Vitro Biopharma, Inc. 10-K Cybersecurity GRC - 2026-02-13

Page last updated on February 13, 2026

Vitro Biopharma, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2026-02-13 11:15:32 EST.

Filings

10-K filed on 2026-02-13

Vitro Biopharma, Inc. filed a 10-K at 2026-02-13 11:15:32 EST
Accession Number: 0001493152-26-006592

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Cybersecurity Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws. Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed by the Board and executive management, working with our external IT consultants. To defend, detect and respond to cybersecurity incidents, we, among other things: conduct employee training, monitor emerging laws and regulations related to data protection and information security (including our products) and implement appropriate changes. We have implemented incident response processes in the event of a cybersecurity threat. Such incident responses are overseen by functional leaders and external experts. In the event of a cybersecurity threat, security events and data incidents are evaluated, ranked by severity and prioritized for response and remediation. Incidents are evaluated to determine materiality as well as operational and business impact and reviewed for potential privacy impact. We describe whether and how risks from identified cybersecurity threats are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading "Security and privacy breaches, computer viruses, and cyber-attacks could harm our business, financial condition, results of operations, or reputation." included as part of our risk factor disclosures at Item 1A of this Annual Report on Form 10-K. Cybersecurity Governance Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management. Our Board is responsible for the oversight of risks from cyber and data security threats. Members of the Board Committee receive periodic updates from senior management regarding our cybersecurity processes and risks. Members of management that comprise our incident response team include our Chief Executive Officer, Chief Financial Officer and our external IT consultants. As part of our internal response policy, upon confirmation of a breach, a remediation process is initiated. The response team is responsible for overseeing the determination of whether a breach occurred, coordinating with third parties handling protected information, and ensuring compliance with legal obligations. Forensic investigators, as deemed necessary by the response team, will analyze the breach to understand its cause and extent. A communication plan will be developed by the team to inform internal employees, the public, those directly affected, and regulatory authorities, as necessary to help ensure all notifications comply with relevant laws and regulations.

Company Information