Company: GNMSF
Filing Date: 2025-02-12
Form Type: 20-F
Source: 0001558370-25-000846
Chunk: 164

Company: GENMAB A/S
Filing Date: 2025-02-12
Form: 20-F
Item: Item 16K
Chunk 164
---
 a cybersecurity crisis.
We haveintegratedinformation security risk management into our overall risk management infrastructure through our enterprise risk management program. The enterprise risk management program, which is overseen by our Global Compliance & Risk Committee (“ GCRC”), entails a formal process that seeks to identify, assess, mitigate and manage the risks from both internal and external conditions that could significantly impact the Company and influence our business strategy and performance.

Table of Contents

Role of Management

The
Global Head of Information Security and Information Technology Risk & Compliance Management
is
responsible
for information security within Genmab and reports to the Global Head of IT& D.
Our current Global Head of Information Security and Information Technology Risk & Compliance Management has more than 15 years of experience in leading global information and cyber security departments and programs, and our current Global Head of IT& D has more than 20 years of experience in leading, managing and transforming IT departments, in each case for large, global organizations.

The Global Head of Information Security and Information Technology Risk & Compliance Management reports the status of the Genmab information security program, security threats, incidents, and risks quarterly to the GCRC, chaired by Genmab’s CEO and the Senior Vice President, Head of Global Compliance and Risk, and in which members of our Executive Committee participate. The status of risk mitigation actions and newly identified risks are discussed during periodic meetings of the Information Technology Risk Governance Board, consisting of members of the IT& D Leadership Team and chaired by the Global Head of IT& D. Results of security assessments and periodic cyber threat landscape assessments may also be integrated in strategic reports to Genmab’s relevant business leaders and the GCRC when appropriate.

Role of the Board of Directors

The Board of Directors oversees our approach to overall risk management. The board has delegated oversight of information security strategy and risks to the Audit and Finance Committee. The Audit and Finance Committee is responsible for reviewing Genmab’s information security strategy and program, including with respect to identification and management of cybersecurity risks and threats. The Global Head of Information Security and IT Risk & Compliance Management presents an update on the status of the Genmab information security strategy and program, including strategic priorities, progress made in respect of those priorities and a review of cybersecurity incidents, risks, and threats to the Audit and Finance Committee at least annually. A summarymanagement report on the information security strategy, program, incidents, risks and threats is presented to the Board of Directorsperiodically and is supplemented by discussions between the Board of Directors and Audit and Finance Committee.