Company: CRNX
Filing Date: 2025-04-23
Form Type: DEF 14A
Source: 0000950170-25-057452
Chunk: 20

Company: Crinetics Pharmaceuticals, Inc.
Filing Date: 2025-04-23
Form: DEF 14A
Chunk 20
---
 the strategic direction for the company and the day-to-day leadership and performance of the company, while the chairperson of the board of directors provides guidance to the chief executive officer and presides over meetings of the full board of directors. We believe that this separation of responsibilities provides a balanced approach to managing the board of directors and overseeing the company.

Our board of directors has concluded that our current leadership structure is appropriate at this time. However, our board of directors will continue to periodically review our leadership structure and may make such changes in the future as it deems appropriate.

Role of Board in Risk Oversight Process

Our board of directors has responsibility for the oversight of the company’s risk management processes and, either as a whole or through its committees, regularly discusses with management our major risk exposures, their potential impact on our business and the steps we take to manage them. The risk oversight process includes receiving regular reports from board committees and members of senior management to enable our board of directors to understand the company’s risk identification, risk management and risk mitigation strategies with respect to areas of potential material risk, including operations, finance, legal, regulatory, strategic and reputational risk.

The audit committee reviews information regarding liquidity and operations and oversees our management of financial risks. Periodically, the audit committee reviews our policies with respect to risk assessment, risk management, loss prevention and regulatory compliance. Oversight by the audit committee includes direct communication with our external auditors, and discussions with management regarding significant risk exposures and the actions management has taken to limit, monitor or control such exposures. The Board, through the Audit Committee, oversees the management of risks from cybersecurity threats, including the policies, standards, processes and practices that the Company’s management implements to address risks from cybersecurity threats. The Audit Committee receives periodic presentations and reports on cybersecurity risks, which address a wide range of topics including, for example, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to the Company’s peers and third parties. The Audit Committee would also receive prompt and timely information regarding any cybersecurity incident that would meet the applicable established reporting thresholds, as well as ongoing updates regarding such incident until it has been addressed. At least twice each year, the Audit Committee discusses the Company’s approach to cybersecurity risk management with the Company’s Chief Operating Officer.

The compensation committee is responsible for assessing whether any of our compensation policies or programs has the potential to encourage excessive risk-taking. While each committee is responsible for evaluating certain risks and overseeing the management of such