Akero Therapeutics, Inc. 10-K Cybersecurity GRC - 2024-02-29

Page last updated on July 16, 2024

Akero Therapeutics, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-29 07:30:36 EST.

Filings

10-K filed on 2024-02-29

Akero Therapeutics, Inc. filed a 10-K at 2024-02-29 07:30:36 EST
Accession Number: 0000950170-24-022644

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Risk Management and Strategy The Company relies on information systems and the data stored on them to conduct its operations. Our cybersecurity risk management program, which is supported by third parties, is designed to allow us to identify, assess, and manage cybersecurity risks. Our external partners include professional services firms, cybersecurity consultants, cybersecurity software providers, managed cybersecurity service providers, and security testing firms. We have also begun an assessment process, using an external partner, to assess cybersecurity risks across our business that is informed by the Center for Internet Security Controls and have recently invested in a full-time role dedicated to assessing, developing, and maintaining our IT/Cybersecurity infrastructure. Our Senior Director IT has years of experience leading cybersecurity teams. We also provide cybersecurity trainings to our employees during onboarding and are formalizing an ongoing information security training program for active employees and relevant consultants to address matters such as phishing, email security, and training on data privacy. To operate our business, we utilize third-party service providers to perform various functions, such as outsourced business-critical functions, professional services, SaaS platforms, managed services, cloud-based infrastructure, content delivery to third parties, corporate productivity services, and other functions. We engage reliable, reputable service providers that maintain cybersecurity programs and we conduct cybersecurity reviews as part of our quality assessment processes. Governance The Company reports on its information security program, including the results of periodic testing, to the Audit Committee of the Board of Directors. Our Board’s Audit Committee is responsible for overseeing the Company’s cybersecurity and information security procedures. The Audit Committee reviews management presentations concerning cybersecurity-related issues, including information security, technology risks, policies, and risk mitigation programs. The Audit Committee reports matters to the Board of Directors as needed. Our Chief Operating Officer, with the support of our Senior Director IT and third-party consultants, assesses and manages cybersecurity risk, including preventing, mitigating, detecting, and addressing cybersecurity incidents, if any. Our Chief Operating Officer also works closely with other management positions and external legal counsel to ensure that the Company understands its cybersecurity risk management responsibilities. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us. However, like other companies in our industry, we and our third-party vendors have from time-to-time experienced threats to and security incidents relating to information systems. For more information, please see the section entitled “Risk Factors” in this Annual Report on Form 10-K.

Company Information