Company: MLTX
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001821586-25-000006
Chunk: 139

Company: MoonLake Immunotherapeutics
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 139
---
Item 1C. Cybersecurity

In the ordinary course of our business, we collect, use, store, and transmit digitally large amounts of confidential, sensitive, proprietary, personal, and health-related information. The secure maintenance of this information and our information technology systems is important to our operations and business strategy. To this end, we have implemented processes designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein. These processes are managed and monitored by a dedicated information technology team, which is led by our Director of IT, and include mechanisms, controls, technologies, systems, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the data and maintain a stable information technology environment. For example, we perform daily vulnerability scans on our endpoints; we have a dedicated security operations center (“SOC”), which is run by a third-party; and we conduct data recovery testing, security audits, and ongoing risk assessments, including due diligence on our key vendors, CROs, and other contractors and suppliers. We also conduct regular employee trainings on cyber and information security, among other topics. In addition, we consult with outside advisors and experts, including our SOC, on a regular basis to assist with assessing, identifying, and managing cybersecurity risks, including to anticipate future threats and trends, and their impact on the Company’s risk environment. 

Our Associate Vice President of IT, who reports directly to the Chief Financial Officer and has over 10 years of experience managing information technology and cybersecurity matters and holds various EC-Council certifications including “Certified Chief Information Security Officer”, “Certified Ethical Hacker” and “Computer Hacking Forensic Investigator”, together with our senior leadership team, is responsible for assessing and managing cybersecurity risks. We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Since the beginning of the last fiscal year, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, but we face certain ongoing cybersecurity risks threats that, if realized, are reasonably likely to materially affect us.  Additional information on cybersecurity risks we face is discussed in Part I, Item 1A, “Risk Factors”, under the headings “A cybersecurity incident or failure in our information technology and storage systems or those of third parties upon whom we rely could significantly