Company: PTPI
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001410578-25-000579
Chunk: 13

Company: Petros Pharmaceuticals, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1C
Chunk 13
---
ITEM 1C. CYBERSECURITY

We operate in the pharmaceutical industry, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including: intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect customers’, employees’, and vendors’ information and prevent data loss and other security breaches, including a cybersecurity risk assessment program. Both management and the Board of Directors are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

Members of our executive management team are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. The individuals currently serving in these roles are our President and Chief Commercial Officer and our Vice President, Finance and Chief Accounting Officer. The executive management team monitors current events in order to remain aware of current cybersecurity threats. The executive management team is informed and alerted by our information technology (“IT”) consultant and our frontline personnel of any specific incidents, in addition to cybersecurity risks. Our executive management will inform our Board of Directors of cybersecurity incidents if and when they may arise. Additionally, the Board considers risks from cybersecurity threats as part of its holistic assessment of the risks facing our business.

Our current cybersecurity risk assessment program consists of processes designed to assess, identify and manage cybersecurity risks, including the use of anti-virus software, multi-factor authentication and risky/suspicious log-in monitoring. We leverage the advice of third-party consultants, including our IT consultant, to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers advise on best practices for safeguarding company data.We also have policies and procedures to oversee and identify the risks from cybersecurity threats associated with our use of third-party service providers. Our third-party service providers provide us with SOC-1 reports, which document their internal controls, on a regular basis. Our executive management team reviews these reports as part of its assessment of the effectiveness of our internal control over financial reporting. We use such reports to assess and mitigate the risks associated with the use of third-party providers.