0001434265
ifrs-full:OrdinarySharesMember
2024-01-01
2024-12-31
0001434265
gmab:AmericanDepositorySharesMember
2024-01-01
2024-12-31
0001434265
ifrs-full:OrdinarySharesMember
2024-12-31
0001434265
gmab:AmericanDepositorySharesMember
2024-12-31
0001434265
dei:BusinessContactMember
2024-01-01
2024-12-31
0001434265
2024-01-01
2024-12-31
shares
0001434265
2024
FY
false
20-F
false
true
2024-12-31
--12-31
false
false
001-38976
Genmab A/S
Carl Jacobsens Vej 30
2500 Valby
DK
Anthony Pagano
Carl Jacobsens Vej 30
2500 Valby
DK
45
7020 2728
American Depositary Shares, each representing one-tenth of one ordinary share
GMAB
NASDAQ
Ordinary shares, nominal value DKK 1 per share
GMAB
NASDAQ
66187186
62804560
Yes
No
Yes
Yes
Large Accelerated Filer
false
true
true
false
International Financial Reporting Standards
false
1294
true
<p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">Safeguarding the confidentiality, integrity, and availability of systems, data and applications as well as protecting trade secrets and data privacy is an essential pillar in ensuring the business continuity of Genmab, and complying with regulatory requirements, and maintaining the trust of our patients, employees, shareholders, partners, and other stakeholders. Genmab maintains a comprehensive cybersecurity program based on the National Institute of Standards and Technology’s NIST 800 Special Publication Information Security standard (“<b style="font-weight:bold;">NIST Standard</b>”) for managing cybersecurity activities, including formulation of global objectives of the cybersecurity program and risk identification and mitigation activities. </p><p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">Genmab’s Information Security Department, led by the Global Head of Information Security and Information Technology Risk & Compliance Management, is responsible for administering and annually updating our enterprise-wide information security program. The program includes activities and projects in all six functions (govern, identify, protect, detect, respond, recover) of the NIST standard with the goal of further improving Genmab’s security profile and adapting, where needed, to changes in Genmab’s business strategy and threat environment. Input for the program comes from the annual attack and penetration test, periodic threat landscape and security maturity assessments, as well as requirements of applicable cybersecurity regulations. The Information Security Department is also responsible for a number of global security processes and services that Genmab undertakes, such as the following: </p><table style="border-collapse:collapse;font-family:'Times New Roman','Times','serif';font-size:10pt;margin-bottom:12pt;margin-top:0pt;table-layout:fixed;width:100%;border:0pt;"><tr><td style="width:20.35pt;"></td><td style="font-family:'Times New Roman','Times','serif';font-size:10pt;vertical-align:text-top;white-space:nowrap;width:18pt;padding:0pt;">●</td><td style="padding:0pt;"><span style="font-family:'Times New Roman','Times','serif';font-size:10pt;font-style:normal;font-weight:normal;">proposing and administering information security policies and standards;</span></td></tr></table><table style="border-collapse:collapse;font-family:'Times New Roman','Times','serif';font-size:10pt;margin-bottom:12pt;margin-top:0pt;table-layout:fixed;width:100%;border:0pt;"><tr><td style="width:20.35pt;"></td><td style="font-family:'Times New Roman','Times','serif';font-size:10pt;vertical-align:text-top;white-space:nowrap;width:18pt;padding:0pt;">●</td><td style="padding:0pt;"><span style="font-family:'Times New Roman','Times','serif';font-size:10pt;font-style:normal;font-weight:normal;">security awareness training (including the administration of a third-party phishing learning platform, conducting periodic global security awareness events and preparing other learning materials);</span></td></tr></table><table style="border-collapse:collapse;font-family:'Times New Roman','Times','serif';font-size:10pt;margin-bottom:12pt;margin-top:0pt;table-layout:fixed;width:100%;border:0pt;"><tr><td style="width:20.35pt;"></td><td style="font-family:'Times New Roman','Times','serif';font-size:10pt;vertical-align:text-top;white-space:nowrap;width:18pt;padding:0pt;">●</td><td style="padding:0pt;"><span style="font-family:'Times New Roman','Times','serif';font-size:10pt;font-style:normal;font-weight:normal;">security risk assessment of new and existing vendors, partners and other third parties with respect to whom a security risk assessment is deemed appropriate;</span></td></tr></table><table style="border-collapse:collapse;font-family:'Times New Roman','Times','serif';font-size:10pt;margin-bottom:12pt;margin-top:0pt;table-layout:fixed;width:100%;border:0pt;"><tr><td style="width:20.35pt;"></td><td style="font-family:'Times New Roman','Times','serif';font-size:10pt;vertical-align:text-top;white-space:nowrap;width:18pt;padding:0pt;">●</td><td style="padding:0pt;"><span style="font-family:'Times New Roman','Times','serif';font-size:10pt;font-style:normal;font-weight:normal;">review of new contracts and assessment of the impact of new technologies on security;</span></td></tr></table><table style="border-collapse:collapse;font-family:'Times New Roman','Times','serif';font-size:10pt;margin-bottom:12pt;margin-top:0pt;table-layout:fixed;width:100%;border:0pt;"><tr><td style="width:20.35pt;"></td><td style="font-family:'Times New Roman','Times','serif';font-size:10pt;vertical-align:text-top;white-space:nowrap;width:18pt;padding:0pt;">●</td><td style="padding:0pt;"><span style="font-family:'Times New Roman','Times','serif';font-size:10pt;font-style:normal;font-weight:normal;">security incident detection and management;</span></td></tr></table><table style="border-collapse:collapse;font-family:'Times New Roman','Times','serif';font-size:10pt;margin-bottom:0pt;margin-top:0pt;table-layout:fixed;width:100%;border:0pt;"><tr><td style="width:20.35pt;"></td><td style="font-family:'Times New Roman','Times','serif';font-size:10pt;vertical-align:text-top;white-space:nowrap;width:18pt;padding:0pt;">●</td><td style="padding:0pt;"><span style="font-family:'Times New Roman','Times','serif';font-size:10pt;font-style:normal;font-weight:normal;">periodic operational security incident exercises, and vulnerability scanning. </span></td></tr></table><div style="margin-top:12pt;"></div><p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">We work with consultants and other third-party advisors to perform security services and conduct security assessments and independent audits of the security and resilience of our systems and networks. We have also established a cyber response task force consisting of leaders from Finance, Legal, Compliance, Communications, and Information Technology & Digital (“<b style="font-weight:bold;">IT&D</b>”) departments. The task force is responsible for cybersecurity crisis preparedness and the management of cybersecurity crisis situations. This task force regularly leads scenario exercises, which include engagement of all levels of management including members of Genmab’s Executive Committee, to assess Genmab’s resilience capabilities in the event of a cybersecurity crisis.</p><p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">We have integrated information security risk management into our overall risk management infrastructure through our enterprise risk management program. The enterprise risk management program, which is overseen by our Global Compliance & Risk Committee (“<b style="font-weight:bold;">GCRC</b>”), entails a formal process that seeks to identify, assess, mitigate and manage the risks from both internal and external conditions that could significantly impact the Company and influence our business strategy and performance.</p>
true
true
<p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">We have integrated information security risk management into our overall risk management infrastructure through our enterprise risk management program. The enterprise risk management program, which is overseen by our Global Compliance & Risk Committee (“<b style="font-weight:bold;">GCRC</b>”), entails a formal process that seeks to identify, assess, mitigate and manage the risks from both internal and external conditions that could significantly impact the Company and influence our business strategy and performance.</p>
true
<p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">The Global Head of Information Security and Information Technology Risk & Compliance Management is responsible for information security within Genmab and reports to the Global Head of IT&D. Our current Global Head of Information Security and Information Technology Risk & Compliance Management has more than 15 years of experience in leading global information and cyber security departments and programs, and our current Global Head of IT&D has more than 20 years of experience in leading, managing and transforming IT departments, in each case for large, global organizations. </p><p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">The Global Head of Information Security and Information Technology Risk & Compliance Management reports the status of the Genmab information security program, security threats, incidents, and risks quarterly to the GCRC, chaired by Genmab’s CEO and the Senior Vice President, Head of Global Compliance and Risk, and in which members of our Executive Committee participate. The status of risk mitigation actions and newly identified risks are discussed during periodic meetings of the Information Technology Risk Governance Board, consisting of members of the IT&D Leadership Team and chaired by the Global Head of IT&D. Results of security assessments and periodic cyber threat landscape assessments may also be integrated in strategic reports to Genmab’s relevant business leaders and the GCRC when appropriate.</p>
The Global Head of Information Security and Information Technology Risk & Compliance Management is responsible for information security within Genmab and reports to the Global Head of IT&D. Our current Global Head of Information Security and Information Technology Risk & Compliance Management has more than 15 years of experience in leading global information and cyber security departments and programs, and our current Global Head of IT&D has more than 20 years of experience in leading, managing and transforming IT departments, in each case for large, global organizations.
The Global Head of Information Security and Information Technology Risk & Compliance Management
Global Head of Information Security and Information Technology Risk & Compliance Management
true
Our current Global Head of Information Security and Information Technology Risk & Compliance Management has more than 15 years of experience in leading global information and cyber security departments and programs, and our current Global Head of IT&D has more than 20 years of experience in leading, managing and transforming IT departments, in each case for large, global organizations.
<p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">The Global Head of Information Security and Information Technology Risk & Compliance Management reports the status of the Genmab information security program, security threats, incidents, and risks quarterly to the GCRC, chaired by Genmab’s CEO and the Senior Vice President, Head of Global Compliance and Risk, and in which members of our Executive Committee participate. The status of risk mitigation actions and newly identified risks are discussed during periodic meetings of the Information Technology Risk Governance Board, consisting of members of the IT&D Leadership Team and chaired by the Global Head of IT&D. Results of security assessments and periodic cyber threat landscape assessments may also be integrated in strategic reports to Genmab’s relevant business leaders and the GCRC when appropriate.</p>
<p style="font-family:'Times New Roman','Times','serif';font-size:10pt;text-indent:18pt;margin:0pt 0pt 12pt 0pt;">The Board of Directors oversees our approach to overall risk management. The board has delegated oversight of information security strategy and risks to the Audit and Finance Committee. The Audit and Finance Committee is responsible for reviewing Genmab’s information security strategy and program, including with respect to identification and management of cybersecurity risks and threats. The Global Head of Information Security and IT Risk & Compliance Management presents an update on the status of the Genmab information security strategy and program, including strategic priorities, progress made in respect of those priorities and a review of cybersecurity incidents, risks, and threats to the Audit and Finance Committee at least annually. A summary management report on the information security strategy, program, incidents, risks and threats is presented to the Board of Directors periodically and is supplemented by discussions between the Board of Directors and Audit and Finance Committee.</p>
true
Deloitte Statsautoriseret Revisionspartnerselskab
Copenhagen, Denmark