XML 26 R8.htm IDEA: XBRL DOCUMENT v3.25.0.1
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Dec. 31, 2024
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block] We rely on information technology and data to operate our business and develop, market, and deliver our products to our customers. We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to critical computer networks, third party hosted services, communications systems, hardware, manufacturing equipment and processes, lab equipment, software, and our critical data including confidential, personal, proprietary, financial and sensitive data. Accordingly, we maintain certain risk assessment processes intended to identify risks from cybersecurity threats, determine their likelihood of occurring, and assess potential material impact to our business.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block] We, like other companies in our industry, face a number of cybersecurity risks in connection with our business. Risks from cybersecurity threats have, to date, not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition; however, from time to time, we have experienced threats and security incidents relating to our and our third party vendors’ information systems. For additional information, please see the section captioned “Part I. Item 1A. Risk Factors” in this Annual Report on Form 10-K.
Cybersecurity Risk Board of Directors Oversight [Text Block]

Governance Related to Cybersecurity Risks

 

Our Vice President of Information Technology (“VP of IT”) is responsible for the direction of our information technology organization. Our VP of IT has over twenty-five years of cybersecurity and incident management experience. Our VP of IT is supported by a third-party virtual chief information security officer (“vCISO”) who also has over twenty-five years of cybersecurity experience. Our VP of IT, supported by our vCISO, assesses our cybersecurity risks through regular meetings with our IT team, and escalates cybersecurity matters as needed to management.

 

The role of the Board of Directors in our risk oversight process includes receiving reports from management and the chairs of Board committees on areas of material risk to our Company, including cybersecurity risks. The Board has delegated primary responsibility to the Audit Committee to review these matters. As established in the Audit Committee Charter, the Audit Committee oversees cybersecurity risks by reviewing reports, summaries and presentations on data management and security initiatives and significant existing and emerging cybersecurity risks. This includes material cybersecurity incidents, the impact to us and our stakeholders of any significant cybersecurity incident, and any disclosure obligations arising from any such incidents. Our VP of IT presents on risks from cybersecurity threats to the Audit Committee at least annually and to the full Board, as necessary.

Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] Our Vice President of Information Technology (“VP of IT”) is responsible for the direction of our information technology organization. Our VP of IT has over twenty-five years of cybersecurity and incident management experience. Our VP of IT is supported by a third-party virtual chief information security officer (“vCISO”) who also has over twenty-five years of cybersecurity experience. Our VP of IT, supported by our vCISO, assesses our cybersecurity risks through regular meetings with our IT team, and escalates cybersecurity matters as needed to management.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] The role of the Board of Directors in our risk oversight process includes receiving reports from management and the chairs of Board committees on areas of material risk to our Company, including cybersecurity risks. The Board has delegated primary responsibility to the Audit Committee to review these matters. As established in the Audit Committee Charter, the Audit Committee oversees cybersecurity risks by reviewing reports, summaries and presentations on data management and security initiatives and significant existing and emerging cybersecurity risks. This includes material cybersecurity incidents, the impact to us and our stakeholders of any significant cybersecurity incident, and any disclosure obligations arising from any such incidents. Our VP of IT presents on risks from cybersecurity threats to the Audit Committee at least annually and to the full Board, as necessary.
Cybersecurity Risk Role of Management [Text Block] The role of the Board of Directors in our risk oversight process includes receiving reports from management and the chairs of Board committees on areas of material risk to our Company, including cybersecurity risks. The Board has delegated primary responsibility to the Audit Committee to review these matters. As established in the Audit Committee Charter, the Audit Committee oversees cybersecurity risks by reviewing reports, summaries and presentations on data management and security initiatives and significant existing and emerging cybersecurity risks. This includes material cybersecurity incidents, the impact to us and our stakeholders of any significant cybersecurity incident, and any disclosure obligations arising from any such incidents. Our VP of IT presents on risks from cybersecurity threats to the Audit Committee at least annually and to the full Board, as necessary.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] The role of the Board of Directors in our risk oversight process includes receiving reports from management and the chairs of Board committees on areas of material risk to our Company, including cybersecurity risks. The Board has delegated primary responsibility to the Audit Committee to review these matters. As established in the Audit Committee Charter, the Audit Committee oversees cybersecurity risks by reviewing reports, summaries and presentations on data management and security initiatives and significant existing and emerging cybersecurity risks. This includes material cybersecurity incidents, the impact to us and our stakeholders of any significant cybersecurity incident, and any disclosure obligations arising from any such incidents. Our VP of IT presents on risks from cybersecurity threats to the Audit Committee at least annually and to the full Board, as necessary.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true