Applied Therapeutics, Inc. 10-K Cybersecurity GRC - 2025-04-14

Page last updated on April 15, 2025

Applied Therapeutics, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-14 18:30:49 EDT.

Filings

10-K filed on 2025-04-14

Applied Therapeutics, Inc. filed a 10-K at 2025-04-14 18:30:49 EDT
Accession Number: 0000950170-25-053840

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYB ERSECURITY. We have established policies and procedures for assessing, identifying and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We leverage well-known and established third parties as industry partners to support our key business processes and utilize the services of reputable external advisory firms for running important functions such as cybersecurity assessments and technical security management activities, including network security management. Our Chief Financial Officer and Chief Operating Officer are jointly responsible for managing cybersecurity risks and implementing the required policies across the Company. Our Chief Executive Officer is responsible for making strategic decisions and approving external communication releases related to cybersecurity risks or incidents. Our Chief Executive Officer and Chief Financial Officer work closely with our third-party IT manager to stay informed about and monitor the prevention, detection, mitigation and remediation of any potentially significant cybersecurity incidents, including making determinations on the materiality of a cybersecurity incident. One of the key functions of our Board of Directors is informed oversight of our risk management processes, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, as well as through the Audit Committee of the Board of Directors (the “Audit Committee”). The Audit Committee oversees our risk management program, which focuses on the most significant risks we face. Audit Committee meetings include discussions of specific risk areas throughout the year, including, among others, those relating to cybersecurity . Our Chief Financial Officer or Chief Operating Officer reports on our enterprise risk profile on an annual basis or more frequently as needed. Our Audit Committee also engages with external counsel on legal matters related to cybersecurity incident management and reporting. To date, risks from cybersecurity threats, including those resulting from any previous cybersecurity incidents, have not materially affected us, including our operations or financial standing. We do not believe that cybersecurity threats resulting from any previous cybersecurity incidents of which we are aware are reasonably likely to materially affect us. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, “Risk Factors,” in this annual report on Form 10-K.

Company Information