Bicara Therapeutics Inc. 10-K Cybersecurity GRC - 2025-03-27

Page last updated on March 27, 2025

Bicara Therapeutics Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-27 16:19:41 EDT.

Filings

10-K filed on 2025-03-27

Bicara Therapeutics Inc. filed a 10-K at 2025-03-27 16:19:41 EDT
Accession Number: 0002023658-25-000012

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cyber Risk Management and Strategy - We have certain processes for assessing, identifying, and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from internal and external cyber threats, protect employee and clinical trial information from unauthorized access or attack, as well as secure our networks and systems. Such processes include physical, procedural, and technical safeguards, and routine review of our policies and procedures in an effort to identify risks and refine our practices. We engage certain external parties to enhance our cybersecurity oversight. - In an effort to deter and detect cyber threats, we perform annual phishing tests with employees. We also conduct annual cybersecurity and prevention training for employees, which may cover topics such as social engineering, phishing, password protection, confidential data protection, and mobile security, and is designed to educate employees on incident reporting. We also use technology-based tools, including third-party tools and solutions , designed to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs. - We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us , including our business strategy, results of operations or financial condition; however, like other companies in our industry, we and our third-party vendors may, from time to time, experience threats and security incidents relating to our and our third-party vendors’ information systems. Governance Related to Cybersecurity Risks Our Board of Directors (the “Board”) has established oversight mechanisms to manage risks from cybersecurity threats. Our Audit Committee of the Board has primary responsibility for oversight of cybersecurity risk, pursuant to the Audit Committee charter, and periodically updates our board of directors on such matters. At the management level, our cybersecurity program is managed by our Senior Director, IT , who is tasked with the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks. Our Senior Director, IT reports to the Senior Vice President, Research & Development Strategy and Operations (SVP, R&D) . Our Senior Director, IT has over twenty-five (25) years of experience in information technology, and also leverages the experience of a third-party managed systems provider. Our Senior Director, IT regularly reports to the SVP , R&D, as well as to other executive management on cyber matters, as appropriate.

Company Information