Company: KROS
Filing Date: 2025-04-23
Form Type: DEF 14A
Source: 0001104659-25-037982
Chunk: 25

Company: Keros Therapeutics, Inc.
Filing Date: 2025-04-23
Form: DEF 14A
Chunk 25
---
 meetings to be held during the year; and • performing such other functions as the Board may delegate. Role of the Board in Risk Oversight The Company is subject to a variety of risks, including those described under the section entitled “Risk Factors” in our Annual Report on Form 10-K for the year ended December 31, 2024. Some risks may be readily perceived and even quantified, while others are unexpected or unforeseeable. Risks can be external or can arise as a result of our internal business or financial activities. The Board and our executive management team work together to manage our risks. It is management’s responsibility to identify various risks facing the Company, bring the Board’s attention to material risks, and implement appropriate risk management policies and procedures to manage risk exposure on a day-to-day basis. The Board has an active role in overseeing our risk management process directly or through its committees. The Board does not have a standing risk management committee, but rather administers this oversight function directly through the Board as a whole, as well as through various Board standing committees that address risks inherent in their respective areas of oversight. The full Board has oversight and has been engaged concerning the monitoring and identification of risks to the Company. Risk assessment reports are periodically provided by management to the Board, and management regularly provides updates to the Board related to legal and compliance risks and cybersecurity initiatives, including our ability to respond to any cyber-attacks. The Board has delegated responsibility for the oversight of specific risks to the Board committees as follows: • Our Audit Committee oversees management of financial, accounting, operational, tax, privacy and cybersecurity and information technology risks. In addition to fulfilling its responsibilities for the oversight of our financial reporting processes and annual audit of the Company’s financial 14 TABLE OF CONTENTS statements, our Audit Committee also reviews with the Company’s independent registered public accounting firm and the Company’s management the adequacy and effectiveness of our policies and procedures to assess, monitor and manage fraud risk and our ethical compliance program. The Audit Committee is also responsible for reviewing with management and our auditors, as appropriate, our major financial risk exposures and the steps taken by management to monitor and control these exposures, and materials risks relating to data privacy, technology and information security, including cybersecurity, threats and back-up of information systems. Our Audit Committee takes appropriate actions to set the best practices and highest standards for quality financial reporting, sound business risk practices and ethical behavior. • Our Compensation Committee is responsible for overseeing the management of risks relating to our compensation policies and practices for all employees, including