Company: KROS
Filing Date: 2025-11-05
Form Type: 10-Q
Source: 0001664710-25-000089
Chunk: 396

Company: Keros Therapeutics, Inc.
Filing Date: 2025-11-05
Form: 10-Q
Item: Item 8
Chunk 396
---
 consultants will continue to be available to us on a timely basis when needed, or that we can find qualified replacements. In addition, if we are unable to effectively manage our outsourced activities or if the quality or accuracy of the services provided by consultants is compromised for any reason, our clinical trials may be extended, delayed or terminated, and we may not be able to obtain marketing approval of KER-065, elritercept and our other product candidates or otherwise advance our business. We cannot assure you that we will be able to manage our existing consultants or find other competent outside contractors and consultants on economically reasonable terms, or at all. 

If we are not able to effectively expand our organization by hiring qualified new employees and expanding our groups of consultants and contractors, we may not be able to successfully implement the tasks necessary to further develop and commercialize KER-065, elritercept and our other product candidates and, accordingly, may not achieve our research, development and commercialization goals. 

If our internal computer systems, or those used by our contract research organizations, or other contractors or consultants with whom we work, fail, suffer security incidents, or are or were otherwise compromised, we could experience adverse consequences, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences. 

In the ordinary course of our business, we and the third parties with whom we work, collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit and share (collectively, process), proprietary, confidential and sensitive data, including personal data (such as health-related data), intellectual property and trade secrets (collectively, sensitive information). 

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such 

74

as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with