XML 62 R9.htm IDEA: XBRL DOCUMENT v3.25.0.1
Cybersecurity Risk Management and Strategy Disclosure
 12 Months Ended
Dec. 31, 2024
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Risk Management and Strategy

 

We have certain processes in place to assess, identify and manage material cybersecurity risks. We also periodically monitor and test our information systems for potential vulnerabilities. We use various tools designed to help identify, investigate and resolve cybersecurity incidents, and to help recover from them in a timely manner. These processes, policies and tools comprise our cybersecurity risk program and are integrated into our overall risk management program.

 

We have implemented cybersecurity processes in accordance with our risk profile and business size and we are continually seeking to improve processes to enhance our risk management processes. Currently, we engage external resources that contribute to our existing cybersecurity practices and organizational risk assessment systems. For example, we have an employee training program that includes annual cybersecurity awareness training that is reinforced by approximately quarterly phishing campaigns.

 

In order to help protect us from any related cybersecurity vulnerabilities, we take a risk-based approach to the evaluation of third-party providers with whom we engage and apply mitigations and processes based on our evaluation of the sensitivity of the data accessed by the vendor and the maturity of the third-party service provider’s programs.

 

In fiscal 2024, and through the filing of this Annual Report on Form 10-K, we have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block] We have implemented cybersecurity processes in accordance with our risk profile and business size and we are continually seeking to improve processes to enhance our risk management processes. Currently, we engage external resources that contribute to our existing cybersecurity practices and organizational risk assessment systems. For example, we have an employee training program that includes annual cybersecurity awareness training that is reinforced by approximately quarterly phishing campaigns.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block] In fiscal 2024, and through the filing of this Annual Report on Form 10-K, we have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.
Cybersecurity Risk Board of Directors Oversight [Text Block]

Cybersecurity Governance

 

Our management team, including our Chief Financial Officer, and our external information technology service provider are responsible for assessing and managing our material risks from cybersecurity threats. We have outsourced implementation and day-to-day function of our overall cybersecurity risk management program to our third-party information technology service provider. Our management team supervises both our internal personnel and our third-party information technology service provider.

 

Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from the finance department or external information technology personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.

 

Our Board of Directors has delegated oversight of cybersecurity risk management to the Audit Committee. The Audit Committee reviews our major cybersecurity risk exposures and the steps that our management has taken to monitor and control such exposures. The Audit Committee receives periodic reports from management on our cybersecurity risks. In addition, management updates the Audit Committee, as necessary or appropriate, regarding any material cybersecurity incidents.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] Our Board of Directors has delegated oversight of cybersecurity risk management to the Audit Committee. The Audit Committee reviews our major cybersecurity risk exposures and the steps that our management has taken to monitor and control such exposures. The Audit Committee receives periodic reports from management on our cybersecurity risks. In addition, management updates the Audit Committee, as necessary or appropriate, regarding any material cybersecurity incidents.
Cybersecurity Risk Role of Management [Text Block] Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from the finance department or external information technology personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] Our management team, including our Chief Financial Officer, and our external information technology service provider are responsible for assessing and managing our material risks from cybersecurity threats. We have outsourced implementation and day-to-day function of our overall cybersecurity risk management program to our third-party information technology service provider. Our management team supervises both our internal personnel and our third-party information technology service provider.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true