Qrons Inc. - (QRON)
10-K Filing Date: April 15, 2024
Risk management and strategy.
We recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to protect our information systems and protect the confidentiality, integrity, and availability of our data. Presently our information systems are limited to databases maintained by third parties. As a result we have established limited policies and procedures to assess, identify, and manage material risk from cybersecurity threats. We assess risks from cybersecurity threats against our third-party information systems that may result in adverse effects on our information systems or any information residing therein. We conduct periodic and ad-hoc assessments to identify cybersecurity threats. Presently we do not believe there are any material threats to our systems.
Following these risk assessments, if needed, we evaluate whether and/or how to re-design, implement, and maintain reasonable safeguards to mitigate identified risks and reasonably address any identified gaps in existing safeguards. We do not yet have an IT manager given our limited exposure to risks, and therefore the review of our limited systems is undertaken by our Chief Executive Officer (CEO) to manage the risk assessment and mitigation process. When applicable to our corporate structure and when we believe exposure to risks within our systems exceeds the current limited levels of exposure, we will monitor and test our safeguards and train our employees on the implementation of such safeguards, in collaboration with human resources, IT, and management, as available. We aim to promote a company-wide culture of cybersecurity risk management as we grow in size.
Risks from Cybersecurity Threats
We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing during the financial year ended December 31, 2023.
Governance
Our board of directors, also acting as our audit committee, is responsible for monitoring and assessing strategic risk exposure. Our board of directors administers its cybersecurity risk oversight function directly as a whole. Our CEO is responsible for assessing and managing our material risks from cybersecurity threats and conducts this assessment on a regular basis, or at least once per year.