SS Innovations International, Inc. 10-K Cybersecurity GRC - 2025-04-15

Page last updated on April 15, 2025

SS Innovations International, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-15 09:00:29 EDT.

Filings

10-K filed on 2025-04-15

SS Innovations International, Inc. filed a 10-K at 2025-04-15 09:00:29 EDT
Accession Number: 0001213900-25-031773

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity. In the normal course of business, we may collect and store personal information and other sensitive information, including proprietary and confidential business information, trade secrets, intellectual property, patient information, sensitive third-party information and employee information. To protect this information, our existing cybersecurity policies require continuous monitoring and detection programs, network security precautions, encryption of critical data and in-depth security assessments of vendors. We maintain various protections designed to safeguard against cyberattacks, including firewalls and virus detection software. We have established and regularly test our disaster recovery plan, and we protect against business interruption by backing up our major systems. In addition, we periodically scan our environment for any vulnerabilities, perform penetration testing and engage third parties to assess the effectiveness of our data security practices. Our information technology (" IT “) team is responsible for these ongoing monitoring and detection activities. Our cybersecurity program is primarily overseen by our Head-Server and Network Administrator, who works closely with our information technology team and our senior management to develop and advance our cybersecurity strategy, as well as to respond to cybersecurity incidents. Our Head-Server and Network Administrator reports to our Chief Operating Officer on cybersecurity matters and collaborates with stakeholders to assess risks and implement strategies. The governance of our cybersecurity risks involves active and informed participation from our management team, our IT team and our board of directors . This oversight includes briefings by our IT team on the nature of the risks we face and the steps we are taking to mitigate these risks, as well as immediately reporting any significant cybersecurity incident that occurs to management and the board of directors . We have engaged a specialized consulting firm from India to enhance and develop the cybersecurity framework for our products with the aim of protecting sensitive patient data and proprietary device information from cyber threats and ensuring compliance with the latest cybersecurity standards including, HIPPA, FDA regulations, IEC 62443, and NIST guidelines for medical devices. We have not experienced a cybersecurity incident that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. We continue to monitor potential cybersecurity threats and incorporate findings into our risk management strategies.

Company Information