Company: VRCA
Filing Date: 2025-03-11
Form Type: 10-K
Source: 0000950170-25-037172
Chunk: 209

Company: Verrica Pharmaceuticals Inc.
Filing Date: 2025-03-11
Form: 10-K
Item: Item 1C
Chunk 209
---
 as part of its general oversight function. The audit committee is responsible for overseeing our cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.  Our cybersecurity risk assessment and management processes are implemented and maintained by certain members of management, including our Interim Chief Financial Officer, who oversees outsourced IT (including cybersecurity).  Our cybersecurity function is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into our overall risk management strategy, and communicating key priorities to relevant personnel. Our Interim Chief Financial Officer is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports. Our response process to cybersecurity incidents is designed to escalate certain incidents to members of management depending on the circumstances, including the Interim Chief Financial Officer. Our Interim Chief Financial Officer and others work with our incident response team (including our MSSP) to help us mitigate and remediate cybersecurity incidents of which they are notified.  In addition, our incident response policy includes reporting certain cyber incidents to the audit committee.

74

The audit committee receives periodic reports from our cybersecurity function concerning our significant cybersecurity threats and risk and the processes we have implemented to address them.  The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.