Arcutis Report | Page 12

ARCUTIS
cybersecurity programme was not where it needed to be,” says Rajvir.
“ We had just become a public company. And in about a few months after my joining the organisation, we were also going to potentially become a commercial company.“
Arcutis was waiting for its first drug to get approved by the FDA, an achievement which fuelled a data-driven evaluation of its cybersecurity maturity.
“ We asked ourselves where we want to be in terms of that maturity level in the next 12 months, 24 months and then 36 months,” he says.
“ Based on those stakes in the ground we created a roadmap and a vision around how we would get to that aspirational state.”
Arcutis’ s operational principle of empowerment and accountability has factored strongly into its cybersecurity approach, which hinges on education.
“ We wanted to empower every individual within the organisation to be that human shield for us,” Rajvir explains.
“ We took a very user-centric approach, making sure that the tools, the people and the processes that we were selecting were going to work for our industry and our organisation.”
Arcutis’ s cyber security programme drives education on both the executive and wider organisational level. This education takes the form of tabletop exercises, consistent testing and training and continual preparation of incident response plans.
Another focus for the company is technology. Arcutis has invested in its technology stack and explored areas of possible optimisation, striving to expand this across the organisation.

“ Our first and perhaps most important operating principle is that the patient is paramount”

RAJVIR MADAN, CHIEF DIGITAL AND TECHNOLOGY OFFICER, ARCUTIS
Keeping pace with technological change Rajvir describes the biggest challenge of his role as staying abreast of technological change.
“ We want to make sure every technology decision is ultimately going to solve a real problem that one of our users, one of our stakeholders is experiencing, whether that’ s an internal stakeholder or for an external stakeholder,” he says.
“ Staying abreast of technological changes and understanding which
12 arcutis. com