Company: PHAT
Filing Date: 2025-03-06
Form Type: 10-K
Source: 0000950170-25-034183
Chunk: 227

Company: Phathom Pharmaceuticals, Inc.
Filing Date: 2025-03-06
Form: 10-K
Item: Item 1B
Chunk 227
---
 any of our CROs, contract manufacturers, service providers, other contractors or consultants or potential future collaborators, may fail or suffer cybersecurity incidents or breaches, which could result in a material disruption of our product development programs.”Cybersecurity GovernanceOur Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee (Committee) oversight of cybersecurity risks, including oversight of management’s implementation of our cybersecurity risk management program. The Committee receives periodic reports from management on our cybersecurity risks. In addition, management is required to update the Committee where it deems appropriate, regarding any cybersecurity incidents it considers to be significant or potentially significant.The Committee reports to the full Board regarding its activities, including those related to cybersecurity. The full Board also receives briefings from management on our cyber risk management program.

101

Our information technology team, led by our Vice President of Information Technology, is responsible for managing and directing day-to-day assessment and management of materials risks from cybersecurity threats, including oversight of our cybersecurity tools, controls and strategies to protect organization assets, networks and data. The Vice President of Information Technology reports to our Chief Financial and Business Officer. The Vice President of Information Technology has primary responsibility for our overall cybersecurity risk management program and supervises both our internal IT personnel and our retained external cybersecurity consultants. The Vice President of Information Technology has over 25 years of experience in information technology. Our information technology team takes steps to stay informed about and monitor efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal IT personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in our internal IT environment. 

Item 2.	Properties

Our corporate offices are located in leased offices in Buffalo Grove, Illinois, and Florham Park, New Jersey. We believe that our facilities are adequate to meet our current needs, and that suitable additional alternative spaces will be available in the future on commercially reasonable terms, if required.

For additional information, see Note 4, Lease Commitments included in Item 15 of this Annual Report on Form 10-K. 

Item 3.	Legal Proceedings

We are not currently subject to any material legal proceedings. From time to time, we may be involved in legal proceedings or subject to claims incident to the ordinary course of business. Regardless of the outcome, such proceedings or claims can have an adverse impact on us because of defense and settlement costs