Company: PACB
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0001299130-25-000061
Chunk: 459

Company: PACIFIC BIOSCIENCES OF CALIFORNIA, INC.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1A
Chunk 459
---
 with us and potential or current investors may elect to invest in other companies with ESG practices that are perceived to be better than ours. In addition, ESG reporting and disclosure may result in additional costs and require additional resources to monitor, report, and comply with our various ESG practices as well as additional attention from our board of directors and management. If we fail to adopt ESG standards or practices as quickly as stakeholders desire, report on our ESG efforts or practices accurately, or satisfy the expectations of stakeholders, or comply with applicable regulatory requirements, our reputation, business, financial performance, and growth may be adversely impacted.

ITEM 1B.  UNRESOLVED STAFF COMMENTS

None.

ITEM 1C.  CYBERSECURITY

Risk Management and Strategy

We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

Fiscal 2024 Form 10-K56

We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.Following these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. We devote resources and designate high-level personnel, including our Vice President and Head of Information Technology who reports to our Chief Operating Officer, to manage the risk assessment and mitigation process. As part of our overall risk management system, we monitor and test our safeguards, including through annual third-party vulnerability assessments. We train our employees on these safeguards, in collaboration with human resources, IT, and departmental management. Personnel at all levels and departments are made aware of our cybersecurity policies through training. We engage assessors, consultants, auditors, or other third parties in connection with our risk assessment processes. These service providers assist us in designing and implement our cybersecurity policies and procedures, as well as to monitor