Lomond Therapeutics Holdings, Inc. 10-K Cybersecurity GRC - 2025-04-15

Page last updated on April 15, 2025

Lomond Therapeutics Holdings, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-15 17:21:44 EDT.

Filings

10-K filed on 2025-04-15

Lomond Therapeutics Holdings, Inc. filed a 10-K at 2025-04-15 17:21:44 EDT
Accession Number: 0001213900-25-032200

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Cyber Risk Management and Strategy As a part of the overall risk management system for the Company, we employ processes to assess, identify and manage material risks from cybersecurity threats. These items are designed to help protect our information assets from internal and external threats and protect the integrity and confidentiality of our data. Our system includes procedural and technical safeguards, response plans, and reviews of our policies. We engage various external entities, including consultants, to improve and enhance our cybersecurity oversight. We provide all employees and consultants with cybersecurity and prevention training including timely and relevant topics covering social engineering, phishing, mobile security, and data protection and the need for reporting incidents and suspicious events immediately. Cyber Risk Governance Our senior management team conducts the regular assessment and management of material risks from cybersecurity threats, including review with our IT team and third-party service providers, while our board of directors has responsibility for the strategic oversight of risk management, including oversight of material risks associated with cybersecurity threats. Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats are assessed on an ongoing basis, and how such risks could materially affect the Company’s business strategy, operational results, and financial condition are evaluated. Despite these efforts, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change, and efforts to overcome security measures become increasingly sophisticated. We cannot eliminate all cybersecurity risks or provide assurance that we have not had occurrences of undetected cybersecurity incidents. During the reporting period covered by this Annual Report, the Company did not identify any risks from cybersecurity threats that the Company believes materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, operational results, and financial condition.

Company Information