatory liability. Further, evolving market dynamics are increasingly driving heightened cybersecurity protections and mandating cybersecurity standards for our products, and we may incur additional costs to address these increased risks and to comply with such demands.

Company Information