Polomar Health Services, Inc. 10-K Cybersecurity GRC - 2025-05-22

Page last updated on May 26, 2025

Polomar Health Services, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-05-22 16:05:41 EDT.

Filings

10-K filed on 2025-05-22

Polomar Health Services, Inc. filed a 10-K at 2025-05-22 16:05:41 EDT
Accession Number: 0001641172-25-012070

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity We currently use a third-party sub-contractor to manage Information Technology (IT) issues, including with respect to protection against, detection, and response to cyberattacks but have not adopted an Information Technology Policy as a result of our size and the status of our operations. Additionally, we utilize third party vendors and service providers for legal, accounting, executive management services, web hosting and maintenance and other activities. We believe that our third-party vendors and service providers have their own respective cybersecurity protocols which our management believes to be adequate for protecting any of the Company’s data that might be in their possession from time to time. Our chief executive officer and directors are responsible for assessing and managing cybersecurity risks, but our officers and directors do not have specific cybersecurity expertise. We believe that once the Company commences operations, cybersecurity will represent an important component of the Company’s overall approach to risk management and oversight. The nature of our business provides us with access to personal health information (“PHI”) which is considered protected data under the Health Insurance Portability and Accountability Act of the 1996 (“HIPAA”). Our data storage and websites that access PHI are HIPAA compliant. Cybersecurity threats have not materially affected, and are not reasonably likely to affect, the Company, including its business strategy, results of operations or financial condition while its operations are suspended. The Company is not aware of any material security breach to date. Accordingly, the Company has not incurred any expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third party service providers could negatively impact us by causing a disruption to our operations, if any, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business, if any, and results of operations. There can be no assurance that the Company’s third-party vendors’ and service providers’ cybersecurity risk management processes, including its their policies, controls or procedures, will be fully implemented, complied with or effective in protecting the Company’s systems and information.

Company Information