CUTERA INC 10-K Cybersecurity GRC - 2024-05-10

Page last updated on July 16, 2024

CUTERA INC reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-05-10 16:15:53 EDT.

Filings

10-K filed on 2024-05-10

CUTERA INC filed a 10-K at 2024-05-10 16:15:53 EDT
Accession Number: 0001628280-24-022628

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. Cybersecurity Risk Management and Strategy. The Company has implemented and maintained various information security processes designed to identify, assess and manage material risks from cybersecurity threats to critical computer networks, third-party hosted services, communications systems, hardware, lab equipment, software, and critical data includes confidential, personal, proprietary, and sensitive data. Accordingly, the Company maintains certain risk assessment processes intended to identify cybersecurity threats, determines the likelihood of occurring, and assesses potential material impact to the Company’s business. Based on the Company’s assessment, the Company implements and maintains risk management processes designed to protect the confidentiality, integrity, and availability of its information assets and mitigate harm to its business. The Company’s cybersecurity policies, standards, processes, and practices are based on recognized frameworks established by the Center for Internet Security (CIS), the National Institute of Standards and Technology (NIST) and other applicable industry standards and are integrated into the Company’s overall risk management system and processes. The Company engages in processes designed to identify such threats by, among other things, monitoring the threat environment, conducting scans of the threat environment, evaluating the Company’s industry’s risk profile, evaluating threats reported to the Company, coordinating with law enforcement concerning threats, conducting threat assessments for internal and external threats, and conducting vulnerability assessments to identify vulnerabilities. The Company has not identified any risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Company, including its operations, business strategy, results of operations, or financial condition. The Company faces certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect the Company, including its operations, business strategy, results of operations, or financial condition. See " Risk Factors - Security breaches, cyber-security incidents and other disruptions could compromise the Company’s information and impact the Company’s business, financial condition or results of operations. " Governance. The Board of Directors is responsible for oversight of the Company’s risk management process. The Board administers this oversight function directly through the Board of Directors as a whole, as well as through the Audit Committee of the board. Areas of focus include economic risk, operational risk, financial risk (accounting, investment or liquidity, and tax), competitive risk, legal and regulatory risk, cybersecurity risk and compliance and reputational risks. The Board of Directors is supported by regular reporting by leaders from the Company’s finance, cyber security, privacy, legal and compliance teams, who have an average of approximately 15 years of experience, which is designed to give the Board of Directors visibility over the Company’s operations and activities to adequately identify key risks and understand management’s risk mitigation strategies.

Company Information