NKGen Biotech, Inc. 10-K Cybersecurity GRC - 2024-04-16

Page last updated on July 16, 2024

NKGen Biotech, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-16 15:07:01 EDT.

Filings

10-K filed on 2024-04-16

NKGen Biotech, Inc. filed a 10-K at 2024-04-16 15:07:01 EDT
Accession Number: 0001845459-24-000007

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Prior to the Business Combination, we were a blank check company with no operations and therefore did not have any operations of our own that faced material cybersecurity threats. We plan to develop processes, including those intended to follow an internal Information Technology (" IT “) Security Policy, which seek to assess, identify, and manage material risks from cybersecurity threats to the IT systems and information that we create, use, transmit, receive, and maintain. We also seek to integrate these processes and policies into our overall enterprise risk management system and processes. The processes for assessing, identifying, and managing material risks from cybersecurity threats, including threats associated with our use of third-party service providers, will include our efforts to identify the relevant assets that could be affected, determine possible threat sources and threat events, assess threats based on their potential likelihood and impact, and identify controls that are in place or necessary to manage and/or mitigate such risks. We plan to implement and conduct security assessments of all third-party service providers before engagement and maintain ongoing monitoring to ensure compliance with relevant cybersecurity standards. In the event of a cybersecurity incident impacting us, the management team will report to the board of directors and provide updates on the management team’s incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

Company Information