XML 28 R12.htm IDEA: XBRL DOCUMENT v3.25.3
Cybersecurity Risk Management and Strategy Disclosure
 12 Months Ended
Sep. 30, 2025
Cybersecurity Risk Management, Strategy, and Governance [Abstract]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

 

Risk management and strategy

 

We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our cloud networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and data related to our clinical trials and products.

 

We have processes designed to protect our information systems, data, assets, infrastructure, and computing environments from cybersecurity threats and risks. Our cybersecurity strategy includes the use of third-party IT professionals to assess the effectiveness of our cybersecurity practices for possible cybersecurity threats and to manage our IT systems to mitigate these threats. We also use multi-factor authentication, maintain logical, physical and technical controls designed to deter, prevent, mitigate and respond to cybersecurity threats. Further, we provide periodical cybersecurity reminders to our employees and subscribe to a third-party cybersecurity training program required for all employees, to emphasize the importance of adherence to our security policies and awareness of evolving cybersecurity threats. We also carry a separate cybersecurity commercial insurance policy covering the potential financial losses that may occur in the event we experience a cybersecurity incident.

 

Our assessment and management of material risks from cybersecurity threats are integrated into the Company’s overall risk management processes. We conduct organizational risk assessments commensurate with our size and complexity of our operations. We are in a continuous process of reviewing and implementing incremental information technology strategies to mitigate cybersecurity risks as new risks arise and as our operations evolve. This has led us to engage third party professionals to assist in the implementation of processes to manage these risks. We also use third-party service providers across a variety of functions throughout our business, such as application providers, hosting companies, contract research organizations, contract manufacturing organizations, distributors, and supply chain resources. We have a vendor management process to help manage cybersecurity risks associated with our use of certain of these providers. For certain vendors, these processes include a comprehensive vendor audit process.

 

 

As of the date of this Annual Report, we do not believe that any past cybersecurity incidents that have been detected have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition.

 

See “Risk Factors - Risks Related to Our Business and Operations” for additional information about the risks to our business associated with cybersecurity or a breach or compromise to our information security systems.

 

Governance

 

Our Board of Directors addresses the Company’s cybersecurity risk management as part of its general oversight function. The audit committee of the Board of Directors is responsible for overseeing the Company’s cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats. The audit committee receives periodic updates as required from senior management concerning updates to the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.

 

Currently we have two cybersecurity experts on our Audit Committee.
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block] Our assessment and management of material risks from cybersecurity threats are integrated into the Company’s overall risk management processes.
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] true
Cybersecurity Risk Board of Directors Oversight [Text Block]

Our Board of Directors addresses the Company’s cybersecurity risk management as part of its general oversight function. The audit committee of the Board of Directors is responsible for overseeing the Company’s cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats. The audit committee receives periodic updates as required from senior management concerning updates to the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.

 

Currently we have two cybersecurity experts on our Audit Committee.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] Our Board of Directors addresses the Company’s cybersecurity risk management as part of its general oversight function. The audit committee of the Board of Directors is responsible for overseeing the Company’s cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.
Cybersecurity Risk Role of Management [Text Block] The audit committee receives periodic updates as required from senior management concerning updates to the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] The audit committee of the Board of Directors is responsible for overseeing the Company’s cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true