Company: PSTV
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0000950170-25-047698
Chunk: 120

Company: PLUS THERAPEUTICS, INC.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1C
Chunk 120
---
 enhancements. Board OversightWhile the Board has overall responsibility for risk oversight, the Board delegated to the audit committee of the Board the responsibility for assisting the Board with cybersecurity disclosure matters. In its oversight role, the Board is expected to specifically consider risks that relate to the reputation of the Company and the general industry in which we operate, including with respect to privacy, information technology and cybersecurity and threats to technology infrastructure. On a regular basis, the CFO reports to the Board on cybersecurity matters, including key risks, the potential impact of those exposures on the Company’s business, financial results, operations and reputation and the programs and steps implemented by management to monitor and mitigate risks.   Cybersecurity RisksOur cybersecurity risk management processes are integrated into our overall approach to risk management. Given the nature and size of our Company, we do not have a dedicated enterprise risk function, but our executives regularly consider and evaluate risks to our Company. As part of that risk management process, members of our executive team identify, assess and evaluate risks impacting our operations across the Company, including those risks related to cybersecurity, and raise them for discussion with other executives, and where it is determined to be appropriate, issues are also raised to the Board for consideration.  As of the date of this report, we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations or financial condition or are reasonably likely to have such a material effect. While we have implemented a cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement adequate security measures. For additional information regarding risks relating to privacy and cybersecurity, see “Item 1A—Risk Factors.”