Company: EDSA
Filing Date: 2025-12-12
Form Type: 10-K
Source: 0001171843-25-007914
Chunk: 302

Company: Edesa Biotech, Inc.
Filing Date: 2025-12-12
Form: 10-K
Item: Item 1A
Chunk 302
---
 and quantity of information processed and the identity of the service provider, we may also contractually impose certain security obligations on the provider.

Our executive leadership exerts operational oversight of our cybersecurity as part of our overall risk management function. We engage an expert IT and security provider to assist us with managing security risk and responding to cybersecurity threats or incidents. We have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business and utilize back-up and recovery systems where appropriate. We also use other technology-based tools that are designed to mitigate and detect cybersecurity risks. In addition, we provide our employees with cybersecurity training, including topics such as phishing, password protection and reporting cyber incidents.

Governance

Our Board oversees our risk management strategy with respect to cybersecurity threats. The Board, through its audit committee, holds regular meetings, at least quarterly, to discuss issues including our cybersecurity threats. The meetings involve presentations and reports from our executive leadership and security provider, concerning our cybersecurity risk management activities, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards. Management also notifies the audit committee of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as appropriate.

Material Effects of Cybersecurity Incidents

As of the date of this report, we have not identified any cybersecurity event or risks from cybersecurity threats that, individually or in the aggregate, would materially affect us. Notwithstanding, we, or third parties upon which we relay, may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us or our business strategy, results of operations or financial condition. For further information, refer to Section 1A, Risk Factors, for a discussion of risks related to cybersecurity and technology, including, without limitation, the risk factor under the heading “We rely significantly on information technology and any failure, inadequacy, interruption or security lapse of that technology, including any cybersecurity incidents, could harm our ability to operate our business effectively”

Item 2. PROPERTIES. 

We currently lease approximately 2,800 square feet of office space for our executive offices in Markham, Ontario, from 1968160 Ontario Inc., an entity affiliated with Dr. Nijhawan. Pursuant to the lease, as amended and extended on December 31, 2022, the term of the lease expired on December 31, 2024. The lease was subsequently extended to November 30, 2025 and thereafter, the arrangement continues