Contineum Therapeutics, Inc. 10-K Cybersecurity GRC - 2025-03-06

Page last updated on March 6, 2025

Contineum Therapeutics, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-06 16:10:15 EST.

Filings

10-K filed on 2025-03-06

Contineum Therapeutics, Inc. filed a 10-K at 2025-03-06 16:10:15 EST
Accession Number: 0001437749-25-006458

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. Risk Management and Strategy We have certain processes in place to assess, identify and manage material cybersecurity risks. We also periodically monitor and test our information systems for potential vulnerabilities. We use various tools designed to help identify, investigate and resolve cybersecurity incidents, and to help recover from them in a timely manner. These processes, policies and tools comprise our cybersecurity risk program and are integrated into our overall risk management program. We have implemented cybersecurity processes in accordance with our risk profile and business size and we are continually seeking to improve processes to enhance our risk management processes. Currently, we engage external resources that contribute to our existing cybersecurity practices and organizational risk assessment systems. For example, we have an employee training program that includes annual cybersecurity awareness training that is reinforced by approximately quarterly phishing campaigns. In order to help protect us from any related cybersecurity vulnerabilities, we take a risk-based approach to the evaluation of third -party providers with whom we engage and apply mitigations and processes based on our evaluation of the sensitivity of the data accessed by the vendor and the maturity of the third -party service provider’s programs. In fiscal 2024, and through the filing of this Annual Report on Form 10-K, we have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. Cybersecurity Governance Our management team, including our Chief Financial Officer, and our external information technology service provider are responsible for assessing and managing our material risks from cybersecurity threats. We have outsourced implementation and day-to-day function of our overall cybersecurity risk management program to our third-party information technology service provider. Our management team supervises both our internal personnel and our third-party information technology service provider. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from the finance department or external information technology personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our Board of Directors has delegated oversight of cybersecurity risk management to the Audit Committee. The Audit Committee reviews our major cybersecurity risk exposures and the steps that our management has taken to monitor and control such exposures. The Audit Committee receives periodic reports from management on our cybersecurity risks. In addition, management updates the Audit Committee, as necessary or appropriate, regarding any material cybersecurity incidents.

Company Information