Vivani Medical, Inc. 10-K Cybersecurity GRC - 2024-03-26

Page last updated on July 16, 2024

Vivani Medical, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-26 16:02:27 EDT.

Filings

10-K filed on 2024-03-26

Vivani Medical, Inc. filed a 10-K at 2024-03-26 16:02:27 EDT
Accession Number: 0001753926-24-000616

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Cybersecurity Risk Management and Strategy We rely on information technology systems and data processing that we or our service providers, collaborators, consultants, contractors or partners operate to collect, process, transmit and store electronic information in our day-to-day operations. Our internal computer systems and data processing and those of our third-party vendors, consultants, collaborators, contractors or partners, including future CROs, may be vulnerable to risks from cybersecurity threats. To help manage these risks, we engage and rely on external experts, including an information technology managed services provider. We are also in the process of developing additional cybersecurity policies and procedures, as we continually work to enhance and evolve our program in light of the constantly evolving threat landscape. Our managed services provider assists us with our technology, infrastructure and risk management through the deployment of a number of security controls and tools, including, but not limited to, endpoint protection tools, phishing protection and access controls. We also take steps to limit third-party vendors’ access to our systems, and we are in the process of developing additional vendor risk management procedures. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition; however, like other companies in our industry, we and our third-party vendors may, from time to time, experience threats and security incidents that could affect our information or systems. For more information, please see the section entitled “Risk Factors.” Governance Related to Cybersecurity Risks We engage a managed services provider, which includes virtual chief information officer (vCIO) services, to assist us with the identification, monitoring and management of risks from cybersecurity threats. Our managed services provider reports on our cybersecurity posture periodically to our management team and audit committee. We have also formed an IT Steering Committee, whose members include cross functional representatives from our management team as well as our managed services provider, to review our cybersecurity program initiatives and related program metrics. The Committee is also charged with identifying and implementing improvements that strengthen our risk mitigation systems. The Audit Committee of our Board of Directors oversees our policies and procedures with respect to risk management, including our management of risks from cybersecurity threats. The Audit Committee administers this cybersecurity risk oversight function through the receipt and review of reports from the management team and the vCIO on the Company’s information technology systems and the status of the cybersecurity risk management tools.

Company Information