SOLIGENIX, INC. 10-K Cybersecurity GRC - 2025-03-21

Page last updated on March 21, 2025

SOLIGENIX, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-21 16:05:31 EDT.

Filings

10-K filed on 2025-03-21

SOLIGENIX, INC. filed a 10-K at 2025-03-21 16:05:31 EDT
Accession Number: 0001558370-25-003459

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity Risk Management and Strategy Our technology and cybersecurity programs are crucial to maintaining secure operations, which enable us to deliver on our promise to maintain stakeholder trust. Our Chief Financial Officer (“CFO”) is responsible for establishing, implementing and executing our cybersecurity program and strategy. Our CFO has over nine years of information technology, information technology audit, and cybersecurity experience, and is involved in following the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Our cybersecurity program is a critical component of our enterprise risk management process overseen by our Board of Directors, and we have integrated cybersecurity-related risks into our overall enterprise risk management framework . Additionally, cybersecurity-related risks are included in the risk universe that the risk management function evaluates to assess top risks to the enterprise on an annual basis. Our personnel responsible for cybersecurity proactively identifies, manages, and mitigates cyber risk in a variety of ways, including but not limited to: a. cyber incident response, IT disaster recovery, and business continuity plans; b. cybersecurity assessments and remediation planning as part of our due diligence process; and c. identity and access management controls. A primary element of our cybersecurity program is the implementation of controls that are aligned with industry guidelines and applicable regulations to identify threats, deter attacks, and protect our information security assets. We do not engage third parties in connection with our cybersecurity program. Cybersecurity Governance Our Board of Directors oversees the management of our cybersecurity risk exposures and the steps management has taken to monitor and control such exposures. Annually, the Board of Directors receives an update from our CFO and other members of management on relevant topics, including cybersecurity program maturity progress, new capabilities implemented, and notable incidents or events should they occur. In accordance with our cybersecurity incident response plan, our Board of Directors is promptly informed of potentially material cybersecurity incidents, including with respect to our third-party service providers. Although we have experienced cybersecurity incidents from time to time that have not had a material adverse effect on our business, financial condition, or results of operations , there can be no assurance that a cyber-attack, security breach, or other cybersecurity incident will not have a material adverse effect on us in the future. For a discussion regarding risks from cybersecurity threats that have or are reasonably likely to affect us, see our risk factors, including the risk factors titled “Our strategy includes an increasing dependence on technology in our operations. If any of our key technology fails, our business could be adversely affected.” and “A cybersecurity incident could negatively impact our business and our relationships with employees, service providers, patients, clinical study sites and government agencies.” in Item 1A of this Annual Report on Form 10-K.

Company Information