Company: SCYX
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0000950170-25-038044
Chunk: 92

Company: SCYNEXIS INC
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1A
Chunk 92
---
 or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

In addition, our reliance on third-party service providers could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations.  We rely on third-party service providers and technologies to operate critical business systems to process confidential, proprietary, and sensitive data in a variety of contexts, including, without limitation, CROs, CMOs, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions.  We also rely on third-party service providers to provide other products, services, parts, or otherwise to operate our business.  Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place.  If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences.  While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award.  In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.

Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our confidential, proprietary, and sensitive data or our information technology systems, or those of the third parties upon whom we rely.  A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our services. 

We may expend significant resources or modify our business activities to try to protect against security incidents.  Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and confidential, proprietary, and sensitive data.

While we have implemented security measures designed to protect against security incidents, there can be