Company: GHRS
Filing Date: 2025-07-29
Form Type: 20-F/A
Source: 0001140361-25-027850
Chunk: 264

Company: GH Research PLC
Filing Date: 2025-07-29
Form: 20-F/A
Chunk 264
---
 in place in accordance with our 
 Constitution.                                                                                                                                                                                                                         |

| • | The Rule requiring a compensation committee consisting of at least two independent directors (Rule 5605(d)(2)). We have a compensation committee, which we refer to as the remuneration committee, and to preserve greater 
 flexibility over whom we may appoint to the remuneration committee, we instead follow Irish law which does not require us to have an independent compensation committee.                                                   |

| • | The Rule requiring a quorum of 331/3% at any meeting of shareholders (Rule 5620(c)). Instead, we follow the provisions of our Constitution which 
 require a quorum of 25%.                                                                                                                         |

See “Item 6. Directors, Senior Management and Employees” and “Item 10. Additional Information—B. Memorandum and Articles of Association” for further information. H. Mine Safety Disclosure Not applicable. I. Disclosure Regarding Foreign Jurisdictions That Prevent Inspections Not applicable. J. Insider Trading Policies Our Board of Directors has adoptedan insider trading policy applicable to our directors, officers, employees, and other covered persons, and have implemented processes for the company, that we believe are reasonably designed to promote compliance with applicable insider trading laws, rules and regulations and Nasdaq listing standards. Our insider trading policy is filed as Exhibit 11.1 to this Annual Report.

| K. | Cybersecurity |

Cybersecurity risk management is an integral part of our overall enterprise risk management strategy. As a young and rapidly growing company and given the ever-evolving nature of cybersecurity risks, we regularly review and seek to improve our strategies for addressing cybersecurity risks and threats. Our approach to cybersecurity risk management involves identifying, monitoring, assessing, and responding to cybersecurity threats and incidents, facilitating coordination across different departments of the Company, and escalating issues within management and to the Board of Directors, as appropriate. We engage a third-party IT service provider to assist us with implementation and operation of technical controls designed to identify, assess, manage and mitigate cybersecurity risks. This includes management of endpoints, patches, user access and incidents, as well as IT change management. Cybersecurity awareness training is also provided to employees on an ongoing basis. We also have processes in place to oversee and identify risks from cybersecurity threats associated with our use of third-party vendors and service providers. Management is responsible for identifying, assessing and managing material cybersecurity risks on an ongoing basis. Cybersecurity risk management is under the direction of our co-founder and Managing Director, Ireland who has maintained responsibility for IT and cybersecurity