Company: ACHV
Filing Date: 2025-03-11
Form Type: 10-K
Source: 0000950170-25-036831
Chunk: 105

Company: ACHIEVE LIFE SCIENCES, INC.
Filing Date: 2025-03-11
Form: 10-K
Item: Item 1C
Chunk 105
---
, including our Senior Director of Information Technology who has served in various roles managing information technology and information security for over twenty-five years and reports directly to the Chief Financial Officer. Management is also responsible for hiring appropriate personnel, integrating cybersecurity considerations into our overall risk management strategy, and for communicating key priorities to employees, as well as for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.  Our cybersecurity incident response and vulnerability management processes involve management, who participates in our disclosure controls and procedures. Our cybersecurity incident response and vulnerability management processes are designed to escalate certain cybersecurity incidents and vulnerabilities to members of management depending on the circumstances, including work with the company’s incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, the company’s incident response processes include reporting to the Audit Committee for certain cybersecurity incidents.  Management is involved with our efforts to prevent, detect, and mitigate cybersecurity incidents by overseeing preparation of cybersecurity policies and procedures, testing of incident response plans, and engagement of vendors to conduct penetration tests. Management participates in cybersecurity incident response efforts by being a member of the incident response team and helping direct our response to cybersecurity incidents.