Pharma-Bio Serv, Inc. 10-K Cybersecurity GRC - 2025-01-29

Page last updated on January 29, 2025

Pharma-Bio Serv, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-01-29 16:55:45 EST.

Filings

10-K filed on 2025-01-29

Pharma-Bio Serv, Inc. filed a 10-K at 2025-01-29 16:55:45 EST
Accession Number: 0001654954-25-000915

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBER SECURITY. Risk management and strategy We rely on information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident. As part of our broader risk management framework, we have identified the potential cybersecurity risks to our business. We have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We have (i) engaged a third-party consultant to assist us with designing controls and our cybersecurity risk management framework; (ii) engaged third party applications to perform penetration testing, and (iii) retained third parties to assist with the monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. We have not encountered cybersecurity threats or incidents that have had a material impact on our business. Despite the implementation of our cybersecurity processes, our security measures cannot guarantee that a significant cybersecurity attack will not occur. There can also be no guarantee that our policies and procedures under our cybersecurity risk management program will be properly followed in every instance or that those policies and procedures will be effective. While we devote resources to our security measures designed to protect our systems and information, we cannot guarantee the security measures are infallible. Governance Our Board of Directors oversees our general risk management, including cybersecurity. Policies, practices and potential risks associated with cybersecurity are discussed and managed by the Board of Directors and management. Our chief financial officer has primary responsibility for assessing, monitoring, managing cybersecurity risks and updating the Board of Directors on any significant risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.

Company Information