Hoth Therapeutics, Inc. 10-K Cybersecurity GRC - 2025-03-28

Page last updated on March 28, 2025

Hoth Therapeutics, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-28 16:15:47 EDT.

Filings

10-K filed on 2025-03-28

Hoth Therapeutics, Inc. filed a 10-K at 2025-03-28 16:15:47 EDT
Accession Number: 0001013762-25-004108

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY We operate in the biotechnology sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to customers and/or corporate partners or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We have implemented various security measures to identify and assess the cybersecurity threats that could affect our business and information systems. We use various tools and methodologies to manage cybersecurity risk that are tested on a regular cadence. We also monitor and evaluate our cybersecurity posture and performance on an ongoing basis through regular vulnerability scans, penetration tests and threat intelligence feeds. We require third-party service providers with access to personal, confidential or proprietary information to implement and maintain comprehensive cybersecurity practices consistent with applicable legal standards and industry best practices. Risk management is further managed through the use of an expert third party company to assist in managing relevant risks. We outsource our monitoring to a third-party provider whereby we benefit from a professionally managed network monitoring, management, maintenance, detection and response system and a 24/7 security operations center with both onsite and remote support services. Any cybersecurity incident would be reported to us promptly by our third-party provider and material and potentially material incidents would be assessed by management for remediation and future prevention and detection. Our business depends on the availability, reliability, and security of our information systems, networks, data, and intellectual property. Any disruption, compromise, or breach of our network systems or infrastructure due to a cybersecurity threat or incident could adversely affect our operations, services, product development, and competitive position. They may also result in a breach of our contractual obligations or legal duties to protect the privacy and confidentiality of our customers’ and partners’ proprietary information, which may include personally identifiable information. Such a breach could expose us to business interruption, lost revenue, ransom payments, remediation costs, liabilities to affected parties, cybersecurity protection costs, lost assets, litigation, regulatory scrutiny and actions, reputational harm, customer dissatisfaction and harm to our relationships with corporate partners.

Company Information