Company: KROS
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001664710-25-000018
Chunk: 321

Company: Keros Therapeutics, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 321
---
 and cybersecurity. These individuals are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to our audit committee on any appropriate items.

Our Head of IT is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company’s overall risk management strategy, and communicating key priorities to relevant personnel. Our Chief Financial Officer is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports. 

Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including our Chief Financial Officer, Chief Operating Officer, General Counsel and Head of Human Resources. Incidents are evaluated to determine materiality as well as operational and business impact, and reviewed for privacy impact. Our Head of IT works with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to our audit committee for certain cybersecurity incidents. 

94