Company: GLPG
Filing Date: 2025-03-27
Form Type: 20-F
Source: 0001558370-25-003806
Chunk: 414

Company: GALAPAGOS NV
Filing Date: 2025-03-27
Form: 20-F
Item: Item 16K
Chunk 414
---
Cybersecurity Risk Management and Strategy

We have made significant efforts and investments to increase our cybersecurity posture. We currently maintain an information security risk management framework designed to protect the Company from risks from cybersecurity threats. This framework is informed by a security controls matrix that incorporates elements of an industry-standard cybersecurity framework. Our risk management framework operationalizes risk management principles designed to identify and assess upcoming risks, and assign the risks to risk owners with appropriate mitigation steps. We also conduct internal and external penetration testing and vulnerability assessments, and engage third-party cybersecurity experts to conduct periodic cybersecurity risk assessments.

We
are in the process of implementing a new enterprise risk management framework, tailored to the size and structure of the Company, to help us identify risks that should be reported/escalated to senior management. This new framework includes a risk forum that discusses changes in the risk environment, including key cybersecurity risks identified and managed by the IT Security function. The Head of IT Security is a standing member of the forum.