Company: DAWN
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0000950170-25-026654
Chunk: 196

Company: Day One Biopharmaceuticals, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 196
---
 personal information and protected health information). It is critical that we do so in a secure manner to maintain the confidentiality, integrity and availability of such information. We depend on information technology and telecommunications systems for significant elements of our operations and we utilize, and expect to expand, a number of enterprise software systems that affect a broad range of business processes and functional areas, including, for example, systems handling human resources, financial reporting and controls, customer relationship management, regulatory compliance and other infrastructure operations. We face a number of risks relative to protecting this critical information, including loss of access risk, inappropriate use or disclosure, inappropriate modification and the risk of our being unable to adequately monitor, audit and modify our controls over our critical information. These risks extend to the third parties with whom we work, as we rely on a number of third parties to operate our critical business systems and process confidential, proprietary and sensitive information. 

Despite the implementation of security measures, given the size, complexity and increasing amounts of proprietary, confidential and sensitive information maintained by our internal information technology systems and those of our CROs, CMOs, vendors, contractors, consultants and other third-party partners are potentially vulnerable to breakdown, service interruptions, system malfunction, accidents by our personnel or third-party partners, natural disasters, terrorism, global pandemics, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our personnel or those of our CROs, CMOs, vendors, contractors, consultants, business partners and/or other third-party partners, or from cyber-attacks by malicious third parties (including through viruses, worms, malicious code, malware, ransomware, distributed denial-of-service attacks, social engineering and other means to affect service reliability and the confidentiality, integrity and 

78

availability of information), which may compromise our system infrastructure, or that of our CROs, CMOs, vendors, contractors, consultants and other third-party partners, or lead to data leakage. 

The risk of a security breach or disruption, particularly through cyber-attacks or cyber intrusion, including by computer hackers, viruses, foreign governments and cyber terrorists, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. We may not be able to anticipate all types of security threats, nor may we be able to implement preventive measures effective against all such security threats. The techniques used by cyber criminals change frequently, may not be recognized until launched and can originate from a wide variety of sources, including outside groups such