Sunshine Biopharma Inc. 10-K Cybersecurity GRC - 2025-04-01

Page last updated on April 1, 2025

Sunshine Biopharma Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-01 17:05:10 EDT.

Filings

10-K filed on 2025-04-01

Sunshine Biopharma Inc. filed a 10-K at 2025-04-01 17:05:10 EDT
Accession Number: 0001683168-25-002184

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Our Company recognizes the critical importance of cybersecurity in protecting our sensitive data, intellectual property, and the personal information of our employees and partners. We have implemented a comprehensive cybersecurity risk management program that includes the following key components: Risk Assessment and Management We conduct regular risk assessments to identify and evaluate potential cybersecurity threats and vulnerabilities. Our risk management framework is aligned with industry standards such as the NIST Cybersecurity Framework (CSF) and ISO 27001. We continuously monitor and update our cybersecurity measures to address emerging threats and ensure the protection of our assets. Cybersecurity Governance Our management oversees our cybersecurity risk management efforts. Our senior management team is actively involved in cybersecurity policies, procedures and strategy development. Incident Response and Recovery We have a robust incident response plan in place to quickly detect, respond to, and recover from cybersecurity incidents. We collaborate with external cybersecurity experts and law enforcement agencies to enhance our incident response capabilities. 17 Employee Training and Awareness We provide ongoing cybersecurity training and awareness programs for all employees to promote a culture of security. Our training programs cover topics such as phishing prevention, secure data handling, and recognizing potential cyber threats. Third-Party Risk Management We assess the cybersecurity practices of our third-party vendors and partners to ensure they meet our security standards. Our contracts with third parties include provisions for cybersecurity requirements and incident reporting. Regulatory Compliance We comply with all relevant cybersecurity regulations and standards, including the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation (GDPR). We regularly review and update our cybersecurity policies and procedures to ensure compliance with evolving regulatory requirements. Investments in Cybersecurity We continuously invest in advanced cybersecurity technologies, including threat detection and prevention systems, encryption, and secure access controls. Our cybersecurity is part of our overall budget which is reviewed and approved by our board of directors to ensure adequate resources are allocated to protect our assets. Cybersecurity Incidents During the past fiscal year, we experienced no cybersecurity incidents.

Company Information