Sonoma Pharmaceuticals, Inc. 10-K Cybersecurity GRC - 2024-06-17

Page last updated on July 16, 2024

Sonoma Pharmaceuticals, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-06-17 16:13:13 EDT.

Filings

10-K filed on 2024-06-17

Sonoma Pharmaceuticals, Inc. filed a 10-K at 2024-06-17 16:13:13 EDT
Accession Number: 0001683168-24-004275

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. Cybersecurity Risk Management and Strategy We identify and address cybersecurity threats and risks related to our business with an approach that includes assessments by our management and use of an outside consultant to manage our information technology. In addition, we rely on operating systems and software from established and reliable third-party service providers to provide security. We have employee policies in place designed to reduce risk of cyber-attacks and educate employees on protocol in the event of a potential cybersecurity incident. Currently we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations or financial condition or are reasonably likely to have such a material effect. However, cyber-attacks are increasing in frequency, sophistication and intensity, and despite our ongoing efforts we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. Please refer to “Risk Factors” in Part I, Item 1A of this Form 10-K for more information on the risks posed to us by cybersecurity threats. Governance The Board of Directors takes an active role, as a whole, in overseeing management regarding our Company’s risks, including cybersecurity risks. Our management, including our Chief Executive Officer and our Chief Financial Officer, keeps the Board of Directors apprised of significant risks facing our Company and the approach being taken to understand, manage, and mitigate such risks, including with respect to potential cybersecurity threats.

Company Information