XML 43 R30.htm IDEA: XBRL DOCUMENT v3.25.1
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Mar. 29, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]
We assess, identify and manage risks from cybersecurity threats through our global cybersecurity program. The program is managed by a full-time Chief Information Security Officer (“CISO”) whose organization manages our cybersecurity strategy, architecture, policies, standards and processes for the security of Haemonetics’ enterprise network and information assets. The CISO reports to our Chief Information Officer (“CIO”) and is supported by a dedicated security operations team. Our current CISO has over 20 years of information technology experience, including positions of increasing responsibility with respect to security architecture, software engineering, security operations and incident response.

The CISO’s organization monitors, manages and works to identify and assess, cybersecurity risks through various technologies, resources, processes and policies that are regularly updated to align with the changing threat landscape, our evolving business needs as well as global regulatory requirements. Our global cybersecurity program is aligned to the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework and is certified to the ISO 27001 global standard on Information Security Management. Our cybersecurity program is closely integrated with our QMS under the ISO 13485 standard. Our program utilizes layered defenses to help protect against cybersecurity threats and to work to secure our assets, reduce detection time and improve recoverability. Among other things, this includes ongoing systems monitoring with support from a managed detection and response service provider and other third-party vendors to augment our monitoring and response capabilities, as well as a standardized incident response program with incident response team members participating in regularly scheduled management reviews and tabletop exercises. Our CISO and CIO conduct regular cross-functional management reviews of our programs, including with members of senior leadership. All employees and those contractors of the Company with access to our information systems receive annual cybersecurity awareness training, and we have integrated cybersecurity and data protection topics into our Code of Conduct. All critical information systems have a written business continuity plan that is exercised at least annually. The entire program is audited annually by both internal and third-party auditors.
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block] We evaluate cybersecurity risk as part of our broader enterprise risk framework. Our Board of Directors oversees Haemonetics’ enterprise-wide approach to risk management while our management team is responsible for managing risk on a day-to-day basis and for bringing to the Board’s attention material risks facing the Company, including with respect to cybersecurity threats.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Board of Directors Oversight [Text Block] Our Board of Directors oversees Haemonetics’ enterprise-wide approach to risk management while our management team is responsible for managing risk on a day-to-day basis and for bringing to the Board’s attention material risks facing the Company, including with respect to cybersecurity threats. The Board focuses on the quality and scope of the Company’s risk management strategies and considers the most significant areas of risk inherent in the Company’s business strategies and operations as well as the steps that management is taking to mitigate those risks.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] Additionally, certain Board committees consider discrete categories of cybersecurity risk relating to their respective areas of responsibility. Our CISO reports at least annually on Haemonetics’ threat landscape and security programs to our Governance and Compliance Committee, which oversees Haemonetics’ compliance programs and policies regarding data privacy and cybersecurity risks associated with our information technology systems. Management also reports on these programs to the Audit Committee as needed and periodically reviews with our Technology Committee certain aspects of new and existing products as they relate to quality, safety and cybersecurity.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] ur CISO reports at least annually on Haemonetics’ threat landscape and security programs to our Governance and Compliance Committee, which oversees Haemonetics’ compliance programs and policies regarding data privacy and cybersecurity risks associated with our information technology systems. Management also reports on these programs to the Audit Committee as needed and periodically reviews with our Technology Committee certain aspects of new and existing products as they relate to quality, safety and cybersecurity.
Cybersecurity Risk Role of Management [Text Block] Our Board of Directors oversees Haemonetics’ enterprise-wide approach to risk management while our management team is responsible for managing risk on a day-to-day basis and for bringing to the Board’s attention material risks facing the Company, including with respect to cybersecurity threats. The Board focuses on the quality and scope of the Company’s risk management strategies and considers the most significant areas of risk inherent in the Company’s business strategies and operations as well as the steps that management is taking to mitigate those risks. We conduct an annual enterprise risk assessment – including consideration of cybersecurity risks – that is reviewed with the Board and Audit Committee and informs strategic priorities throughout the Company. Additionally, certain Board committees consider discrete categories of cybersecurity risk relating to their respective areas of responsibility. Our CISO reports at least annually on Haemonetics’ threat landscape and security programs to our Governance and Compliance Committee, which oversees Haemonetics’ compliance programs and policies regarding data privacy and cybersecurity risks associated with our information technology systems. Management also reports on these programs to the Audit Committee as needed and periodically reviews with our Technology Committee certain aspects of new and existing products as they relate to quality, safety and cybersecurity.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] The program is managed by a full-time Chief Information Security Officer (“CISO”) whose organization manages our cybersecurity strategy, architecture, policies, standards and processes for the security of Haemonetics’ enterprise network and information assets. The CISO reports to our Chief Information Officer (“CIO”) and is supported by a dedicated security operations team.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] Our current CISO has over 20 years of information technology experience, including positions of increasing responsibility with respect to security architecture, software engineering, security operations and incident response.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] Our CISO reports at least annually on Haemonetics’ threat landscape and security programs to our Governance and Compliance Committee, which oversees Haemonetics’ compliance programs and policies regarding data privacy and cybersecurity risks associated with our information technology systems. Management also reports on these programs to the Audit Committee as needed and periodically reviews with our Technology Committee certain aspects of new and existing products as they relate to quality, safety and cybersecurity.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true