XML 24 R9.htm IDEA: XBRL DOCUMENT v3.25.2
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Jun. 30, 2025
Cybersecurity Risk Management, Strategy, and Governance [Abstract]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Risk Management and Strategy

 

Our Cybersecurity Risk Management Strategy includes a myriad of tools and resources that are designed to ensure the integrity of our information systems. We place particular emphasis on protecting the privacy of our patient data pursuant to the HIPAA Security Rule. Our cybersecurity risk management process is integrated with our larger risk management system and is considered a core function of our overall risk management strategy.

 

Our strategy is based around identification, mitigation, avoidance and response to material cybersecurity risks. We employ physical and electronic safeguards to control access to our systems. We employ additional electronic safeguards to control/limit access to the data contained in those systems. We review and re-assess these processes on a rolling basis with the assistance of both internal staff and outside vendors, including assessors, consultants, auditors, and other third parties. Some steps we take include the use of standard security protocols such as password maintenance, multi-factor identification, and penetration testing. We take other steps as may be situationally appropriate for the specific risk presented.

 

For the fiscal year ended June 30, 2025, management has identified a material weakness in our internal controls over our information technology systems, as described in greater detail in Item 9A. In response, we have taken several steps to enhance our cybersecurity efforts. Those steps include increasing the scope of our Multi-Factor Authentication requirement to include additional tertiary information systems, improving password security, upgrading our anti-virus software, upgrading our threat detection tools, implementing additional threat detection tools, and replacing and/or decommissioning hardware that has known vulnerabilities.

 

We require all of our employees to receive cybersecurity training as part of their initial onboarding process, and employees are required to complete additional training throughout the year.

 

We evaluate all of our vendors and third-party partners for material cybersecurity risks and take steps to mitigate risk through insurance and contractual risk transfer provisions when appropriate. Our Information Technology department works collaboratively with our third-party vendors to coordinate a mutually beneficial approach to cybersecurity in the specific context in which risk is presented. These collaborations sometimes take place on a rolling basis, and sometimes take place on a semi-annual or annual basis.

 

Cybersecurity threats, including previous cybersecurity incidents, have not materially affected our results of operations or financial condition. However, cybersecurity threats have the potential to significantly impair our operations and the operations of the various third parties upon whom we rely.

 

Governance

 

The audit committee of our Board of Directors provides oversight of cybersecurity risks. It receives regular reports from management, including our General Counsel, on various cybersecurity matters during each board meeting. Such reports include information on current cybersecurity risks facing the organization, cybersecurity incidents involving our partners and/or other participants in our industry, and routine updates on the status of our internal cybersecurity risk management plan.

 

Our General Counsel oversees and manages our cybersecurity program. Our General Counsel acts as the coordinator of our cybersecurity team, which includes representatives from our Information Technology department and Compliance department. In addition, he regularly interacts with various department heads from both our New York and Florida regions regarding the prevention, detection, mitigation and remediation of cybersecurity risks. Our General Counsel has an educational background in computer science and has relevant work experience in cybersecurity insurance and risk management.

Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block] Cybersecurity threats, including previous cybersecurity incidents, have not materially affected our results of operations or financial condition. However, cybersecurity threats have the potential to significantly impair our operations and the operations of the various third parties upon whom we rely.
Cybersecurity Risk Board of Directors Oversight [Text Block]

Governance

 

The audit committee of our Board of Directors provides oversight of cybersecurity risks. It receives regular reports from management, including our General Counsel, on various cybersecurity matters during each board meeting. Such reports include information on current cybersecurity risks facing the organization, cybersecurity incidents involving our partners and/or other participants in our industry, and routine updates on the status of our internal cybersecurity risk management plan.

 

Our General Counsel oversees and manages our cybersecurity program. Our General Counsel acts as the coordinator of our cybersecurity team, which includes representatives from our Information Technology department and Compliance department. In addition, he regularly interacts with various department heads from both our New York and Florida regions regarding the prevention, detection, mitigation and remediation of cybersecurity risks. Our General Counsel has an educational background in computer science and has relevant work experience in cybersecurity insurance and risk management.

Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] The audit committee of our Board of Directors provides oversight of cybersecurity risks.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true