FibroBiologics, Inc. 10-K Cybersecurity GRC - 2025-03-31

Page last updated on March 31, 2025

FibroBiologics, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-31 16:04:47 EDT.

Filings

10-K filed on 2025-03-31

FibroBiologics, Inc. filed a 10-K at 2025-03-31 16:04:47 EDT
Accession Number: 0001641172-25-001691

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Risk Management and Strategy We have processes for assessing, identifying, and managing cybersecurity risks that include physical, procedural, and technical safeguards to identify, assess and mitigate risks from cybersecurity threats. We have engaged an external Information Technology Managed Service Provider, or IT MSP, to support our management team’s maintenance of our information technology systems and infrastructure. A member of our executive leadership team provides oversight of the activities of the IT MSP to monitor cybersecurity controls. Further, through diligence and/or contract, we assess the cybersecurity posture of certain third parties. Governance Our management team is responsible for assessing and managing cybersecurity risks, and is informed by our IT MSP regarding cybersecurity matters. The Audit Committee of our Board of Directors is responsible for oversight of enterprise risk management, including cybersecurity risk management. The Audit Committee, with assistance from the Governance and Nominating Committee of our Board, reviews our processes for assessing and managing such risks. The Audit Committee and Governance and Nominating Committee receive periodic updates from management regarding cybersecurity matters. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, we and our third-party service providers experience threats and security incidents that could affect our information or systems. For more information, please see Section 1A. Risk Factors.

Company Information