Company: SNSE
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0000950170-25-046338
Chunk: 8

Company: Sensei Biotherapeutics, Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1B
Chunk 8
---
Not applicable. 

Item 1C. Cybersecurity.  Risk Management and Strategy We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including clinical trial data, intellectual property, confidential information that is proprietary, strategic, financial or competitive in nature, and personal data.  Depending on the environment and system, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats, including, for example, periodic cybersecurity testing and cybersecurity awareness training for employees. We retain a third-party technology solutions firm (IT Firm) to help identify, assess and manage the Company’s cybersecurity threats and risks. The IT Firm reports to an employee who functions as our IT lead (IT Lead) and who works with our management team, including our Principal Financial Officer (PFO). Our IT Firm identifies and, in conjunction with our IT Lead, helps assess risks from cybersecurity threats by monitoring and evaluating our threat environment and risk profile using various methods and tools. We use third-party service providers, including cybersecurity consultants, to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example, to conduct risk assessments and identify potential risks. We use third-party service providers to perform a variety of functions throughout our business, including manufacturing our product candidates and assisting with R&D and clinical activities. Depending on the nature of the services provided, the sensitivity of the systems and data at issue, and the identity of the provider, our vendor contracting processes may include imposing certain contractual provisions related to privacy and cybersecurity.We have integrated our assessment and management of material risks from cybersecurity threats into our overall risk management systems and processes. For example, the results of such third-party cybersecurity assessments are shared with our senior management and the board’s audit committee for review, both of which evaluate our overall enterprise risk.