text: time to time, the Company is subject to attempted cyber-attacks and other cybersecurity risks. The nature of our business requires that we store and exchange electronically with appropriate parties and systems personally identifiable information that may be targeted in an attempted cybersecurity breach. In addition, our business is heavily reliant on various information technology and application systems that may be impacted by a malicious cyber-attack. These cyber incidents may cause lost revenues or increased expenses stemming from reputational damage and fines related to breach of personally identifiable information, inability to use certain systems for a period of time, loss of financial assets, remediation and litigation costs and increased cybersecurity protection costs. We have developed and continue to invest in a variety of controls to prevent, detect and appropriately react to such cyber-attacks including periodically testing our systems' security and access controls. However, cybersecurity risks continue to become more complex and broad ranging, and our internal controls provide only a reasonable, not absolute, assurance that we will be able to protect ourselves from significant cyber-attack incidents.

companyName: Unique Logistics International, Inc.


text: By outsourcing certain business and administrative functions to third parties, we may be exposed to an enhanced risk of data security breaches. Any breach of data security could damage our reputation and/or result in monetary damages, which, in turn, could have a material adverse effect on the Company's results of operations, liquidity and financial condition.

secItem: Item 1C


text: Company maintains an Enterprise Risk Management ("ERM") program, which includes processes for key risk identification, mitigation efforts, and day-to-day management of risks, including cybersecurity risks. The ERM program is administered by our risk management committee, consisting of the Company's Chief Executive Officer, Chief Financial Officer, and Vice President, Compliance & Risk Management, and involves our outsourced global cybersecurity team, which possesses significant knowledge and expertise in cybersecurity risks.


text: global cybersecurity team ensures that the cybersecurity risks identified through the ERM program are incorporated into our overall cybersecurity program. We have put into place programs to address key cybersecurity risks including layered coverage with focus areas and practices designed to address network and endpoint security, application security, and security operations. We have processes in place to oversee and identify risks from cybersecurity threats associated with the use of third-party technology including third-party risk management, process and partner intake risk assessments, and dedicated procurement functions. These processes help mitigate the risks associated with utilizing external technology platforms and help prevent disruptions to our business operations. consistently involve our external cybersecurity experts to assess our cybersecurity program, risk management, and relevant internal controls. Although we have not experienced a material cyber-attack, we maintain insurance coverage to specifically address cybersecurity risks.


text: The coverage provides protection up to $1 million above a deductible of $50,000 for various cybersecurity risks including liability, business interruptions, cybercrimes and privacy breach related incidents.


text: business continuity program follows industry standards for disaster recovery practices. Our program includes multiple components that act as an additional line of defense among them are regular functional recovery and tabletop exercises; cybersecurity exercises; protected backups for critical data; recovery time objectives; and recovery point objectives including achievability metrics, application criticality, program audit and maintenance, awareness and training, business impact analysis, and risk evaluation and controls. Board of Directors is tasked with oversight of the Company's cybersecurity, information governance, and privacy programs.


text: tasks related to assessing and managing the Company's material risks from cybersecurity threats are delegated to the risk management committee that oversees our ERM program, which includes cyber-related risk items. In addition, our risk management committee receives quarterly reports on cybersecurity from our global cybersecurity team that has experience and expertise supporting mitigation of the potential cybersecurity threats facing our organization and vulnerabilities facing our technology infrastructure and potential cybersecurity threats. members of our management team have been provided sufficient training to obtain an understanding of cybersecurity risks and exposures.


text: The management team is actively promoting the Company's cybersecurity policies and procedures, and leading discussions and mitigations of cybersecurity risks in the areas of their responsibilities.


text: Company recognizes the increasing importance of cybersecurity in today's digital environment. As a company without active business operations, our current cybersecurity risks are primarily associated with the protection of sensitive company data, including intellectual property and personal information of our personnel and stockholders.

companyName: NEXIEN BIOPHARMA, INC.

ticker: NXEN


text: Company has implemented basic cybersecurity measures designed to protect our digital infrastructure and data integrity. These measures include secure data storage solutions, the use of firewalls and antivirus software, and access controls to limit the exposure of sensitive are committed to continually assessing our cybersecurity posture and adapting our strategies to mitigate potential cyber threats. This includes staying informed on the latest cybersecurity trends and threats, as well as best practices for protection.


text: is important to note that while we strive to protect our digital assets, no cybersecurity measures can guarantee absolute security against all potential cyber incidents. In the event of a cybersecurity breach, the Company is prepared to take appropriate actions to address the incident, mitigate its impact, and comply with applicable regulatory requirements regarding breach notification and reporting.


text: we advance our business operations, we recognize that our cybersecurity needs may evolve. The Company plans to enhance its cybersecurity measures in line with its business growth and the increasing complexity of cyber threats. This may involve implementing more advanced cybersecurity technologies, engaging external cybersecurity expertise, and developing comprehensive incident response plans.


text: Company's board of directors oversees our cybersecurity strategy and risk management, ensuring that cybersecurity remains a priority as our company evolves. We believe that a proactive and adaptive approach to cybersecurity is essential to safeguard our company's assets, reputation, and the trust of our stockholders.


text: Assessment and Strategy regularly evaluate cybersecurity risk from computer viruses and more sophisticated and targeted cyber-related attacks such as ransomware, as well as cybersecurity failures resulting from human error and technological errors. Such risks are reviewed by our management on a periodic basis as deemed appropriate.

companyName: VIVIC CORP.

ticker: VIVC


text: overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: use of antivirus software, virtual private networks, email security, as well as other software to prevent and detect data intrusions.


text: deployment of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure the use of third-party service to conduct mandatory online training for all employees regarding identifying and avoiding cyber-security the review of the security procedures used by third parties that may host or otherwise have access to Fuel Tech's data.


text: deployment of third-party cyber-security experts to perform penetration testing on our internal and external networks and systems necessary, the use of third-party security experts if and when an incident is detected are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect, our business strategy, results of operations or financial conditions. For more information, please see "Cybersecurity" under Item 1A "Risk Factors" above.


text: the Board of Directors has yet to establish any committees, Management regularly updates our Board regarding Management's efforts to minimize cybersecurity risks.


text: are currently a shell company with no business operations. Since May 2019, we have been in search of a suitable merger or acquisition candidate. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board of Directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any.

companyName: NON INVASIVE MONITORING SYSTEMS INC /FL/

ticker: NIMU


text: the Company consistently evaluates risks from cybersecurity threats, monitors its information systems for potential vulnerabilities, and tests these systems according to its cybersecurity policies, standards, processes, and practices. These measures are integrated into the Company's overall risk management system to protect its information systems from cybersecurity threats. The Company also has the option to engage a third-party contractor if a cyber threat arises.


text: Company depends on the proper functioning, availability and security of its information systems, including financial, data processing, communications and operating systems. Several information systems are software applications provided by third parties. Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, like other companies in our industry, we could, from time to time, experience threats and security incidents related to our and our third-party vendors' information systems, including attempts to gain unauthorized access to our confidential data, and other electronic security breaches. Such cybersecurity attacks can range from individual attempts to gain unauthorized access to our information technology systems to more sophisticated security threats. While we employ a number of measures to prevent, detect and mitigate these threats, there is no guarantee such efforts will be successful in preventing a cybersecurity attack. A cybersecurity attack could compromise the confidential information of our employees, tenants and vendors. A successful cybersecurity attack could disrupt and otherwise adversely affect our business operations.

companyName: BriaCell Therapeutics Corp.

ticker: BCTX


text: identification and management of cybersecurity related risks are integrated into our overall risk management process. To the extent our processes identify a heightened cybersecurity related risk, risk owners are assigned to develop risk mitigation plans, which are then tracked to completion.


text: Board of Directors considers cybersecurity risk as part of its risk oversight function and has delegated oversight of cybersecurity risk strategy and governance and of other information technology risks to the Audit Committee of the Board of Directors (the "Audit Committee"). The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity.


text: Senior management, including the Company's Chief Executive Officer and Chief Financial Officer are responsible for assessing and managing cybersecurity risk, and providing briefings regarding the assessment and management of such risk to the Audit Committee, which then reports, as necessary, to the Board of Directors. Although members of our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with a third party information technology expert referred to below, enables them to effectively assess and manage material risks from cybersecurity threats.


text: Company retained an information technology expert third party company to assist in managing relevant risks. In particular, the Company outsources its information technology function and monitoring to a third party provider whereby it benefits from a professionally managed network monitoring, management, maintenance, detection and response system and a 24/7 security operations center with both onsite and remote support services. Any cybersecurity incident would be reported to the Company promptly by our third party consultant and material and potentially material incidents would be assessed by management and the Audit Committee for remediation and future prevention and detection.


text: Company, at least annually, updates its policies or procedures that could help mitigate cybersecurity risks. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. The Company has incorporated cybersecurity coverage in its insurance policies; however, there is no assurance that the insurance the Company maintains will cover all cybersecurity breaches or that policy limits will be sufficient to cover all related losses.


text: We have updated our comprehensive cybersecurity and data protection policies and procedures to address any cybersecurity risks. Our cybersecurity risks, and the controls designed to mitigate those risks, are integrated into our overall risk management governance.

companyName: PURE BIOSCIENCE, INC.

ticker: PURE


text: Risk Management and Strategy As of July 31, 2024, we have implemented the following set of comprehensive cybersecurity and data protection policies and procedures. Our employees and contractors receive regular cybersecurity awareness trainings, including specific topics related to social engineering and email frauds. We have capable employees and consultants with significant expertise and certifications in cybersecurity related to our industry. We invest in advanced technologies for continuous cybersecurity monitoring across our information technology environment which are designed to prevent, detect, and minimize cybersecurity attacks, as well as alert management of such attacks.


text: Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with the Head of IT who reports to our Vice President of Finance, to manage the risk assessment and mitigation process.


text: We also engage other consultants, and other third parties in connection with our risk assessment and mitigation processes. These service providers assist with the design and implementation of our cybersecurity policies and procedures, as well as monitor and test our safeguards.


text: Our Board of Directors and Audit Committee are responsible for overseeing our cyber security risk management and strategy. Our Vice President of Finance provides periodic briefings to the Audit Committee including our cybersecurity risks and activities, any potential cybersecurity incidents and related responses, cybersecurity systems testing and, activities of third parties.


text: Cybersecurity Threat Disclosure To date, we are not aware of any cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company.


text: SEC mandates through Item 106 of Regulation S-K that public companies, such as Blue Chip Capital Group, Inc. must acknowledge the financial implications of cybersecurity risks in their disclosures. This requirement stems from the understanding that cyber incidents can lead to significant material costs, affecting a company's financial condition and, consequently, its investors. The Company believes that at this stage of its development, with no active operations being conducted other than start-up activities principally related to the Raisewise subsidiaries' initial compliance with registration and regulatory protocols, it is not exposed to cybersecurity risks.

companyName: Blue Chip Capital Group Inc.


text: If and when it completes its acquisition of U.S. Petrochemical Industries, Inc., a supplier of raw materials to the Petrochemical industry globally in over 30 countries and has several international offices, the Company intends to engage professional cybersecurity professionals to assess the related risks and make full regulatory mandated disclosure in its SEC filings under the Exchange Act.


text: do not currently engage in any business activities that provide revenue or cash flow. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk.

companyName: LEGACY VENTURES INTERNATIONAL INC.

ticker: LGYV


text: Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. We have not encountered any cybersecurity incidents.


text: Oilseeds manages cybersecurity and data protection through a continuously evolving framework, as described in further detail below. The framework allows us to identify, assess and mitigate the risks we face, and assists us in establishing policies and safeguards to protect our systems and the information of those we serve. We employ an array of data security technologies, processes, and methods across our infrastructure to protect systems and sensitive information from unauthorized access. The Audit Committee of the Board of Directors has oversight of our cybersecurity program and is responsible for reviewing and assessing the Company's cybersecurity and data protection policies, procedures and resource commitment, including key risk areas and mitigation strategies. As part of this process, the Audit Committee receives regular updates from the management team on critical issues related to our information security risks, cybersecurity strategy, supplier risk and business continuity capabilities. The Company's framework includes an incident management and response program that continuously monitors the Company's information systems for vulnerabilities, threats and incidents; manages and takes action to contain incidents that occur; remediates vulnerabilities; and communicates the details of threats and incidents to management. Pursuant to the Company's incident response plan, any incidents are to be reported by the management team to the Audit Committee, appropriate government agencies and other authorities, as deemed necessary or appropriate, considering the actual or potential impact, significance and scope. The Company is not aware of any previous cybersecurity incidents or threats that are reasonably likely to materially affect its business strategy, results of operations, or financial condition. For the fiscal year ended June 30, 2024, we did not identify any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.

companyName: Australian Oilseeds Holdings Ltd

ticker: COOT


text: cybersecurity program focuses on all areas of our business, including cloud-based environments, devices used by employees and contractors, facilities, networks, applications, vendors, disaster recovery / business continuity and controls and safeguards enabled through business processes and tools. We continuously monitor for threats and unauthorized access. We also provide various training programs and tools to employees so they can avoid risky practices and help us promptly identify potential or actual issues and have incident response procedures, service tools to log incidents and issues for investigation, and to follow up on matters already reported.


text: acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: INNO HOLDINGS INC.

ticker: INHD


text: a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.


text: our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.


text: are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.


text: our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats.


text: a discussion of potential cybersecurity risks affecting us, please refer to the "Risk Factors" section of our Registration Statement on Form S-1 filed with the Securities and Exchange Commission on October 20, 2023 titled " Our systems and information technology infrastructure may be subject to security breaches and other cybersecurity incidents. "


text: recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team works closely with our IT team to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs and we provide ongoing education and training to our employees to understand and recognize cybersecurity risks.

companyName: Loop Media, Inc.

ticker: LTPVQ


text: current cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats. We have security measures in place to protect our clients, customers, employees, and vendor information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a cybersecurity incident by the administering of have multiple controls and processes in place in order to assess risks and to prevent breaches, some of which include: subscribing to a cybersecurity risk management program;


text: an Email Banner for external emails, which assists us in identifying any phishing / impersonation firewall appliances with a security suite; endpoint security software for our team and utilizing Cloudflare for protecting and securing our cloud environments.


text: senior management and our Board of Directors are aware of the critical nature of managing risks associated with cybersecurity threats.


text: Our CEO is responsible for overseeing our business operations, which includes working with our IT personnel to oversee the day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity threats to our Company. Our executive management team is responsible for updating the Board, as necessary, regarding any significant cybersecurity incidents, should any occur. Our Board may also receive periodic reports from management on our cybersecurity risks and cybersecurity risk management program. In the event of a cybersecurity incident, our CEO is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents. date, we have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Inc. recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: SideChannel, Inc.

ticker: SDCH


text: Inc. has strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our risk management team works closely with our IT department to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-parties on Risk Management the complexity and evolving nature of cybersecurity threats, SideChannel, Inc. has relationships with a range of external experts, including cybersecurity assessors, consultants, and auditors in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights as needed, to ensure our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties may include audits, threat assessments, and consultation on security enhancements.


text: Third-party Risk we are aware of the risks associated with third-party service providers, SideChannel, Inc. implements stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes quarterly assessments by our Chief Information Security Officer ("CISO") and on an ongoing basis by our security engineers. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Board has established robust oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence. Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this domain.


text: The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.


text: Role Managing Risk The Chief Information Security Officer ("CISO") and the Chief Executive Officer ("CEO") play a pivotal role in informing the Audit Committee on cybersecurity risks.


text: They provide comprehensive briefings to the Audit Committee on a regular basis, with a minimum frequency of once per year. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; of ongoing cybersecurity initiatives and strategies;


text: reports and learnings from any cybersecurity events; and addition to our scheduled meetings, the Audit Committee, CISO and CEO maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive. The Audit Committee actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated into the broader strategic objectives of SideChannel, Inc. The Audit Committee conducts an annual review of the company's cybersecurity posture and the effectiveness of its risk management strategies. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: Management Personnel responsibility for assessing, monitoring and managing our cybersecurity risks rests with the CISO, Mr. Bill Roberts. With over 25 years of experience in the field of cybersecurity, Mr. Roberts brings a wealth of expertise to his role. His background includes extensive experience as an enterprise CISO and is well-recognized within the industry. His in-depth knowledge and experience are instrumental in developing and executing our cybersecurity strategies. Our CISO oversees our governance programs, tests our compliance with standards, remediates known risks, and leads our employee training program.


text: CISO is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The CISO implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the CISO is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: CISO, in his capacity, regularly informs the CEO and the Chief Financial Officer ("CFO") of all aspects related to cybersecurity risks and incidents. This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing SideChannel, Inc. Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Board of Directors, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.


text: we have never had a material cybersecurity incident that impacted our operations, we face various cyber and other security threats, including attempts to gain unauthorized access to sensitive information and networks; employee threats; virtual and cyber threats to our directors, officers, and employees; threats to the security of our facilities and infrastructure; and threats from terrorist acts or other acts of aggression. Our customers and vendors face similar threats. We utilize internal and external independent controls to monitor and mitigate the risk of these threats. All our key business processes utilize third-party software platforms. We do not retain any sensitive customer information outside of these systems.

companyName: PARKS AMERICA, INC

ticker: PRKA


text: impact of potential cybersecurity threats is difficult to predict, but one or more of them could result in the loss of information or capabilities, harm to individuals or property, damage to our reputation, loss of business, regulatory actions, and potential liability, any of which could have a material adverse effect on our financial position, results of operations and/or cash flows. These threats could lead to losses of sensitive information or capabilities, harm to personnel, infrastructure, or products, and/or damage to our reputation as well as our vendor's ability to perform on our contracts.


text: incident response involves every part of our organization, including business operations, finance, as well as outside service providers for key business applications. Our Board of Directors oversees all business, property and affairs of the Company, including cybersecurity risks. Our management keep the members of the Board informed of our business through discussions at Board meetings and by providing them with reports and other materials throughout the year.


text: Like many companies, we face significant and persistent cybersecurity risks. The small size of our organization and limited resources could exacerbate these risks. Our business strategy, results of operations, and financial condition have not, to date, been affected by risks from cybersecurity threats. During the reporting period, we have not experienced any material cyber incidents, nor have we experienced the ordinary course of our business, we collect and store sensitive data, including intellectual property. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management strategy, which is comprised of a wide array of policies, standards, architecture, processes, and governance. Under the guidance and supervision of our Chief Executive Officer, we further limit risk by delegating our information technology and cybersecurity to a leading third-party IT consultant to safeguard our networks. Additionally, as an added layer of security, all of our data is stored on the cloud.

companyName: Sonnet BioTherapeutics Holdings, Inc.


text: Despite being a small organization, we are committed to maintaining governance and oversight of these risks and to implementing standard operating procedures ("SOPs") and training to help us assess, identify, monitor and respond to these risks. Employees are trained to avoid phishing emails, and our internal controls system is designed to mitigate the risk of payments of fraudulent invoices.


text: We aim to incorporate industry best practices for companies of our size and financial strength throughout our cybersecurity program. Our Board has ultimate oversight of cybersecurity risk. The Chief Executive Officer reports to our Board. Our Chief Executive Officer provides periodic updates to the Board on (1) any critical cybersecurity risks; (2) ongoing cybersecurity initiatives and strategies; (3) applicable regulatory requirements; and (4) industry standards. The Chief Executive Officer also notifies the Board of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.


text: recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our risk management team works closely with our IT team to continuously evaluate and address cybersecurity risks in alignment with our business objectives and have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.

companyName: Novo Integrated Sciences, Inc.

ticker: NVOS


text: Company is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Company has established robust oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence, responsibility for assessing, monitoring and managing our cybersecurity risks rests with our Chief Executive Officer. Working in close coordination with the Board of Directors, the CEO oversees our governance programs, including testing our compliance standards, remediating known risks, and has ongoing direct interaction with our IT department and periodic interaction with external cybersecurity experts, as needed.


text: Chief Executive Officer is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The Chief Executive Officer, with the assistance from of both our IT department and external consultants, as needed, implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system checks to identify potential vulnerabilities. In the event of a cybersecurity incident, the Chief Executive Officer is well prepared to initiate immediate actions to mitigate the impact and initiate long-term strategies for remediation and prevention of future incidents. Chief Executive Officer regularly communicates with senior management and the Board of Directors on cybersecurity risks and incidents.


text: This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing the Company.


text: Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Board of Directors, ensuring that they are engaged in comprehensive oversight and can provide guidance on critical cybersecurity issues on a broad range of topics, including: Current cybersecurity landscape and emerging threats; of ongoing cybersecurity initiatives and strategies; reports and learnings from any cybersecurity events; and with regulatory requirements and industry standards.


text: Risk Management and Strategy recognize the increasing volume and sophistication of cyber threats and take our responsibility to protect the information and systems under our purview seriously. We consider cybersecurity threat risks alongside other Company risks as part of our overall risk assessment process. Our cybersecurity processes aim to provide a comprehensive approach to assess, identify, manage, mitigate, and respond to cybersecurity maintain a cybersecurity risk program predicated on a risk-based approach. We use cost-effective controls that are commensurate with the risk and sensitivity of our specific information systems, control systems and enterprise data. Our cybersecurity program incorporates best practices and industry standards from multiple sources and is designed to comply with applicable regulations. The cybersecurity program includes, but is not limited to, the following elements: risk assessment, policies and procedures, training and awareness, auditing, log collection and analysis, threat hunting and intelligence surveillance, compliance monitoring and testing, and incident response.

companyName: Optex Systems Holdings Inc

ticker: OPXS


text: internal professionals collaborate with external subject matter specialists, as necessary. All third parties engaged for such matters are subjected to scrutiny to ensure they satisfy our security standards. We periodically review our third-party engagements to ensure that the providers maintain the necessary levels of protection and competency, as well as to oversee and identify potential cybersecurity risks and/or threats from such engagements.


text: describe how risks from cybersecurity threats could materially affect us, including our business strategy, results of operations, or financial condition, as part of our risk factor disclosures at Part I, Item 1A, "Risk Factors" of this Annual Report on Form 10-K.


text: is an important part of our risk management processes and an area of focus for our Board and management. Our Board is responsible for oversight of our cybersecurity risk, including the effectiveness of cybersecurity risk management policies and protocols, while our Facilities Security Officer ("FSO"), and IT Manager are responsible for assessing and managing cybersecurity risk. We use a third-party service which monitors the Company's security threats twenty-four hours each day throughout the year. Any detected deviation from the expected operating parameters will initiate a communication to our IT Manager for investigation and remediation of the detected deviation in a timely manner.


text: IT Manager provides timely reports on cyber security incidents to the FSO, Danny Schoening, who also serves as the CEO and as Chairman of the board of directors. These reports may in turn be presented to the full board depending on the severity of the incident. In the event of a major incident, the Company's Incident Response policy will be executed and the appropriate parties notified.


text: organization prioritizes cybersecurity risk management, with leadership actively assessing and overseeing these risks. Our internal protocols require that significant cybersecurity risks be escalated to executive leadership, as well as to relevant management responsible for preventing, detecting, mitigating, and addressing cybersecurity incidents. These protocols ensure consistent and effective incident response, setting standards for internal notification and escalation. Additionally, they outline guidelines for external notifications, including disclosures to state or federal agencies or affected customers in the event of a cybersecurity incident. This structured framework supports our commitment to strong cybersecurity governance and risk management practices.

companyName: DFP HOLDINGS Ltd


text: of September 30, 2024, the Company has not identified any cybersecurity threats, including previous incidents, that have materially impacted our business strategy, results of operations, or financial condition. This assertion signifies our diligent efforts in managing and mitigating cybersecurity risks, contributing to the stability and continuity of our operations.


text: currently maintain customary cybersecurity tools intended to prevent or detect unauthorized access to our information technology ("IT") networks and applications as well as to mitigate the risk of common cybersecurity threats. We continue to develop and implement additional processes, including those intended to follow an internal IT Security Policy, which will seek to assess, identify, and manage material risks from cybersecurity threats to our IT systems and information that we create, use, transmit, receive, and maintain in our business. We will seek to integrate these processes and policies into an overall enterprise risk management process. We expect our processes for assessing, identifying, and managing material risks from cybersecurity threats, including threats associated with our use of third-party service providers, will include our efforts to identify the relevant assets that could be affected, determine possible threat sources and threat events, assess threats based on their potential likelihood and impact, and identify controls that are in place, or necessary, to manage and/or mitigate such risks.

companyName: MOBIX LABS, INC

ticker: MOBX


text: may not currently be sufficiently protected against cybersecurity risks. Our existing resources may be insufficient to adequately protect us against, or to investigate and remediate any vulnerability from, cybersecurity incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our operations, business strategy or financial condition.


text: event of a cybersecurity incident affecting us, we would assess any potential unauthorized attempts to access our IT systems or similar events that may adversely affect the availability or integrity of our IT systems or the security and confidentiality of the data we create, use, transmit, receive, and maintain in our business. Our management team would develop an incident response plan and report to the board of directors on our incident response plan for addressing and mitigating risks associated with such an incident.


text: responsibility for assessing cybersecurity risks rests with our audit committee of the Board, who work together with our management team, including our chief executive officer and our president and chief financial officer to manage cybersecurity risk.


text: date, we have not experienced any cybersecurity threats or incidents that have materially affected our operations, business strategy or financial condition.


text: have no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk, which may make us susceptible to heightened cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: IB Acquisition Corp.

ticker: IBAC


text: management evaluates cybersecurity risk from computer viruses and more sophisticated and targeted cyber-related attacks such as ransomware, as well as cybersecurity failures resulting from human error and technological errors. Such risks are reviewed on a periodic basis as deemed appropriate.

companyName: Nano Nuclear Energy Inc.

ticker: NNE


text: overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: use of antivirus software, as well as other software to prevent and detect data intrusions.


text: installation of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure necessary, the use of third-party security experts if and when an incident is detected are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect, our business strategy, results of operations or financial conditions.


text: board of directors has yet to establish any formal committees related to cybersecurity risks. Management updates our board of directors regarding cybersecurity risks as necessary.


text: have policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and have integrated these processes into our overall risk management systems and processes. We assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: CEMTREX INC

ticker: CETX


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations, or financial condition.


text: of September 30, 2024, we have not identified any indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements. For further discussion of cybersecurity risks, please refer to Item 1A. Risk Factors.


text: Our IT and related systems are critical to the efficient operation of our business and essential to our ability to perform day to day processes. We face persistent security threats, including threats to our IT infrastructure and unlawful attempts to gain access to our confidential or otherwise proprietary information, or that of our employees, via phishing/malware campaigns and other cyberattack methods.

companyName: Anixa Biosciences Inc

ticker: ANIX


text: Our security policies and processes are based on industry best practices and are revisited regularly to ensure their appropriateness based on risk, threats and current technological capabilities. We regularly assess our threat landscape and monitor our systems and other technical security controls, maintain information security practices and ensure maintenance of backup and protective systems. We review System and Organization Controls 1 (SOC 1 Type II)


text: certifications where relevant from key third party partners and other service providers with access to information assets at least annually.


text: Our internal controls and procedures address cybersecurity and include processes intended to ensure that security breaches are reported to appropriate personnel and, if warranted, analyzed for potential disclosure. We also maintain insurance coverage that is intended to address certain aspects of cybersecurity risks. To date, there have not been any cybersecurity threats that have materially affected the Company.


text: Board Oversight of Cybersecurity Matters security matters is the responsibility of our Audit Committee. The Audit Committee meets with the senior executives, specifically the Chief Executive Officer and Chief Financial Officer on at least an annual basis to discuss cybersecurity posture. The Audit Committee may also periodically receive targeted briefings related to cybersecurity and reviews our incident response capabilities.


text: senior executives work to protect our information systems from cybersecurity threats and to promptly assist in coordinating a response to any cybersecurity incidents in accordance with our cybersecurity incident response and recovery plans.


text: We have engaged an IT Managed Service Provider who assists in the oversight of our corporate-wide data security, including developing, implementing and enforcing security policies to manage our overall cybersecurity risks. The senior executives regularly meet with our IT Managed Service Provider during the course of the year to review and discuss cybersecurity issues.


text: We protect our information assets and manage risk by promoting a culture that communicates security risks, designs secure IT systems and operates according to approved processes to reduce the likelihood and impact of security incidents. We achieve this objective by: designing, implementing and maintaining solutions with appropriate security controls; sustaining solutions with required patching and vulnerability remediation; creating and executing controls in support of policy as well as regulatory compliance;


text: ensuring that our policies, processes, practices and technologies proactively protect, shield, defend and remediate cyber threats; and delivering quality communications and annual training to stakeholders on cyber awareness and computing hygiene.


text: We believe that the conduct of our employees is critical to the success of our information security. We keep our employees apprised of threats, risks and the part that they play in protecting both themselves and the Company.


text: We assess our service providers prior to allowing our information to be processed, stored or transmitted by third parties, and we include standardized contractual requirements in each contract where appropriate. We validate our service providers' security via questionnaires, open-source intelligence and, where appropriate, SOC 1 Type II reports on financially significant third-party service providers. Our process also includes regular monitoring of risk related to third parties on a periodic basis or when services or product purchases expand beyond their original scope or intended use.


text: of the date of this Form 10-K, we believe that we have limited risks associated with a breach in cybersecurity. Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents (of which we are not aware of any), have not materially affected or are not reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.

companyName: Hypha Labs, Inc.

ticker: FUNI


text: Management and Strategy have not established specific processes for assessing, identifying, and managing material risks from cybersecurity threats or engaged third parties to assess such risks. However, if exposed to such a risk, we would assess any potential unauthorized attempts to access our information systems that may result in adverse effects on the confidentiality, integrity, or availability of those systems.


text: we lack a formal risk assessment policy or analysis and no process has been integrated into our management system, a risk assessment would likely include identification of any reasonably foreseeable internal and external risks, any likelihood and potential damage that could result from such risks, and whether existing safeguards are sufficient to manage such risks. If appropriate and necessary, we would implement reasonable safeguards to minimize identified risks and address any identified gaps in existing systems.


text: date, we have not encountered cybersecurity threats or challenges that have materially impaired our operations, business strategy or financial condition.


text: responsibility for assessing any cybersecurity risks rests with A. Stone Douglass, our sole executive officer, who would report any threat to our board of directors.


text: Company has adopted a cybersecurity policy (the "Cybersecurity Policy") governing the establishment and application of certain procedures and safeguards to identify potential cybersecurity risks and, in the event of a cybersecurity breach, the protocol for disclosing to the Securities and Exchange Commission, including possible remedies. The members of the Board of Directors reviews cybersecurity risk as part of our overall risk-management program. This ensures that cybersecurity risk management remains a meaningful priority in our business strategy and operations. Our risk management strategy for cybersecurity generally includes:

companyName: Kun Peng International Ltd.

ticker: KPEA


text: Identification: We aim to proactively identify the manners in which our business could be materially impacted by cybersecurity risks including:


text: Cybersecurity Incidents – an unauthorized occurrence on or conducted through its information system that jeopardizes the confidentiality, integrity, or availability of its information systems or any information residing therein Cybersecurity Threats – any potential occurrence that may result in an unauthorized effort to adversely affect the confidentiality, integrity, or availability of its information systems or any information residing therein.


text: Assessment: We periodically assess our risks relating to cybersecurity threats, including risks relating to our reliance on third parties. In so doing, we consider the likelihood and impact that could result from the manifesting of such risks, together with the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks, together with the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks, including evaluating and if available obtaining cyber liability insurance, and aligning such cyber-risk management policies with the Company's business needs by integrating cyber-risk analysis into significant business decisions.


text: Management: If deemed appropriate, we design and implement reasonable safeguards to address any identified gaps in our existing processes and procedures, including annual cybersecurity awareness training emphasizing the use of strong passwords on all systems and aligning cyber-risk management policies with the Company's needs by integrating cyber-risk analysis into significant business decisions and ensuring that the Company's organization structure supports such cybersecurity goals.


text: Evaluation: If a cybersecurity breach occurs, the Board of Directors and/or the Audit Committee will determine whether the incident or threat is "material" (.i.e. is there a substantial likelihood that a reasonable shareholder would consider it important in making an investment decision or if it would have significantly altered the "total mix" of information made available?), assessing among other factors potential or actual financial impacts, reputational damage, and operational disruptions.


text: Report: Establish and monitor an incident response approach requiring our Chief Financial Officer to report to us, the full Board of Directors, and legal counsel any cybersecurity concerns or events.


text: Disclosure: To ensure compliance with SEC requirements and maintain overall stakeholder confidence in the Company, all material and known facts regarding the cybersecurity breach will be recorded, including their nature, scope, and financial implications; and a Form 6-K will be prepared and filed within four (4) business days after the determination that a "material" cybersecurity incident has occurred. presently do not engage third parties to assist with evaluating the effectiveness of our risk-management and cybersecurity practices. The Company did not have any material cybersecurity breaches during the year ended September 30, 2024.


text: soon as the Board of Directors authorizes the creation of an audit committee comprised of our three independent non-executive directors, and adoption of an audit committee charter, the Audit Committee will be the governance body involved in, and ultimately responsible for, cybersecurity oversight. They will generally coordinate with our Chief Financial Officer in this regard. If needed, the full Board would be updated on cybersecurity risks and incidents. As of the date of this Annual Report, the members of the Board of Directors currently None of our directors on the Audit Committee nor our Chief Financial Officer have particular experience in cybersecurity matters. See "Item 10. Directors, Executive Officers and Corporate Governance – Committees of the Board of Directors."


text: Company has not adopted any formal cybersecurity risk management program or formal processes for assessing, identifying, and managing material risks from cybersecurity threats. At the management level, our Chief Executive Officer and Chief Financial Officer are responsible for addressing cybersecurity incidents, while our full board of directors (the "Board of Directors" or "Board") has oversight responsibility for the Company's overall risk management, including cybersecurity risk, and has not delegated oversight authority for cybersecurity risks to any committee. In the event a cybersecurity incident occurs, the Company's Chief Executive Officer and the Chief Financial Officer are expected to inform our Board of Directors of the details of such incident as well as the measures taken in response to such incident. In fiscal year 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: Permex Petroleum Corp

ticker: OILCF


text: of the date of this Annual Report, we believe that we have limited risks associated with a breach in cybersecurity. Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents (of which we are not aware of any), have not materially affected or are not reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.

companyName: GLOBAL LEADERS CORP

ticker: GLCP


text: responsibility for assessing any cybersecurity risks rests with our Chief Executive Officer, who would report any threat to our Board date, we have not encountered cybersecurity threats or challenges that have materially impaired our operations, business strategy or financial condition.


text: of November 30, 2024, the Company has not identified any cybersecurity threats, including previous incidents, that have materially impacted our business strategy, results of operations, or financial condition. This assertion signifies our diligent efforts in managing and mitigating cybersecurity risks, contributing to the stability and continuity of our operations.

companyName: AFB Ltd


text: Company has designed and implemented processes to identify, address and mitigate risks from cybersecurity threats. Our current processes, which are subject to change as best practices evolve, include: maintenance of cyber security certifications (such as Cyber Essential Plus). The Cyber essential scheme is a certification scheme designed to show that an organization has a minimum level of protection in cyber security through annual assessments to maintain the certification.

companyName: Coda Octopus Group, Inc.

ticker: CODA


text: This certification is issued by third party service providers who review annually the Company's security controls around its Information Technology Infrastructure ("ITI") and business practices to determine the Company's vulnerability to cyber security threats. We also implement all recommendations which may come out of the certification assessments process.


text: part of our day-to-day management of our business, we perform ongoing monitoring of ITI for access violations to our IT systems, weaknesses, changes or other threats. (III)


text: actively monitor the bulletins that may be issued by National Cyber Security Bodies, which are a good source of information on current trends and methods relating to cyber-attacks. We review this information and adapt our business practices as may be prudent and feasible.


text: have established an internal cross-group committee (Cyber Security Management Committee ("CSMC") designating the area of cyber security risk management as "business critical". The CSMC, under the guidance of the Board of Directors, is responsible for the risk management strategy and governance of this critical business area. Under the CSMC, a formal monthly reporting on cyber security related matters has been implemented and this is provided to the Management of Company for ongoing review. The monthly reporting covers: (i) the outcome of random testing designed to identify threats, access violations and risks;


text: (ii) compliance with the Company's ITI access protocol; (iii) confirmation that in the reporting period that there were no cyber security incidents; (iv) the assessment and identification of any gaps in the Company's cyber security risk management protocol; and (v) confirmation that we continue to be compliant with our cyber security certifications and no action or omission has caused this certification to be invalid. run monthly cybersecurity awareness training with our employees, and this is documented in our internal periodic reporting.


text: Board of Directors holds oversight over the Company's cyber security risk management strategy and protocols and has amongst its composition an expert on this subject who has been appointed as having the lead in this area. The Company's internal CSMC works closely with the Board's expert appointee. All ITI changes, proposed through the CSMC, are routed through approval processes, and testing before implementation.


text: business strategy, results of operations, and financial condition have not been materially affected by risks from cybersecurity threats, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents.


text: are dedicated to safeguarding our invaluable assets and ensuring the well-being of personnel, as demonstrated through the preparation of our cybersecurity program. cyber risk management program is designed to comprehensively address the spectrum of cybersecurity threats that confront our organization.

companyName: Flux Power Holdings, Inc.

ticker: FLUX


text: Within this program, we integrate an analysis of the risks facing the organization to guide our preparedness against cybersecurity threats to ensure a holistic approach that encompasses cross-functional and geographical visibility under the oversight of executive leadership through regular risk management meetings.


text: aid our cybersecurity risk management strategy, we contract with dedicated third-party firms and assessors to identify risks and threats to our organization. These assessments adhere to leading cybersecurity standards such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework aligning with industry best practices. To oversee incident response and mitigation we utilize our incident response plan and processes to standardize our processes for assessing, identifying, and managing cybersecurity incidents. This includes a comprehensive reporting structure and analysis processes to provide visibility and determine incident business impact. Were a cybersecurity incident to occur, we have also implemented a cross-functional business team to aid in the determination of incident impact, severity, and materiality, with the support of standing external counsel and third-party incident response advisors. Additional to our third-party incident response advisors and support contracts, we undergo regular penetration tests to bolster our readiness in the event of cybersecurity incidents.


text: Furthermore, we have also obtained cybersecurity insurance coverage to enhance protection and minimize potential financial losses arising prioritize cybersecurity within our supply chain, both nationally and globally, by assessing our third-party cybersecurity posture to provide secure visibility with our partnerships. As part of our due diligence processes, we conduct security questionnaires and service provider reviews, to align our cybersecurity standards on the onset of our partnerships. Additionally, we collaborate closely with a third-party vendor to enhance supply chain resilience. This collaboration involves leveraging their expertise to inform decision-making and enhance risk oversight processes, ensuring greater robustness, and adaptability in managing supply chain challenges.


text: we maintain a strong cybersecurity posture, we continuously strive for improvement and vigilance to mitigate evolving threats within this dynamic environment and protect our stakeholders' interests. Our organization has not experienced any unauthorized access resulting from cybersecurity incidents with a materially adverse effect on our business, operations, or financial condition and we remain cognizant of the potential impact of insufficient cybersecurity measures on our operations. For further insights into additional risks relating to our business, please refer to "Item 1A – Risk Factors - Risk Factors Relating to Our Business."


text: Board delegated primary oversight authority to the Audit Committee who plays a pivotal role in ensuring the effectiveness of our cybersecurity strategy. Through regular updates provided by our leadership team, the committee actively evaluates the organization's cybersecurity posture and aids in prioritizing risk mitigation efforts aligned with our strategic objectives. These updates encompass detailed quarterly reports during audit committee meetings, covering key metrics, ongoing initiatives, and any cybersecurity incidents. Additionally, on an annual basis, the entire board receives updates on the progress of our cybersecurity program and strategy, including insights into emerging risks and industry trends. Moreover, the board benefits from supplementary educational briefings delivered by both internal and external experts, providing invaluable global threat visibility and enhancing the Board's understanding of cybersecurity challenges and opportunities.


text: Overseeing our cybersecurity initiatives is our Director of Information Technology who provides invaluable expertise in managing cybersecurity risks and leading our cybersecurity operations. The Director of Information Technology possesses good knowledge in information technology and program management, with contract resources available to help and supplement our security profile. Furthermore, the executive leadership team is active in security operations, overseeing implementation of policies, procedures, and policies related to cybersecurity, technology, and vendors. Both the Audit Committee of the Board as well as executive leadership team will be notified and updated in the event of an incident, with incident updates, mitigation efforts, and impact, as deemed appropriate.


text: recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees and violation of data privacy or security laws.

companyName: Telomir Pharmaceuticals, Inc.

ticker: TELO


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, internal IT Audit, IT security, governance, risk and compliance reviews. To defend, detect and respond to cybersecurity incidents, we, among other things: conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes.


text: risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from third parties such as vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party risks when handling and/or processing our employee, business or customer data.


text: of Processes for Assessing, Identifying, and Managing Cybersecurity Risks the normal course of business, we may collect and store certain sensitive company information, including proprietary and confidential business information, trade secrets, intellectual property, sensitive third-party information and employee information. Our access control policies are based on the principle of least privilege, limiting user access strictly to what is required for their roles. Additionally, we have general measures to identify potential threat actors, including the implementation of two-step verification processes to confirm the identity of all counterparties.

companyName: STRATEGIC ACQUISITIONS INC /NV/

ticker: STQN


text: of Risks from Cybersecurity Threats of the date hereof, the Company and our service providers have not experienced cybersecurity incidents, and we are not aware of any previous cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company. However, we acknowledge that cybersecurity threats are continually evolving, and the possibility of future cybersecurity incidents remains. our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences to our business. These measures cannot provide absolute security. No security measure is infallible. See " Risk Factors - Unauthorized disclosure, destruction or modification of data, including personal information, through cybersecurity breaches, computer viruses or otherwise or disruption of our services could expose us to liability, protracted and costly litigation and damage our reputation." for additional information about the risks to our business associated with a breach or compromise to our systems.


text: Board is ultimately responsible for overseeing cybersecurity, information security, and information technology risks, as well as management's actions to identify, assess, mitigate, and remediate those risks. On an annual basis, the Board reviews and discusses with management the Company's policies, procedures and practices with respect to cybersecurity, information security and information and operational technology, including related risks. In addition, our director Dr. Yuanyuan Huang regularly briefs senior management and the Board of Directors on cybersecurity issues as part of our overall enterprise risk management program, which may include information regarding our exposure to privacy and cybersecurity risks deemed to have a moderate or higher business impact, even if immaterial to us. Dr. Yuanyuan Huang is responsible for implementing cybersecurity policies, programs, procedures, and strategies. Dr. Huang is experienced and qualified because of his education and working experience in related fields.


text: Management and Strategy recognize the importance of managing the material risks of cybersecurity threats, and we have implemented processes for identifying and assessing cybersecurity risks and incidents. Senior management oversees and works closely with our IT department to continuously review and evaluate cybersecurity risks in alignment with our business goals and needs.

companyName: MARIZYME, INC.

ticker: MRZM


text: Chief Executive Officer and Chief Financial Officer are primarily responsible for timely updating the Board of Directors and the Audit Committee about any material cybersecurity incidents or threats or any cybersecurity related issues worthy of their attention.


text: The Board, Audit Committee, executive and middle management devote significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats in a timely and effective manner. Our cybersecurity risk management program leverages the National Institute of Standards and Technology (NIST) framework, which organizes cybersecurity risks into five categories: identify, protect, detect, respond and recover. We regularly assess the threat landscape and take a holistic view of cybersecurity risks, with a layered cybersecurity strategy based on prevention, detection, and mitigation. Assessing, identifying and managing cybersecurity related risks are integrated into our overall risk management process. We have policies and/or procedures concerning cybersecurity matters related to encryption standards, antivirus protection, remote access, multifactor authentication, confidential information and the use of the internet, social media, email and wireless devices. These policies go through an internal review process and are approved by appropriate members of management.

companyName: Where Food Comes From, Inc.

ticker: WFCF


text: Company's Chief Technology Officer is responsible for developing and implementing our information security program and reporting on cybersecurity matters to the Chairman of the Board. Our Chief Technology Officer has over two decades of experience leading cyber security oversight, while others on our IT security team have cybersecurity experience and/or a college degree with concentrations in security. We view cybersecurity as a shared responsibility, and we periodically perform simulations and tabletop exercises at a management level and incorporate external resources and advisors as needed. All employees are required to attend company-wide training which includes cybersecurity topics several times a year.


text: have continued to expand investments in IT security, including additional end-user training, using layered defenses, identifying and protecting critical assets, strengthening monitoring and alerting, and engaging experts. We regularly test defenses by performing simulations and drills at both a technical level (including through penetration tests) and by reviewing our operational policies and procedures with third-party experts. At the management level, our IT security team regularly monitors alerts and meets to discuss threat levels, trends and remediation. We utilize independent expert organizations that employ cybersecurity dashboards that automate the aggregation and analysis of data points to help us address possible exposures and internal control weaknesses, as well as review recommended areas of action to improve the quality and maturity of our controls. These tests and assessments are useful tools for maintaining a robust cybersecurity program to protect our investors, customers, employees, vendors, and intellectual property. We also conduct an annual review of third-party hosted applications with a specific focus on any sensitive data shared with third parties. The internal business owners of the hosted applications are required to document user access reviews at least annually and provide from the vendor a System and Organization Controls (SOC) 1 or SOC 2 report. If a third-party vendor is not able to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis. Our assessment of risks associated with use of third-party providers is part of our overall cybersecurity risk management framework.


text: full Board participates in discussions with management and amongst themselves regarding cybersecurity risks. Management provides updates regarding our cybersecurity program, which includes discussion of management's actions to identify and detect threats, as well as planned actions in the event of a response or recovery situation. Management also updates the Board on the Company's Cyber Attack Recovery Plan, which covers, among other things, our approach to material cybersecurity incidents, data privacy and our compliance programs.


text: To aid the Board with its cybersecurity and data privacy oversight responsibilities, the Board periodically attends presentations on face a number of cybersecurity risks in connection with our business. Although such risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we have, from time to time, experienced threats to and breaches of our data and systems, including malware and computer virus attacks. For more information about the cybersecurity risks we face, see the risk factor entitled "A significant data breach or information technology system disruption could adversely affect our business, financial results, or reputation, and we may be required to increase our spending on data and system security" in


text: is an important aspect of our business operations, and we are committed to protecting our systems, data, and the information of our clients and stakeholders. We recognize that cybersecurity threats are constantly evolving and that maintaining robust security measures is an ongoing process. Below is an overview of our cybersecurity risk management and the measures we have in place:

companyName: GT Biopharma, Inc.

ticker: GTBP


text: Governance and Oversight: Our Board of Directors and senior management are actively involved in overseeing our cybersecurity policies and practices and managing those responsible for coordinating and implementing cybersecurity initiatives across the organization.


text: Assessment and Management: We conduct risk assessments to identify potential cybersecurity threats and vulnerabilities. This includes evaluating the likelihood and potential impact of various threats, such as data breaches, malware attacks, and insider threats. Based on these risk assessments, we develop and implement risk management strategies to mitigate identified risks.


text: Security Policies and Procedures: We have established information security policies and procedures that govern the use, protection, and handling of sensitive information. These policies cover areas such as data encryption, access controls, password management, incident response, and employee training.


text: Network and Infrastructure Security: We employ a range of technical measures to secure our network and infrastructure, including firewalls, intrusion detection and prevention systems, and vulnerability assessments. We also use encryption to protect data both in transit and at rest.


text: Training and Awareness: We provide cybersecurity training to employees to raise awareness of the latest threats and best practices for protecting sensitive information. This includes training on how to recognize phishing attempts, handling secure data, and reporting security incidents.


text: Risk Management: We assess the cybersecurity practices of our third-party vendors and service providers, including conducting due diligence on vendors before engaging their services and monitoring their compliance with our security requirements.


text: Compliance and Reporting: We comply with all applicable laws and regulations related to cybersecurity, including data protection and privacy laws.


text: we believe that our current cybersecurity measures are robust, we recognize that the cybersecurity landscape is constantly evolving, and we remain vigilant in monitoring and adapting our practices to address emerging threats. We are committed to maintaining the confidentiality, integrity, and availability of our systems and data and to protecting the interests of our clients and stakeholders.


text: Management and Strategy have established policies and processes for assessing, identifying, and managing material risks from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Shuttle Pharmaceuticals Holdings, Inc.

ticker: SHPH


text: have begun to conduct risk assessments at least annually to identify cybersecurity threats. These risk assessments include identifying reasonably foreseeable potential internal and external risks, the likelihood of occurrence and any potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, controls and other safeguards we have put in place to manage such risks. Our risk management process also encompasses cybersecurity risks associated with the use of our vendors and service providers.


text: these risk assessments, we design, implement, and maintain reasonable safeguards to minimize the identified risks; reasonably address any identified gaps in existing safeguards; update existing safeguards as necessary; and monitor the effectiveness of our safeguards.


text: believe we have allocated adequate resources related to our cybersecurity risk management processes and have designated our President and Chief Operating Officer with the responsibility of managing the cybersecurity risk assessment and mitigation process with the oversight of the Chief Financial Officer responsible for the consolidated financial statements for the year part of our overall risk management program, we provide cybersecurity training to employees in high risk areas and have distributed standard operating procedures to all employees. For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, please refer to Item 1A, "Risk Factors,"


text: in this annual report on Form 10-K, including the risk factors entitled "Our internal computer systems, or those of our CROs or other contractors or consultants, may fail or suffer security breaches, which could result in a material disruption of our product development programs," "Our proprietary information, or that of our customers, suppliers and business partners, may be lost or we may suffer security breaches," and "Failure of our information technology systems could significantly disrupt the operation of our business.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks arising from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, and we recently established a Cybersecurity Subcommittee to further enhance our cybersecurity oversight. Members of the Cybersecurity Subcommittee are appointed by, and serve at the discretion of, the Board. The Cybersecurity Subcommittee consists of two Board members, both of whom are independent.


text: President and Chief Operating Officer is primarily responsible for assessing and managing material risks from cybersecurity threats on a day-to-day basis.


text: Management and Strategy have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We monitor cybersecurity threats, including any potential unauthorized occurrence on or conducted through information systems that we use through third party providers that may result in adverse effects on the confidentiality, integrity, or availability of any information residing therein.

companyName: Bone Biologics Corp

ticker: BBLG


text: require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company. have not encountered cybersecurity challenges that have, or are reasonably likely to, materially impair our operations or financial standing.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole.


text: Chief Executive Officer and Chief Financial Officer are primarily responsible to assess and manage our material risks from cybersecurity threats. Chief Financial Officer oversees our cybersecurity policies and processes, including those described in "Risk Management and Strategy"


text: above. Under such policies and processes, our Chief Financial Officer is responsible for reporting to our Board of Directors regarding any cybersecurity incidents.


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: M2i Global, Inc.

ticker: MTWO


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-party Risk we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes annual assessments of the SOC reports of our providers and implementing complementary controls. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Company's cybersecurity risks are theft of intellectual property, theft of other business data, fraud or extortion, lack of access to our information systems, harm to employees, harm to business partners, violation of privacy laws, potential reputational risk, and litigation or other legal risk if a cybersecurity incident were to occur. It is difficult to assign a monetary materiality assessment to these risks or to the impact if the Company were to sustain a breach of its systems. Our approach is based on the premise that any cybersecurity incident could result in material harm to the Company.

companyName: enVVeno Medical Corp

ticker: NVNO


text: Audit Committee has been designated with oversight responsibility for cybersecurity risks and our Chief Financial Officer is responsible for managing our efforts in this area. Neither the Chief Financial Officer nor any member of the Audit Committee has relevant expertise in cybersecurity. Rather, the Company retains an outside technical expert to support our information technology systems including addressing cybersecurity risks.


text: conduct annual assessments of risks posed by cybersecurity threats in conjunction with our insurance renewal cycles. This includes a thorough review of our systems and vulnerabilities. As a result of these assessments, we have implemented tools and practices to proactively monitor our systems and user accounts including, but not limited to, deploying solutions to constantly monitor users accessing systems, implementation of two factor authentication for logins, and improved rules for password maintenance.


text: many companies, we make use of cloud-based solutions provided by several large service providers for critical information technology infrastructure such as email and file storage. We do not maintain stand-alone servers for our email, file storage or other business applications.


text: In the normal course of our relationships with the providers of these services, we regularly monitor their message boards and other formal and informal communications channels for signs of breaches of their systems. We also survey available public information for indications that they have suffered a breach of their systems.


text: of our business partners also maintain data related to our trials and ongoing product development on servers they maintain. We require these partners to comply with all HIPAA standards for maintaining security of their systems where this data resides.


text: We are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Evergreen Corp


text: The Company's Cybersecurity System includes administrative, technical, and physical safeguards and is designed to provide an appropriate level of protection to maintain the confidentiality, integrity and availability of the Company's and its customers' information. This includes protecting against known and evolving threats to the security of the Company's systems and information, and against unauthorized access, compromise, or loss of data. The Cybersecurity System is managed centrally, so the same security controls, policies and procedures are implemented across the organization.

companyName: OneMeta Inc.

ticker: ONEI


text: The Company maintains cybersecurity policies including an Acceptable Use Policy that all system users sign to acknowledge that they understand their security responsibilities. All system users receive security awareness training which includes phishing attack simulation testing.


text: A key element of the Company's Cybersecurity System is to mature the system to align with the CIS18 Critical Security Controls security framework. The CIS controls are designed based on real-world data about cyber-attacks, to ensure that the measures are effective against current threats. The framework provides a prioritized set of actions, which enables the Company to focus its efforts on the most effective defensive measures first. This prioritization helps in optimizing the use of resources for maximum impact on security. This strategy provides a structured and effective approach to cybersecurity, helping the Company to protect its assets, comply with regulations, manage risks, and improve its overall security posture.


text: The Company has established controls and procedures to escalate enterprise-level issues, including cybersecurity matters, to the appropriate management levels within its organization and to its Board of Directors, or members or committees thereof, as appropriate. The Company's Board of Directors is responsible for enterprise risk management, including its approach to managing cybersecurity risk, and has delegated oversight responsibility of information security risks to its Audit Committee. Under the Company's framework, cybersecurity issues are analyzed by subject matter experts for potential financial, operational, and reputational risks, based on, among other factors, the nature of the matter and breadth of impact.


text: Matters determined to present potential material impacts to the Company's financial results, operations, and/or reputation are immediately reported by management to the Company's Board of Directors or its Audit Committee, as appropriate, in accordance with its escalation framework.


text: In addition, the Company has established procedures to ensure that management responsible for overseeing the effectiveness of disclosure controls is informed in a timely manner of known cybersecurity risks and incidents that may materially impact the Company's operations and that timely public disclosure is made as appropriate. The Company's Cybersecurity System is led by the Chief Executive Officer ("CEO") in collaboration with other third-party cybersecurity service providers which in turn assist in monitoring our exposure from significant information technology suppliers, significant software as a service providers and major vendors with access to our information technology systems. Further, team members who support our cybersecurity program have relevant educational and industry experience through various roles involving information technology, security, auditing, compliance, systems and programming. The Company does not maintain cyber insurance coverage at this time.


text: During the last three years, the Company has not experienced a material security breach and, as a result, the Company has no t incurred any material expenses from such a breach. Furthermore, during such time, the Company has not been penalized or paid any amount under any information security breach settlement.


text: We are a blank check company with no business operations. Since our Initial Public Offering, our sole business activity has been to search for and select a prospective acquisition candidate. However, because we have investments in our Trust Account and bank deposits and we depend on the digital technologies of third-party service providers, we may be subject to attacks on or security breaches in our or such third parties' systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of such third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.

companyName: WinVest Acquisition Corp.

ticker: WINV