text: Conducting periodic reviews of user credentials and access privileges; and date, we have not identified any cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, our business strategy, financial condition, or results of operations. As our business grows, we intend to expand our cybersecurity risk management protocols through the adoption of formal written policies, periodic third-party assessments, and a documented incident response plan.


text: Board of Directors has ultimate oversight responsibility for cybersecurity risk as part of its overall risk management and corporate governance framework. Management is responsible for the implementation and monitoring of cybersecurity controls and for reporting material developments to the Board.

companyName: SafeSpace Global Corp

ticker: SSGC

secItem: Item 1C


text: At present, we do not employ dedicated cybersecurity personnel due to our limited operational scale and financial resources. We currently conduct due diligence or ongoing reviews of qualified third-party service providers and advisors to support information security and assist management in identifying and addressing potential risks. The Board, at least annually, receives periodic updates from management regarding the effectiveness of these measures and any material developments in our cybersecurity posture.


text: SEC mandates through Item 106 of Regulation S-K that public companies, such as Blue Chip Capital Group, Inc. must acknowledge the financial implications of cybersecurity risks in their disclosures. This requirement stems from the understanding that cyber incidents can lead to significant material costs, affecting a company's financial condition and, consequently, its investors. The Company believes that at this stage of its development, with no active operations being conducted other than start-up activities principally related to the Raisewise subsidiaries' initial compliance with registration and regulatory protocols, it is not exposed to cybersecurity risks.

companyName: Blue Chip Capital Group Inc.


text: If and when it completes its acquisition of U.S. Petrochemical Industries, Inc., a supplier of raw materials to the Petrochemical industry globally in over 30 countries and has several international offices, the Company intends to engage professional cybersecurity professionals to assess the related risks and make full regulatory mandated disclosure in its SEC filings under the Exchange Act.


text: Management and Strategy identify and assess material risks from cybersecurity threats to our information systems and the information residing in our information systems by monitoring and evaluating our threat environment on an ongoing basis using various methods including, for example, using manual and automated tools, subscribing to reports and services that identify cybersecurity threats, analyzing reports of threats and threat actors, conducting scans of the threat environment, and conducting risk assessments.

companyName: EvoAir Holdings Inc.

ticker: EVOH


text: manage material risks from cybersecurity threats to our information systems and the information residing in our information systems through various processes and procedures, including, depending on the environment, risk assessment, incident detection and response, vulnerability management, disaster recovery and business continuity plans, internal controls within our accounting and financial reporting functions, encryption of data, network security controls, access controls, physical security, asset management, systems monitoring, and employee training. We engage third-party service providers to provide some of the resources used in our information systems and some third-party service providers have access to information residing in our information systems. With respect to such third parties, we seek to engage reliable, reputable service providers that maintain cybersecurity programs.


text: are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect our Group, including our business strategy, results of operations, or financial condition.


text: Refer to "Item 1A. Risk Factors— Risks Associated with Business and Industry — Unauthorized disclosure, destruction or modification of data, through cybersecurity breaches, computer viruses or otherwise or disruption of our services could expose us to liability, protracted and costly litigation and damage our reputation".


text: Board of Directors holds oversight responsibility over our Group's risk management and strategy, including material risks related to cybersecurity threats. The Board of Directors oversees the management of our Group's major financial risk exposures, the steps management has taken to monitor and control such exposures, and the process by which risk assessment and management is undertaken and handled, which would include cybersecurity risks, in accordance with its charter. The Board of Directors holds regular meetings and receives periodic reports from management regarding risk management, including major financial risk exposures from cybersecurity threats or incidents.


text: is responsible for assessing and managing our material risks from cybersecurity threats on a day-to-day basis and keep the Board of Directors informed on a regular basis of the identification, assessment, and management of cybersecurity risks and of any cybersecurity incidents.


text: of the date hereof, the Company has not encountered cybersecurity incidents that the company believes to have been material to the Company taken as a whole.


text: management and strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: RHINO BITCOIN INC.

ticker: RHNO


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management to promote cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes. Our management works closely with our IT department to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-party Risk we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: 2022, we have been primarily focused on launching our real estate management and hospitality business. We have 21 employees and currently use a third-party sub-contractor to manage all Information Technology (IT) issues, including protection against, detection, and response to cyberattacks.

companyName: Awaysis Capital, Inc.

ticker: AWCA


text: measures that are being taken to ensure proper protection include: computers are protected using a cloud-powered endpoint security solution that helps enterprises prevent, detect, investigate, and respond to advanced threats on their networks. It offers endpoint protection, endpoint detection and response, mobile threat defence, and integrated vulnerability management. It also provides, among other things, malware and spyware detection and remediation, rootkit detection and remediation and network vulnerability detection.


text: Company e-mails are protected by a cloud-based email filtering service designed to protect the Company against advanced threats related to email and collaboration tools. all users on the Company's computer network are required to perform multi-factor authentication. Company uses a cloud-based identity and access management service that enables access to external resources. is performed using a secure, automatic cloud-based backup and restore service.


text: we believe that our third-party vendors and service providers have their own respective cybersecurity protocols which our management believes to be adequate for protecting any of the Company's data that might be in their possession from time to time; however, having such protocols is not necessarily a condition for us using or not using the services of any such vendors or providers.


text: Chief Financial Officer is responsible for assessing and managing cybersecurity risks, through his oversight of our IT service provider that manages our IT. Our CFO has a Doctorate Degree in Information Technology Management and has specific cybersecurity expertise. The Company has an Information Technology Policy that, among other things, governs and provides cybersecurity policies and processes, including defining safety measures to protect the Company's confidentiality, integrity and availability of data and other intellectual properties, as well as to define the manner in which information is stored, saved and routed in the Company's network. Additionally, the Board and management believe cybersecurity represents an important component of the Company's overall approach to risk management and oversight, especially as the Company moves towards commercialization of its first product.


text: threats have not materially affected, and are not reasonably likely to affect, the Company, including its business strategy, results of operations or financial condition while we are strategically focused on pursuing development of our Casamora property. The Company is not aware of any material security breach to date.


text: Accordingly, the Company has not incurred any expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing a disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations. There can be no assurance that the Company's third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be fully implemented, complied with or effective in protecting the Company's systems and information.


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.

companyName: BITMINE IMMERSION TECHNOLOGIES, INC.

ticker: BMNR


text: these risk assessments, we redesign, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with our Chief Executive Officer and Chief Financial Officer who manage the risk engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company. have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board addresses the Company's cybersecurity risk management as part of its general oversight function. The Board' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats. We maintain a cybersecurity risk management program designed to identify, assess, and manage material risks from cybersecurity threats to our information systems and the digital assets and data we handle. Our program includes periodic risk assessments, control implementation, testing, and incident response processes, and it is integrated with our broader enterprise risk management framework.


text: Assessment and mitigation. We conduct periodic and event-driven risk assessments to identify reasonably foreseeable internal and external cybersecurity risks. Following these assessments, we implement and maintain safeguards designed to minimize identified risks and remediate gaps, including multi-factor authentication, privileged access management, network segmentation, endpoint protection, vulnerability scanning, and patch management. For digital asset-related operations, we emphasize multi-party key controls, segregation of duties, and monitoring of validator performance and custody providers.


text: risk management. We rely on certain third-party service providers, including custodians, cloud and data center providers, staking/validator services, and other vendors. We assess relevant providers' security controls during onboarding and periodically thereafter, including certifications, audit reports, incident history, and contractual commitments to notify us of security incidents that may affect our company. We incorporate cybersecurity requirements into applicable contracts. Governance.


text: Our Board oversees cybersecurity risk as part of its overall risk oversight. The Audit Committee receives regular briefings on cybersecurity threats, risk assessments, and mitigation activities from management. Our Chief Executive Officer and Chief Financial Officer are responsible for implementing our cybersecurity risk management program and for coordinating incident response. Management reviews significant cybersecurity assessments and reports, allocates budgets, and approves security priorities. Incidents.


text: To date, we have not experienced cybersecurity incidents that have materially affected our business strategy, results of operations, or financial condition. We maintain processes to timely escalate incidents to management and the Audit Committee where appropriate, and to evaluate whether any incident is material. If we determine that a cybersecurity incident is material, we will make required disclosures consistent with applicable SEC rules.


text: recognize the critical importance of maintaining the trust and confidence of business partners, employees and patients, toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. Our board of directors is actively involved in oversight of our risk management activities, and cybersecurity represents an important element of our overall approach to risk management. Our cybersecurity policies, standards, processes and practices are based on recognized frameworks established by the UK governments' National Cyber Security Centre and other applicable industry standards. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: Bio Green Med Solution, Inc.

ticker: BGMS


text: Risk Management and Strategy; Effect of Risk face risks related to cybersecurity such as unauthorized access, cybersecurity attacks and other security incidents, including as perpetrated by hackers and unintentional damage or disruption to hardware and software systems, loss of data, and misappropriation of confidential information. To identify and assess material risks from cybersecurity threats, we maintain a comprehensive cybersecurity program to ensure our systems are effective and prepared for information security risks, including regular oversight of our programs for security monitoring for internal and external threats to ensure the confidentiality and integrity of our information assets. We consider risks from cybersecurity threats alongside other company risks as part of our overall risk assessment process. We employ a range of tools and services, including regular network and endpoint monitoring, audits, vulnerability assessments, and penetration testing to inform our risk identification and assessment. As discussed in more detail under "Cybersecurity Governance" below, our audit committee provides oversight of our cybersecurity risk management and strategy processes, which are led by our Chief Financial Officer.


text: also identify our cybersecurity threat risks by comparing our processes to standards set by the UK governments' National Cyber Security Centre. To provide for the availability of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against and respond to cybersecurity incidents, we undertake the following activities: monitor emerging data protection laws and implement changes to our processes that are designed to comply with such laws;


text: our policies, practices and contracts (as applicable), require employees, as well as third parties that provide services on our behalf, to treat confidential information and data with technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence;


text: regular training for our employees regarding cybersecurity threats as a means to equip them with effective tools to address cybersecurity threats, and to communicate our evolving information security policies, standards, processes and practices;


text: the National Cyber Security Centre incident handling framework to help us identify, protect, detect, respond and recover when there is an actual or potential cybersecurity incident; information security risk insurance that provides protection against the potential losses arising from a cybersecurity incident.


text: response to an incident involves the coordination of activities to detect, respond to and recover from cybersecurity incidents, which include processes to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable legal obligations and mitigate damage to our business and reputation.


text: part of the above processes, we regularly engage with consultants, auditors and other third parties, including having a third-party independent qualified and accredited advisor review our cybersecurity program to help identify areas for continued focus, improvement and compliance.


text: processes also address cybersecurity threat risks associated with our use of third-party service providers, including our suppliers and manufacturers or who have access to patient and employee data or our systems. In addition, cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence. Additionally, we would require those third parties, although there are currently none, that could introduce significant cybersecurity risk to us to agree by contract to manage their cybersecurity risks in specified ways, and to agree to be subject to cybersecurity audits, which we describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the risk factor heading " Security incidents, loss of data and other disruptions could compromise sensitive information related to our business or prevent us from accessing critical information and expose us to liability " which disclosures are incorporated by reference herein. have no t experienced any material cybersecurity incidents and the expenses we have incurred from cybersecurity incidents were immaterial.


text: is an important part of our risk management processes and an area of focus for our board of directors and management. The audit committee of our board of directors is responsible for the oversight of risks from cybersecurity threats. least annually, our audit committee receives an update from management of our cybersecurity threat risk management and strategy processes.


text: In such sessions, our audit committee generally receives materials that include a cybersecurity dashboard and other materials discussing current and emerging material cybersecurity threat risks, and describing our ability to mitigate those risks, as well as recent developments, evolving standards, technological developments and information security considerations arising with respect to our peers and third parties.


text: Our audit committee also receive prompt and timely information regarding any cybersecurity incident that meets establishing reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed. To date, we have not experienced any cyber security incident.


text: of our audit committee are also encouraged to regularly engage in conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs. Material cybersecurity threat risks are also considered during separate board meeting discussions of important matters like enterprise risk management, operational budgeting, business continuity planning, mergers and acquisitions, brand management, and other relevant matters.


text: cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by our Chief Financial Officer.


text: Our Chief Financial Officer has been responsible for our IT functions for 20 years and has managed the IT function of companies generally for the last 35 years. The management team members are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan. As discussed above, the management team members report to the audit committee of our board of directors about cybersecurity threat risks, among other cybersecurity related matters, periodically.


text: Cybersecurity risk management is an important part of the Company's overall risk management efforts. We maintain a comprehensive enterprise-wide information security program that comprises policies and controls designed to identify, safeguard against, detect, respond to, mitigate and manage reasonably foreseeable cybersecurity risks and threats. Our approach utilizes diverse security tools to prevent, identify, investigate, resolve and recover from vulnerabilities and security incidents. These include, but are not limited to, internal reporting, monitoring and detection tools. We use a collaborative, enterprise-wide strategy to address cybersecurity risks and allocate significant resources to our cybersecurity and risk management processes, which efforts are intended to adapt to the evolving cybersecurity landscape and promptly address emerging threats. Our cybersecurity risk management program aligns with the National Institute of Standards and Technology (NIST) framework and is organized into five key functions: identification, protection, detection, response and recovery. We regularly assess the threat landscape and employ a layered cybersecurity strategy to prevent, detect and mitigate threats.

companyName: SRx Health Solutions, Inc.

ticker: SRXH


text: All employees undergo security awareness training, with regular testing through simulated phishing emails. Certain employee positions require additional role-based, specialized security awareness or other cybersecurity training, as applicable. Simulations, drills and assessments are conducted to test our defenses from both a technical and an operational perspective.


text: Management plays a key role in assessing and managing material risks related to cybersecurity threats, including evaluating potential vulnerabilities, monitoring the effectiveness of controls, and ensuring timely remediation of any identified gaps. This ongoing effort includes the coordination of internal and external resources to respond to emerging cybersecurity threats and ensure our systems are resilient against attacks.


text: assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data.


text: Board of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters. The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities, and is responsible for ensuring that the Company has processes in place to identify, evaluate and manage cybersecurity risks, as well as appropriate processes and programs to mitigate cybersecurity incidents if they occur. Significant cybersecurity matters, including those related to incidents, are escalated to the Board of Directors.


text: We face cybersecurity threats in the ordinary course of our business and have faced cybersecurity threats and breach attempts in the past.


text: Such threats and breach attempts have not materially affected our business, strategy, results of operations or financial condition. At any given time, however, we may face known or unknown cybersecurity risks and threats that cannot be fully prevented or mitigated, and we may discover vulnerabilities in our cybersecurity programs. Therefore, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. For more information on the cybersecurity risks we face, please refer to "A failure of one or more key information technology systems, networks or processes may materially adversely affect our ability to conduct our business." in Item 1A. "Risk Factors."


text: we have never had a material cybersecurity incident that impacted our operations, we face various cyber and other security threats, including attempts to gain unauthorized access to sensitive information and networks; employee threats; virtual and cyber threats to our directors, officers, and employees; threats to the security of our facilities and infrastructure; and threats from terrorist acts or other acts of aggression. Our customers and vendors face similar threats. We utilize internal and external independent controls to monitor and mitigate the risk of these threats. All our key business processes utilize third-party software platforms. We do not retain any sensitive customer information outside of these systems.

companyName: PARKS AMERICA, INC

ticker: PRKA


text: impact of potential cybersecurity threats is difficult to predict, but one or more of them could result in the loss of information or capabilities, harm to individuals or property, damage to our reputation, loss of business, regulatory actions, and potential liability, any of which could have a material adverse effect on our financial position, results of operations and/or cash flows. These threats could lead to losses of sensitive information or capabilities, harm to personnel, infrastructure, or products, and/or damage to our reputation or affect our vendor's ability to perform under our contracts.


text: incident response involves every part of our organization, including business operations, finance and outside service providers for key business applications. Our Board of Directors oversees all business, property and affairs of the Company, including cybersecurity risks. Our management keep the members of the Board informed of our business through discussions at Board meetings and by providing them with reports and other materials throughout the year.


text: acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: INNO HOLDINGS INC.

ticker: INHD


text: a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.


text: our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.


text: are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.


text: our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats.


text: a discussion of potential cybersecurity risks affecting us, please refer to the "Risk Factors" section of our Registration Statement on Form S-1 filed with the Securities and Exchange Commission on October 20, 2023 titled " Our systems and information technology infrastructure may be subject to security breaches and other cybersecurity incidents. "


text: Like many companies, we face significant and persistent cybersecurity risks. The small size of our organization and limited resources could exacerbate these risks. Our business strategy, results of operations, and financial condition have not, to date, been affected by risks from cybersecurity threats. During the reporting period, we have not experienced any material cyber incidents, nor have we experienced the ordinary course of our business, we collect and store sensitive data, including intellectual property. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management strategy, which is comprised of a wide array of policies, standards, architecture, processes, and governance. Under the guidance and supervision of our Interim Chief Executive Officer, we further limit risk by delegating our information technology and cybersecurity to a leading third-party IT consultant to safeguard our networks. Additionally, as an added layer of security, all of our data is stored on the cloud.

companyName: Sonnet BioTherapeutics Holdings, Inc.


text: Despite being a small organization, we are committed to maintaining governance and oversight of these risks and to implementing standard operating procedures ("SOPs") and training to help us assess, identify, monitor and respond to these risks. Employees are trained to avoid phishing emails, and our internal controls system is designed to mitigate the risk of payments of fraudulent invoices.


text: We aim to incorporate industry best practices for companies of our size and financial strength throughout our cybersecurity program. Our Board has ultimate oversight of cybersecurity risk. The Interim Chief Executive Officer reports to our Board. Our Interim Chief Executive Officer provides periodic updates to the Board on (1) any critical cybersecurity risks; (2) ongoing cybersecurity initiatives and strategies;


text: (3) applicable regulatory requirements; and (4) industry standards. The Interim Chief Executive Officer also notifies the Board of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.


text: Risk Management and Strategy recognize the increasing volume and sophistication of cyber threats and take our responsibility to protect the information and systems under our purview seriously. We consider cybersecurity threat risks alongside other Company risks as part of our overall risk assessment process. Our cybersecurity processes aim to provide a comprehensive approach to assess, identify, manage, mitigate, and respond to cybersecurity maintain a cybersecurity risk program predicated on a risk-based approach. We use cost-effective controls that are commensurate with the risk and sensitivity of our specific information systems, control systems and enterprise data. Our cybersecurity program incorporates best practices and industry standards from multiple sources and is designed to comply with applicable regulations. The cybersecurity program includes, but is not limited to, the following elements: risk assessment, policies and procedures, training and awareness, auditing, log collection and analysis, threat hunting and intelligence surveillance, compliance monitoring and testing, and incident response.

companyName: Optex Systems Holdings Inc

ticker: OPXS


text: internal professionals collaborate with external subject matter specialists, as necessary. All third parties engaged for such matters are subjected to scrutiny to ensure they satisfy our security standards. We periodically review our third-party engagements to ensure that the providers maintain the necessary levels of protection and competency, as well as to oversee and identify potential cybersecurity risks and/or threats from such engagements.


text: describe how risks from cybersecurity threats could materially affect us, including our business strategy, results of operations, or financial condition, as part of our risk factor disclosures at Part I, Item 1A, "Risk Factors" of this Annual Report on Form 10-K.


text: is an important part of our risk management processes and an area of focus for our Board and management. Our Board is responsible for oversight of our cybersecurity risk, including the effectiveness of cybersecurity risk management policies and protocols, while our FSO and IT Manager are responsible for assessing and managing cybersecurity risk. We use a third-party service which monitors the Company's security threats twenty-four hours each day throughout the year. Any detected deviation from the expected operating parameters will initiate a communication to our IT Manager for investigation and remediation of the detected deviation in a timely manner. Our IT Manager has over 30 years of IT and cybersecurity experience.


text: IT Manager provides timely reports on cyber security incidents to the FSO, Danny Schoening, who also serves as the Chief Executive Officer and as Chairman of the board of directors. These reports may in turn be presented to the full board depending on the severity of the incident. In the event of a major incident, the Company's Incident Response policy will be executed and the appropriate parties notified.


text: management evaluates cybersecurity risk from computer viruses and more sophisticated and targeted cyber-related attacks such as ransomware, as well as cybersecurity failures resulting from human error and technological errors. Such risks are reviewed on a periodic basis as deemed appropriate.

companyName: Aether Holdings, Inc.

ticker: ATHR


text: overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: use of antivirus software, as well as other software to prevent and detect data intrusions.


text: installation of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure necessary, the use of third-party security experts if and when an incident is detected are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect, our business strategy, results of operations or financial conditions.


text: board of directors has yet to establish any formal committees related to cybersecurity risks. Management updates our board of directors regarding cybersecurity risks as necessary.


companyName: Nano Nuclear Energy Inc.

ticker: NNE


text: installation of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure necessary, the use of third-party security experts if and when an incident is detected are not aware of having experienced any material cybersecurity incidents. We are no t aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect, our business strategy, results of operations or financial conditions.


text: Inc. recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: SideChannel, Inc.

ticker: SDCH


text: Inc. has strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our risk management team works closely with our IT department to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Third Parties on Risk Management the complexity and evolving nature of cybersecurity threats, SideChannel, Inc. has relationships with a range of external experts, including cybersecurity assessors, consultants, and auditors in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights as needed, to ensure our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third parties may include audits, threat assessments, and consultation on security enhancements.


text: Third-party Risk we are aware of the risks associated with third-party service providers, SideChannel, Inc. implements stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes quarterly assessments by our Chief Information Security Officer ("CISO") and on an ongoing basis by our security engineers. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Board has established robust oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence. Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this domain.


text: The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively. CISO and the Chief Executive Officer ("CEO") play a pivotal role in informing the Audit Committee on cybersecurity risks.


text: They provide comprehensive briefings to the Audit Committee on a regular basis, with a minimum frequency of once per year. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; of ongoing cybersecurity initiatives and strategies;


text: reports and learnings from any cybersecurity events; and addition to our scheduled meetings, the Audit Committee, CISO and CEO maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive. The Audit Committee actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated into the broader strategic objectives of SideChannel, Inc. The Audit Committee conducts an annual review of the company's cybersecurity posture and the effectiveness of its risk management strategies. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: Management Personnel responsibility for assessing, monitoring and managing our cybersecurity risks rests with the CISO, Mr. Eric Gauthier. With over 20 years of experience in the field of cybersecurity, Mr. Gauthier brings a wealth of expertise to his role. His background includes extensive experience as an enterprise CISO and is well-recognized within the industry. His in-depth knowledge and experience are instrumental in developing and executing our cybersecurity strategies. Our CISO oversees our governance programs, tests our compliance with standards, remediates known risks, and leads our employee training program.


text: CISO is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The CISO implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the CISO is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: CISO, in his capacity, regularly informs the CEO and the Chief Financial Officer ("CFO") of all aspects related to cybersecurity risks and incidents. This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing SideChannel, Inc. Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Board of Directors, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.


text: organization prioritizes cybersecurity risk management, with leadership actively assessing and overseeing these risks. Our internal protocols require that significant cybersecurity risks be escalated to executive leadership, as well as to relevant management responsible for preventing, detecting, mitigating, and addressing cybersecurity incidents. These protocols ensure consistent and effective incident response, setting standards for internal notification and escalation. Additionally, they outline guidelines for external notifications, including disclosures to state or federal agencies or affected customers in the event of a cybersecurity incident. This structured framework supports our commitment to strong cybersecurity governance and risk management practices.

companyName: DFP HOLDINGS Ltd


text: of September 30, 2025, the Company has not identified any cybersecurity threats, including previous incidents, that have materially impacted our business strategy, results of operations, or financial condition. This assertion signifies our diligent efforts in managing and mitigating cybersecurity risks, contributing to the stability and continuity of our operations.


text: Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Voip-pal.com Inc

ticker: VPLM


text: We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs.


text: Oversee Third-party Risk Because we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes annual assessments of the SOC reports of our providers and implementing complementary controls. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. Risks from Cybersecurity Threats We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: During the year ended September 30, 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.


text: have no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk, which may make us susceptible to heightened cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: IB Acquisition Corp.

ticker: IBAC


text: have policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and have integrated these processes into our overall risk management systems and processes. We assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: CEMTREX INC

ticker: CETX


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations, or financial condition.


text: of September 30, 2025, we have not identified any indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements. For further discussion of cybersecurity risks, please refer to Item 1A. Risk Factors.


text: Data Inc. recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Vertical Data Inc.

ticker: VDTA


text: Vertical data inc. does not have a formalized cybersecurity risk management process. However, the organization is working toward implementing a framework for assessing, identifying, and managing material risks from cybersecurity threats. A managed IT service provider continuously works to evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. This includes assessing cybersecurity risk as part of an overall risk assessment and considering the likelihood and potential consequences of each risk. Plans also include the identification of critical cybersecurity risks (e.g., malware, phishing, ransomware, and unauthorized access) and the implementation of formalized mitigants to address those risks such as cybersecurity policies and incident response strategy.


text: Data Inc. does not currently engage with third parties in connection with cybersecurity risk management. Third-party consultants including cybersecurity auditors are being considered for future engagement, at which point any risks stemming from the use of third parties will be incorporated in the cybersecurity risk assessment.


text: Data Inc. has not encountered any cybersecurity risks or incidents that have materially impacted our business strategy, operational results, or financial condition. We remain dedicated to maintaining a strong cybersecurity posture by continually analyzing and improving our security procedures to reduce potential risks. This approach to cybersecurity is critical for protecting sensitive information and guaranteeing the reliability of our business operations.


text: Board of Directors is aware of the critical nature of managing risks associated with cybersecurity threats. The Board is committed to effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence.


text: Board of Directors is informed of relevant cybersecurity risks and related updates during Board meetings by the CFO. There have been no critical, time sensitive cybersecurity updates thus far, but if this did occur it would be escalated to the Board immediately.


text: Role Managing Risk the management team, the responsibility for assessing and managing cybersecurity risk falls under the purview of the CFO. To that extent, the Company leverages his extensive experience and specialized skills. This collaboration significantly bolsters our overall cybersecurity stance, creating a well-rounded and robust defense against emerging threats.


text: Data's IT Service Provider monitors cybersecurity events and logs for unusual activity or potential security breaches within the network. E-mail alerts are sent in real time as notification for any suspicious activity including phishing attempts, suspicious attachments, and other e-mail-related security concerns. The IT Service Provider also utilizes security tools to regularly conduct thorough scans of the network infrastructure. The tools help identify vulnerabilities, malware, and other potential threats, enabling a proactive measure to prevent and mitigate cybersecurity incidents.


text: CFO is responsible for escalation of pertinent cybersecurity risks to the board of directors. This includes briefings on existing threat scenarios, updates on incident response efforts, and recommendations for enhancing our cybersecurity stance.


text: Risk Management and Strategy recognize the importance of assessing, identifying, and managing risks from cybersecurity threats. Our approach to cybersecurity risk management is aligned with our risk profile and business.

companyName: GLOBAL TECHNOLOGIES LTD

ticker: GTLL


text: have leveraged the support of third-party information technology and security providers, including to perform a risk assessment designed to identify, assess, and manage cybersecurity risks. Further, we follow a formal, documented process to assess the data protection practices of certain third-party vendors that handle sensitive information on our behalf.


text: risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us or our business strategy, results of operations or financial condition, we could, from time to time, experience threats and security incidents relating to our and our third-party vendors' information systems. For more information, please see the section Governance


text: Related to Cybersecurity Risks consult with a third party for the strategic leadership and direction of our cybersecurity program. The consultant has nearly 15 years of experience as an information technology professional.


text: board of directors has oversight over cybersecurity risks. Our management provides periodic presentations to the board of directors on our cybersecurity program, including updates on cybersecurity risks and related cybersecurity strategy, as applicable. The management provides updates regarding our cybersecurity program to the board of directors when material.


text: we have not experienced any material cybersecurity threats or incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents


text: Company's Chief Executive Officer assesses risks from cybersecurity threats on an ongoing basis. As the Company grows it plans to develop a more robust and detailed strategy for cybersecurity. The Company has not encountered cybersecurity challenges that have materially impaired operations or financial condition.

companyName: Regen BioPharma Inc

ticker: RGBP


text: Company does not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition. Governance; Company's sole director and officer provides direct oversight over cybersecurity risk.


text: Cybersecurity Risk Management and Strategy Our Cybersecurity Risk Management program is an integrated component of the Enterprise Risk Management strategy intended to protect the confidentiality, integrity and availability of our critical systems and information.

companyName: Northfield Bancorp, Inc.

ticker: NFBK


text: We design and assess our program based on industry standards such as the National Institute of Standards and Technology Cybersecurity Framework and the Center for Internet Security Controls. This does not imply that we meet any particular technical standards, specifications, or requirements, but rather that we use these standards as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.


text: Our cybersecurity risk management program is aligned with the Company's business strategy. It shares common methodologies, reporting channels and governance processes that apply to other areas of enterprise risk, including legal, compliance, strategic, operational, and financial risks. Key elements of our cybersecurity risk management program include: • implementation of policies and procedures in the areas of Information Security, Business Continuity, Disaster Recovery, Privacy, Third-Party Service Provider Risk Management, and Incident Response; • risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise information technology environment; • an independent second line function, the Information Security Department, is principally responsible for managing our cybersecurity risk assessment processes, testing and monitoring of our security controls, and our response to cybersecurity incidents; • the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls, including but not limited to penetration testing; • training and awareness programs for Information Security Department members that include periodic and ongoing assessments to drive adoption and awareness of cybersecurity processes and controls; • throughout the year, all employees are trained on cybersecurity awareness, confidential information protection and simulated phishing attacks, and all directors engage in interactive training modules; • membership with the Financial Services Information Sharing and Analysis Center (FS-ISAC) and annual participation in the Cyber Attacks against Payment Systems (CAPS) exercises; • cybersecurity metrics and other risk management matters are reported to both management level committees and the CIT Committee; • a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and • a third-party risk management process for service providers, suppliers and vendors that analyses, monitors, reports, and mitigates cyber risks associated with third-party vendors, suppliers, and service providers.


text: In the last three fiscal years, the Company has not experienced any cybersecurity incident that has materially affected or is reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial conditions, and any expenses incurred from cybersecurity incidents have been immaterial. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors – "Risks Related to Operational Matters".


text: Cybersecurity Governance The Board of Directors established its CIT Committee with specific responsibilities for overseeing cybersecurity threats, among other things. Our Chief Information Security Officer provides the CIT Committee with periodic reports on our cybersecurity risks and any material cybersecurity incidents. The CIT Committee retains an independent external cybersecurity consultant who regularly attends all CIT Committee meetings and reports directly to the CIT Committee Chair. In addition, the Chief Information Security Officer provides periodic training and reports to our Board of Directors.


text: Northfield Bank maintains an Information and Cybersecurity Program under the leadership of our Chief Risk Officer, the Chief Information Officer, and the Chief Information Security Officer, with timely Board oversight for identifying and mitigating information security risks. The Information Security Department is primarily responsible for identifying, assessing and managing material risks from cybersecurity threats and overseeing cybersecurity vendors. The Information Security Department is led by our Chief Information Security Officer ("CISO"). Our immediate past CISO had over 15 years of experience in the cybersecurity space and has obtained professional security certifications and advanced training in the field of cybersecurity and technology. Northfield Bank is currently onboarding a new CISO, who comes to us from a money center bank and has a similar background. Our Chief Information Security Officer and our Chief Information Officer, along with key members of their departments, regularly collaborate with peer institutions, industry groups, and policymakers to discuss cybersecurity trends and issues and identify best practices. The information security program is periodically reviewed by such personnel with the goal of addressing changing threats and conditions. Our internal audit team, led by our Chief Internal Auditor, provides independent assurance and evaluation of processes, controls and cybersecurity risk management practices to ensure they are adequate and functioning as intended.


text: The Information Security Department also monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include briefings with internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the information technology environment.


text: Cybersecurity Risk Management and Strategy Our cybersecurity risk management program is an integrated component of the Enterprise Risk Management strategy designed to protect the confidentiality, integrity and availability of our critical systems and information.


text: We design and evaluate our program based on industry recognized standards such as the National Institute of Standards and Technology Cybersecurity Framework and the Center for Internet Security Controls. This does not imply that we meet any particular technical standards, specifications, or requirements, but rather that we use these standards as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.


text: Our cybersecurity risk management program is closely aligned with the Company's business strategy. It shares common methodologies, reporting channels and governance processes that apply to other areas of enterprise risk, including third-party relationships, legal, compliance, strategic, operational, and financial. Key elements of our enterprise cybersecurity risk management program include: • implementation of policies and procedures in the areas of Information Security, Business Continuity, Disaster Recovery, Privacy, Third-Party Relationship Risk Management, Risk Management, and Incident Response; • risk assessments designed to help identify material cybersecurity risks to our critical systems, data, products, services, and our broader enterprise information technology environment; • an independent second line function, the Information Security Department, which is principally responsible for managing our cybersecurity risk assessment processes, executing our incident response plan, and monitoring of our security controls; • the use of external service providers, where appropriate, to assess, test and enhance our security controls, including penetration testing, training, and table top exercises; • a comprehensive employee training and awareness program which includes periodic security assessments to test knowledge and reinforce adoption of security processes and controls that include simulated phishing attacks; • membership with the Financial Services Information Sharing and Analysis Center (FS-ISAC) and annual participation in the Cyber Attacks against Payment Systems (CAPS) exercises; • regular reporting of cybersecurity metrics and other risk/threat information matters to both the Management Risk and CIT Committees; • a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and • a third-party relationships risk management process for service providers, suppliers and vendors which analyses, monitors, reports, and mitigates cyber risks associated with third-party relationships.


text: Risks from cybersecurity threats, including any previous cybersecurity events, have not materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial conditions, and any expenses incurred from cybersecurity incidents have been immaterial. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors – "Risks Related to Operational Matters".


text: Cybersecurity Governance The Board of Directors has established its CIT Committee with specific responsibilities for overseeing the cybersecurity risk management program, among other things. Our Chief Information Security Officer ("CISO") provides the CIT Committee with periodic reports on cybersecurity risks, threats and any material cybersecurity incidents. The CIT Committee also retains an independent external cybersecurity consultant who attends all CIT Committee meetings and reports directly to the CIT Committee Chair. In addition, the external cyber security consultant provides periodic training to the CIT Committee and to our Board of Directors.


text: Northfield Bank maintains a comprehensive Information and Cybersecurity Program led by our Chief Risk Officer, the Chief Information Officer, and the CISO. The program is designed to identify and mitigate information security risks, with timely Board oversight. The Chief Risk Officer briefs the Board of Directors on information security matters during every meeting, ensuring that cybersecurity risks and strategies align with Northfield Bank's risk profile.


text: The Information Security Department is primarily responsible for identifying, assessing and managing material risks from cybersecurity threats and overseeing cybersecurity third-party relationships. The Information Security Department is led by our CISO, who has over 15 years of experience in the cybersecurity space and has obtained professional security certifications and advanced training in the field of cybersecurity and technology. Our CISO and our Chief Information Officer, along with key members of their departments, regularly collaborate with peer institutions, industry groups, policymakers and third-party relationships to discuss cybersecurity trends and issues and identify best practices. The cybersecurity risk management program is periodically reviewed to address changing threats and conditions. Our internal audit team, led by our Chief Internal Auditor, provides independent assurance and evaluation of processes, controls and cybersecurity risk management practices to ensure they are adequate and functioning as intended.


text: The Information Security Department also monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, including briefings with internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the information technology environment.


text: We recognize the importance of developing, implementing and maintaining cybersecurity measures designed to safeguard our information systems and protect the confidentiality, integrity and availability of our data.

companyName: MACOM Technology Solutions Holdings, Inc.

ticker: MTSI


text: Managing Material Risks & Integrated Risk Management In the ordinary course of our business, we and our third-party service providers collect, maintain and transmit sensitive data on our networks and systems, including Company and third-party intellectual property and proprietary or confidential business information (such as research data and personal information). The secure maintenance of this information is critical to our business and reputation. In addition, we are heavily dependent on the functioning of our information technology infrastructure to carry out our business processes. While we have adopted administrative, technical and physical safeguards to protect such systems and data, our systems and those of third-party service providers and customers may be vulnerable to a cyber-attack.


text: We have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include response to and an assessment of internal and external threats to the security, confidentiality, integrity and availability of our data and information systems, along with other material risks to our operations, at least annually or whenever there are material changes to our systems or operations.


text: We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. Our risk management team collaborates with our Head of Information Security to evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. We have processes to detect potential vulnerabilities and anomalies through technical safeguards and have adopted policies and procedures around internal and external notification of cybersecurity incidents.


text: Engaging Third Parties on Risk Management As part of our risk management process, we engage with a range of outside providers, including cybersecurity assessors, consultants, legal advisors and auditors, to conduct periodic internal and external assessments, including, but not limited to, penetration testing. Our collaboration with these third parties also includes regular audits, threat assessments and consultation on security enhancements.


text: Overseeing Third-party Risk We rely on the third parties for various business functions. In certain circumstances, our third-party services providers have access to some of our information systems and data, depending on the nature of their engagements with us, and we rely on such third parties for the continuous operation of our business operations. Because we are aware of the risks associated with third-party service providers, we conduct vendor diligence and security assessments of third-party providers before engagement and maintain ongoing monitoring to oversee compliance with our cybersecurity standards.


text: Monitoring Cybersecurity Incidents The Head of Information Security implements and oversees processes for the monitoring of our information systems. This includes, but is not limited to, the deployment of security measures and system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, we have implemented an incident response plan, which includes actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Risks from Cybersecurity Threats As of the date of this report, we are not aware of a cybersecurity incident that resulted in a material effect on our business strategy, results of operations or financial condition, but we cannot provide assurance that we will not be materially affected in the future by such risks or any future material incidents. Despite our continuing efforts, we cannot guarantee that our cybersecurity safeguards will prevent breaches or breakdowns of our or our third-party service providers' information technology systems, particularly in the face of continually evolving cybersecurity threats and increasingly sophisticated threat actors. A cybersecurity incident may materially affect our business, results of operations or financial condition, including where such an incident results in reputational, competitive or business harm or damage to our brand, lost sales, reduced demand, loss of intellectual property rights, significant costs or the Company being subject to government investigations, litigation, fines or damages. For more information, see "Our business and operations could suffer in the event of a security breach, cybersecurity incident or disruption of our information technology systems" under Item 1A. Risk Factors. Governance.


text: Board of Directors Oversight Our Board of Directors has established oversight mechanisms to manage risks from cybersecurity threats. Our Audit Committee has primary responsibility for oversight of cybersecurity. At least once per year and following any material cybersecurity incidents, the Audit Committee reviews our assessment and management of information security, cybersecurity and technology risks, including the information security and risk management programs and strategies and mitigation strategies. The Audit Committee also reviews the response to data security incidents and breaches as well as the management of third-party cybersecurity risk.


text: Management's Role Managing Risk At the management level, our cybersecurity program is managed by our Head of Information Security, who reports to our Vice President of Information Technology. Our Head of Information Security has over twenty-five years of information technology experience, with five years of experience in the information security space. Our Head of Information Security holds a Bachelor of Science in Computer Science and a Master of Business Administration.


text: We have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include regular risk assessments and control testing conducted at least annually or whenever there are material changes to our systems or operations.


text: We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. Our risk management team collaborates with our Chief Information Security Officer ("CISO") to evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. We have processes designed to detect potential vulnerabilities and anomalies through technical safeguards and have adopted policies and procedures around internal and external notification of cybersecurity incidents.


text: As part of our risk management process, we engage with a range of outside providers, including cybersecurity assessors, consultants, legal advisors and auditors, to conduct periodic internal and external assessments, including, but not limited to, penetration testing. Our collaboration with these third parties also includes regular audits, threat assessments and consultation on security enhancements.


text: Overseeing Third-party Risk We rely on third parties for various business functions. In certain circumstances, our third-party services providers have access to some of our information systems and data, depending on the nature of their engagements with us, and we rely on such third parties for the continuous operation of our business operations. Because of the risks associated with third-party service providers, we conduct vendor diligence and security assessments of certain third-party providers before engagement and maintain ongoing monitoring to oversee compliance with our cybersecurity standards.


text: Monitoring Cybersecurity Incidents The CISO implements and oversees processes for the monitoring of our information systems supported by a security operations center (SOC) and automated monitoring tools. We conduct continuous vulnerability scanning, incident simulations and proactive threat hunting. In the event of a cybersecurity incident, we have implemented an incident response plan, which includes actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Risks from Cybersecurity Threats The semiconductor industry faces heightened cybersecurity risks, and we have experienced and expect to continue to experience cyber-attacks. To-date, we have been successful in defending and protecting against such attacks. However, there is no assurance that we will continue to be able to be successful in protecting and defending against such attacks in the future. As of the date of this report, we are not aware of a cybersecurity incident that resulted in a material effect on our business strategy, results of operations or financial condition, but we cannot provide assurance that we will not be materially affected in the future by such risks or any future material incidents. Despite our continuing efforts, we cannot guarantee that our cybersecurity safeguards will prevent breaches or breakdowns of our or our third-party service providers' information technology systems, particularly in the face of continually evolving cybersecurity threats and increasingly sophisticated threat actors. A cybersecurity incident may materially affect our business, results of operations or financial condition, including where such an incident results in reputational, competitive or business harm or damage to our brand, lost sales, reduced demand, loss of intellectual property rights, significant costs or the Company being subject to government investigations, litigation, fines or damages. For more information, see "Our business and operations could suffer in the event of a security breach, cybersecurity incident or disruption of our information technology systems" under Item 1A. Risk Factors. Governance.


text: Board of Directors Oversight Our Board of Directors has established oversight mechanisms to manage risks from cybersecurity threats. Our Audit Committee has primary responsibility for oversight of cybersecurity. At least quarterly and following any material cybersecurity incidents, the Audit Committee reviews management's assessments and management of information security, cybersecurity and technology risks, including the information security and risk management programs and strategies and mitigation strategies. The Audit Committee also reviews the response to data security incidents and breaches as well as the management of third-party cybersecurity risk.


text: At the management level, our cybersecurity program is managed by our CISO, who reports to our Senior Vice President and Chief Financial Officer. Our CISO has over twenty-five years of information security experience.


text: We are increasingly dependent on sophisticated software applications and computing infrastructure to conduct key operations. We depend on both our own systems, networks, and technology as well as the systems, networks and technology of our contractors, consultants, vendors and other business partners.

companyName: OptiNose, Inc.


text: Cybersecurity Program Given the importance of cybersecurity to our business, we maintain a robust cybersecurity program to support both the effectiveness of our systems and our preparedness for information security risks. This program includes a number of safeguards, such as: complex password protection; multi-factor authentication with geo-location and multi-step confirmation; continuous monitoring and alerting systems for internal and external threats; regular evaluations of our cybersecurity program, including periodic internal and external audits, penetration tests, and incident response planning; and industry benchmarking. We also require cybersecurity training when onboarding new employees and contractors assigned access to Optinose networks, as well as annual, required cybersecurity awareness training for our employees and contractors assigned access to Optinose networks. Our program leverages industry frameworks, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) to strengthen our program effectiveness and reduce cybersecurity risks.


text: We use a risk-based approach with respect to our use and oversight of third-party IT service providers, tailoring processes according to the nature and sensitivity of the data accessed, processed, or stored by such third-party IT service provider and performing additional risk screenings and procedures, as appropriate. We use a number of means to assess cyber risks related to our third-party IT service providers, including conducting due diligence in connection with onboarding new IT service providers and, where appropriate, annual due diligence of such third-party IT service providers. We also collect and assess cybersecurity audit reports and other supporting documentation when available and include appropriate security terms in our IT contracts where applicable as part of our oversight of third-party IT service providers. Because most of our critical IT systems are cloud-based and hosted by third-party IT service provides, we are dependent on the security controls of such vendors.


text: Process for Assessing, Identifying and Managing Material Risks from Cybersecurity Threats In the event of a cybersecurity incident, we maintain a regularly reviewed incident response program. Pursuant to the program and its escalation protocols, designated personnel are responsible for assessing the severity of an incident and associated threat, determining any public disclosure obligations with respect to the incident, containing the threat, remediating the threat, including recovery of data and access to systems, analyzing any reporting obligations associated with the incident, and performing post-incident analysis and program enhancements. We maintain an Incident Response standard operating procedure ("IRP SOP") and business continuity and disaster recovery plans in the event of a significant cybersecurity incident.


text: We have relationships with a number of third-party service providers to assist with cybersecurity containment and remediation efforts, including forensic investigation firms, insurance providers and various law firms.


text: Management Oversight The controls and processes employed to assess, identify and manage material risks from cybersecurity threats are implemented and overseen by our Vice President, Information Technology. Our Vice President, Information Technology leverages his over 30 years of experience as CIO/CTO/CISO in companies such as Therakos, Healthtronics IT Solutions, Endo Pharmaceuticals, Johnson and Johnson, and Animas. Our Vice President, Information Technology is responsible for the day-to-day management of the cybersecurity program, including the prevention, detection, investigation, response to, and recovery from cybersecurity threats and incidents, and is regularly engaged to help ensure the cybersecurity program functions effectively in the face of evolving cybersecurity threats. The Vice President, Information Technology is a member of our senior management team and provides regular briefings for our senior management team on cybersecurity matters, including threats, events, and program enhancements.


text: Our Board of Directors has overall responsibility for risk oversight including oversight of cybersecurity risk matters. The Board is responsible for reviewing, discussing with management, and overseeing the Company's data privacy, information technology and security and cybersecurity risk exposures, including: (i) the potential impact of those exposures on the Company's business, financial results, operations and reputation; (ii) the programs and steps implemented by management to monitor and mitigate any exposures; (iii) the Company's information governance and cybersecurity policies and programs; and (iv) major legislative and regulatory developments that could materially impact the Company's data privacy and cybersecurity risk exposure. On no less than an annual basis, the Vice President, Information Technology reports to the Board on information technology and cybersecurity matters, including a detailed threat assessment relating to information technology risks, the potential impact of those exposures on the Company's business, financial results, operations and reputation, the programs and steps implemented by management to monitor and mitigate exposures, the Company's information governance and cybersecurity policies and programs, and significant legal/regulatory developments that could materially impact the Company's cybersecurity risk exposure.


text: The Audit Committee of our Board is responsible for assisting the Board in performing its oversight of our cybersecurity program, its effectiveness and any breaches or other cybersecurity events. Further our Vice President, Information Technology is responsible for apprising the Audit Committee of the Board of cybersecurity incidents consistent with our IRP SOP, promptly for higher priority incidents and in the aggregate for lower priority incidents. Additionally, we maintain a standing agenda item at our quarterly Audit Committee meetings to report any cybersecurity incidents or risk matters.


text: Cybersecurity Risks Our cybersecurity risk management processes are integrated into our overall Enterprise Risk Management ("ERM") processes. As part of our ERM processes, department leaders identify, assess and evaluate risks impacting our operations across the Company, including those risks related to cybersecurity. Department leaders are asked to consider the severity and likelihood of certain risk factors, drawing upon their company knowledge and past business experience. While we maintain a robust cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement adequate security measures. For additional information, see "Item 1A—Risk Factors."


text: We also maintain cybersecurity insurance providing coverage for certain costs related to cybersecurity-related incidents that impact our own systems, networks, and technology or the systems, networks and technology of our contractors, consultants, vendors and other business partners.


text: Cybersecurity Program Given the importance of cybersecurity to our business, we maintain a robust cybersecurity program to support both the effectiveness of our systems and our preparedness for information security risks. This program includes a number of safeguards, such as: complex password protection; multi-factor authentication with geo-location and multi-step confirmation; continuous monitoring and alerting systems for internal and external threats; regular evaluations of our cybersecurity program, including periodic internal and external audits, penetration tests, and incident response planning; and industry benchmarking. We also require cybersecurity training when onboarding new employees and contractors assigned access to Optinose networks, as well as bi-annual, required cybersecurity awareness training for our employees and contractors assigned access to Optinose networks. Our program leverages industry frameworks, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) to strengthen our program effectiveness and reduce cybersecurity risks.


text: Management Oversight The controls and processes employed to assess, identify and manage material risks from cybersecurity threats are implemented and overseen by our Vice President, Information Technology. Our Vice President, Information Technology leverages her over 25 years of IT Leadership experience in pharmaceutical companies such as Endo Pharmaceuticals and multiple Johnson and Johnson companies. Our Vice President, Information Technology is responsible for the day-to-day management of the cybersecurity program, including the prevention, detection, investigation, response to, and recovery from cybersecurity threats and incidents, and is regularly engaged to help ensure the cybersecurity program functions effectively in the face of evolving cybersecurity threats. The Vice President, Information Technology provides regular briefings for our senior management team on cybersecurity matters, including threats, events, and program enhancements.


text: Risk Management and Strategy As part of our enterprise risk assessment function, which is led jointly by IZEA's President & COO; our Director, Systems & Security; and our Senior Development Operations (DevOps) leader, we have implemented processes to assess, identify and manage the material risks facing the company, including from cyber threats. Our enterprise risk assessment function is part of our overall risk management processes. Our cybersecurity program is built upon internationally recognized frameworks, such as SOC-2 compliance for systems and organization controls related to our software development, and maps to standards published by Center for Internet Security (CIS) for our day to day operational stance. We believe that our processes provide us with a comprehensive assessment of potential cyber threats. We conduct regular scans, penetration tests, and vulnerability assessments to identify any potential threats or vulnerabilities in our systems. Our processes to assess, identify and manage the material risks from cyber threats include the risks arising from threats associated with third party service providers, including cloud-based platforms.

companyName: IZEA Worldwide, Inc.

ticker: IZEA


text: We have developed a robust cyber crisis response plan which provides a documented framework for handling high severity security incidents and facilitates coordination across multiple parts of the company. Our incident response team constantly monitors threat intelligence feeds, handles vulnerability management and responds to incidents. In addition, we routinely perform training, simulations, and drills across company personnel.


text: Internally, we have a security awareness program which includes training that reinforces our information technology and security policies, standards and practices, and we require that our employees comply with these policies. The security awareness program offers training on how to identify potential cybersecurity risks and protect our resources and information. This training is mandatory for all employees on an annual basis, and it is supplemented by testing initiatives, including periodic phishing tests. We also provide specialized security training for certain employee roles, such as application developers. Finally, our privacy program requires all employees to take periodic awareness training on data privacy. This training includes information about confidentiality and security, as well as responding to unauthorized access to or use of information.


text: From time to time, we engage third-party service providers to enhance our risk mitigation efforts. For instance, we have routinely engaged an independent cybersecurity advisor to lead a cybersecurity crisis simulation exercise that has been used by our senior leaders to prepare for a possible cyber crisis. In addition, we have engaged: 7 Layer Solutions, a security auditor and advisor in systems administration and penetration testing; A-LIGN, a systems auditor and advisor for cybersecurity and compliance; Grant Thornton, an IT Systems auditor and assurance vendor; and KnowBe4, an email security and cybersecurity training partner. We also purchase insurance to protect us against the risk of cybersecurity breaches. Our General Counsel and CFO are responsible for our insurance programs and review our cyber insurance policies on an annual basis and assess whether we have appropriate coverage.


text: To date, risks from cybersecurity threats have not previously materially affected us, and we currently do not expect that the risks from cybersecurity threats are reasonably likely to materially affect us, including our business, strategy, results of operations or financial condition. However, as discussed more fully under "Item 1A – Risk Factors", the sophistication of cyber threats continues to increase, and the preventative actions we take to reduce the risk of cyber incidents and protect our systems and information may be insufficient. Accordingly, no matter how well designed or implemented our controls are, we will not be able to anticipate all security breaches of these types, including security threats that may result from third parties improperly employing AI technologies, and we may not be able to implement effective preventive measures against such security breaches in a timely manner.


text: Role of Management IZEA's President & COO, our Director, Systems & Security, and our Senior Development Operations (DevOps) leader, are jointly responsible for the day-to-day management of our cybersecurity risks. We have established a Security Council, which includes our President & COO; Director, Systems & Security; Senior Manager, Systems & Security; Chief Financial Officer; General Counsel and other senior officers, that meets on at least a quarterly basis to review cybersecurity and information security matters. The Security Council has primary management oversight responsibility for assessing and managing information security, fraud, vendor, data protection and privacy, and cybersecurity risks.


text: We have a security incident response framework in place. We use this incident response framework as part of the process we employ to keep our management and Board of Directors informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents. The framework is a set of coordinated procedures and tasks that our incident response team, under the direction of our President & COO, executes with the goal of ensuring timely and accurate resolution of cybersecurity incidents. Our cybersecurity framework includes regular compliance assessments with our policies and standards and applicable state and federal statutes and regulations. In addition, we validate compliance with our internal data security controls through the use of security monitoring utilities and internal and external audits.


text: Our President & COO and our Director, Systems & Security each have extensive experience in the information technology area. In particular, our Director, Systems & Security has over twenty years of professional experience in the information security area, including as a result of his service as a director of security, a security architect, and a software security engineer at companies such as Squarespace, Verizon Media (Oath), Tumblr, Bridgewater Associates and EMC.


text: Role of the Board of Directors The Audit Committee of the Board of Directors is responsible for the primary oversight of our information security programs, including relating to cybersecurity. The Audit Committee receives regular reports from our President & COO on, among other things, our cyber risks and threats, the status of projects to strengthen our information security systems, assessments of our security program, and our views of the emerging threat landscape. Our President & COO is responsible for reporting to the Committee on our company-wide enterprise risk assessment, and that assessment also includes an evaluation of cyber risks and threats. The Chair of the Audit Committee has the opportunity to report to the Board on cybersecurity risks and other matters reviewed by the Committee. Furthermore, all Board members are provided with updates on key points discussed during each Audit Committee meeting and may access the materials for each Audit Committee meeting.


text: As a matter of process, the Audit Committee annually reviews, and recommends to the Board its approval of, our information security policy and information security program. Furthermore, on an annual basis, the Board reviews and discusses our technology strategy with our President & COO and approves our technology strategic plan.


text: Risk Management and Strategy We have developed a cybersecurity program based on internationally recognized frameworks, such as SOC-2 compliance for systems and organization controls related to our software development, and maps to standards published by Center for Internet Security (CIS) for our day-to-day operational stance. We conduct regular scans, penetration tests, and vulnerability assessments to identify any potential threats or vulnerabilities in our systems. Our processes to assess, identify and manage the material risks from cyber threats include assessing the risks arising from threats associated with third party service providers, including cloud-based platforms.


text: We have developed a cyber crisis response plan for handling high severity security incidents and coordinating across multiple parts of the company. Our incident response team monitors threat intelligence feeds, handles vulnerability management and responds to incidents. In addition, we routinely perform training, simulations, and drills across company personnel.