Company: INTS
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001567264-25-000010
Chunk: 194

Company: INTENSITY THERAPEUTICS, INC.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1C
Chunk 194
---
ITEM 1C. CYBERSECURITY

We recognize the critical importance of maintaining the trust and confidence of our business partners, such as CROs, clinical trial investigators, patients, employees, subcontractors and other vendors. We are committed to protecting the confidentiality, integrity and availability of our business operations and systems, and its board of directors is actively involved in oversight of our risk management activities, and cybersecurity represents an essential element of our overall approach to risk management. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional 

80

Table of Contents

approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents should they occur. Cybersecurity Risk Management and Strategy; Effect of RiskWe face risks related to cybersecurity, such as unauthorized access, cybersecurity attacks, phishing, and other security incidents, including perpetration by hackers and unintentional damage or disruption to hardware and software systems, loss of data, phony invoices, and misappropriation of confidential information. To identify and assess material risks from cybersecurity threats, we, together with our contracted third-party cybersecurity advisors, maintain a comprehensive cybersecurity program to ensure our systems are effective and prepared for information security risks, including regular oversight of our programs for security monitoring of internal and external threats to ensure the confidentiality and integrity of its information assets. We consider risks from cybersecurity threats alongside other company risks as part of our overall risk assessment process. As discussed in more detail under “Cybersecurity Governance” below, our board of directors provides oversight of our cybersecurity risk management and strategy processes, which are led by management.We, with assistance from our contracted third-party cybersecurity advisors, identifies, protects, and responds to our cybersecurity risks and incidents, through the following activities:•monitoring emerging data protection laws and implementing changes to processes that are designed to comply with such laws;•requiring employees, as well as third parties that provide services on our behalf, to treat confidential information and data with care;•employing technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, double verification software, and access controls;•performing backups of local hard drives and our financial systems in the cloud and on physical media that are stored off-site in locked locations;•providing mandatory training for our employees regarding cybersecurity threats; and•carrying information security risk insurance that provides protection against the potential losses