XML 47 R30.htm IDEA: XBRL DOCUMENT v3.25.0.1
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Dec. 31, 2024
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

We have certain processes for identifying, assessing and managing cybersecurity risks, which are built into our overall risk management program and are designed to help protect our people, technology, products, information and operations from internal and external cyber threats and to protect the information of employees, customers, vendors, and other individuals, such as subjects enrolled in our clinical trials, from unauthorized access or attack, as well as secure our networks and systems. Our cybersecurity program is built upon, and we periodically assess our processes against, the National Institute of Standards and Technology, or NIST, Cybersecurity Framework Special Publication 800-53, and our incident response capabilities align with NIST 800-61, revision 2, or collectively, the NIST Framework. This does not imply that we meet any particular technical standards, specifications, or requirements of the NIST Framework, but rather only that we use these standards as a guide to help us mature our security posture in order to identify, assess, and manage cybersecurity risks relevant to our business. Our processes for identifying, assessing and managing cybersecurity risks include physical, procedural and technical safeguards, a cybersecurity incident response plan, regular tests on our systems, incident simulations and routine review of our policies and procedures to identify risks and improve our practices. We engage certain external parties, including information technology security firms, to assist us with the identification, verification, and validation of cybersecurity risks, and to support mitigation efforts if necessary. We consider the internal risk oversight programs of third-party service providers before engaging them in order to help protect us from any related vulnerabilities.

We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.

Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block] We have certain processes for identifying, assessing and managing cybersecurity risks, which are built into our overall risk management program and are designed to help protect our people, technology, products, information and operations from internal and external cyber threats and to protect the information of employees, customers, vendors, and other individuals, such as subjects enrolled in our clinical trials, from unauthorized access or attack, as well as secure our networks and systems.Our processes for identifying, assessing and managing cybersecurity risks include physical, procedural and technical safeguards, a cybersecurity incident response plan, regular tests on our systems, incident simulations and routine review of our policies and procedures to identify risks and improve our practices.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Board of Directors Oversight [Text Block]

The Audit Committee of our board of directors provides direct oversight over cybersecurity risk and provides updates to the board of directors regarding such oversight as deemed necessary. The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding significant new cybersecurity threats or incidents.

Our management team is responsible for day-to-day assessment and management of cybersecurity risks. On our management team, our Chief Financial Officer and Chief Operating Officer, or CFO and COO, leads the operational oversight of company-wide cybersecurity strategy, policy, standards and processes and works across relevant departments to assess and help prepare us and our employees, customers, vendors and other individuals to address cybersecurity risks. Our CFO and COO has more than ten years of experience managing information technology teams of operating companies in the biotechnology industry. Our CFO and COO leads a cross-functional Cybersecurity Committee, consisting of executive-level leaders and other management-level individuals with the requisite skills and education, including our Executive Director IT and Cybersecurity, that assists the CFO and COO with carrying out these duties. The Executive Director IT and Cybersecurity has over ten years of offensive and defensive cybersecurity experience with departments of the U.S. government, international alliances and small to large biopharmaceutical companies. Collectively, the members of our Cybersecurity Committee have notable experience in managing information security, possess the education and skills to fulfill these duties, and attend periodic trainings as necessary.

In an effort to deter and detect cyber threats, we provide all employees, including part-time and temporary employees, with periodic training, including training related to data protection, cybersecurity and incident response, and prevention and compliance, which covers timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educates employees on the importance of reporting all incidents immediately. We also use technology-based tools to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs.

Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] Audit Committee
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding significant new cybersecurity threats or incidents.
Cybersecurity Risk Role of Management [Text Block] Our management team is responsible for day-to-day assessment and management of cybersecurity risks. On our management team, our Chief Financial Officer and Chief Operating Officer, or CFO and COO, leads the operational oversight of company-wide cybersecurity strategy, policy, standards and processes and works across relevant departments to assess and help prepare us and our employees, customers, vendors and other individuals to address cybersecurity risks. Our CFO and COO has more than ten years of experience managing information technology teams of operating companies in the biotechnology industry. Our CFO and COO leads a cross-functional Cybersecurity Committee, consisting of executive-level leaders and other management-level individuals with the requisite skills and education, including our Executive Director IT and Cybersecurity, that assists the CFO and COO with carrying out these duties. The Executive Director IT and Cybersecurity has over ten years of offensive and defensive cybersecurity experience with departments of the U.S. government, international alliances and small to large biopharmaceutical companies. Collectively, the members of our Cybersecurity Committee have notable experience in managing information security, possess the education and skills to fulfill these duties, and attend periodic trainings as necessary.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] Chief Financial Officer and Chief Operating Officer
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] Our CFO and COO has more than ten years of experience managing information technology teams of operating companies in the biotechnology industry. Our CFO and COO leads a cross-functional Cybersecurity Committee, consisting of executive-level leaders and other management-level individuals with the requisite skills and education, including our Executive Director IT and Cybersecurity, that assists the CFO and COO with carrying out these duties. The Executive Director IT and Cybersecurity has over ten years of offensive and defensive cybersecurity experience with departments of the U.S. government, international alliances and small to large biopharmaceutical companies. Collectively, the members of our Cybersecurity Committee have notable experience in managing information security, possess the education and skills to fulfill these duties, and attend periodic trainings as necessary.