Company: PACB
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0001299130-25-000061
Chunk: 732

Company: PACIFIC BIOSCIENCES OF CALIFORNIA, INC.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1C
Chunk 732
---
ITEM 1C.  CYBERSECURITY

Risk Management and Strategy

We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

Fiscal 2024 Form 10-K56

Table of Contents

We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.Following these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. We devote resources and designate high-level personnel, including our Vice President and Head of Information Technology who reports to our Chief Operating Officer, to manage the risk assessment and mitigation process. As part of our overall risk management system, we monitor and test our safeguards, including through annual third-party vulnerability assessments. We train our employees on these safeguards, in collaboration with human resources, IT, and departmental management. Personnel at all levels and departments are made aware of our cybersecurity policies through training. We engage assessors, consultants, auditors, or other third parties in connection with our risk assessment processes. These service providers assist us in designing and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.We have established procedures to evaluate and respond to cybersecurity incidents, including cybersecurity incidents at third-party service providers which have a potential to impact our data and systems. Our cybersecurity risk management is intended to address such risks, as well as other risks related to third parties. We have not previously experienced a cybersecurity incident that was determined to be material. For additional information regarding whether any risks from cybersecurity threats are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, please refer to Item 1A, “Risk Factors,” in this Annual Report on Form 10-K.

Governance

One of the key functions of our board of