text: for Identifying and Mitigating Threats: We follow a framework for identifying and mitigating cybersecurity threats, which outlines procedures for threat detection, incident response, and risk mitigation.


text: Training and Awareness Programs: We provide training to our management and employees designed to equip employees with the knowledge and skills necessary to identify and respond to cybersecurity risks, tailored based on the persons' roles within our organization.

companyName: Venu Holding Corp

ticker: VENU

secItem: Item 1C


text: Technology and External Consultants: We use external consultants or other third-party experts and service providers, where considered appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls.


text: the past fiscal year, we have no t identified risks from known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, operating results, or financial condition. We will continue to monitor and assess our cybersecurity risk management program as well as invest in and seek to improve such systems and processes as appropriate.


text: If we were to experience a material cybersecurity incident in the future, such incident may have a material adverse effect on our reputation, as well as our operations, business strategy, operating results, and financial condition.


text: board of directors is charged with overall oversight of our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. However, certain members of management are to report to our board of directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential.


text: of the key functions of our board of directors is informed oversight of our various processes for managing risk. An overall review of risk is inherent in our board of directors ongoing consideration of our long-term strategies, transactions and other matters presented to and discussed by the board of directors. This includes a discussion of the likelihood and potential magnitude of various risks, including cybersecurity risks, and any actions management has taken to limit, monitor or control those risks.


text: Risk Management and Strategy operate in the life sciences sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations. We have developed and maintain processes, aligned with industry standards and best practices designed to assess, identify, and manage cybersecurity risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein. The scope of these processes includes risks that may be associated with both our internally managed information technology ("IT")

companyName: INTERPACE BIOSCIENCES, INC.

ticker: IDXG


text: systems and key business functions and sensitive data operated or managed by or maintained at third-party service providers. These processes are managed and monitored by a dedicated information technology team, which is led by our head of IT, and include mechanisms, controls, technologies, systems, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the data and maintain a stable information technology environment. We constantly monitor our information technology environment for abnormal behavior, conduct penetration and vulnerability testing, data recovery testing, security audits, and ongoing risk assessments, including due diligence on our key technology vendors and other third party service providers that have access to the personal information we collect, use, store, and transmit. We also conduct periodic employee trainings on cyber and information security, among other topics. We leverage standard industry tools from a software and hardware perspective and maintain a cybersecurity risk insurance policy.


text: consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. In the last fiscal year, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, which have materially affected us, but we face certain ongoing cybersecurity risks threats that, if realized, are reasonably likely to materially affect us.


text: Board of Directors, as a whole and at the committee level, has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. The Compliance Committee, which is comprised solely of independent directors, has been designated by our Board to oversee cybersecurity risks. The Compliance Committee receives periodic updates on cybersecurity and information technology matters and related risk exposures. The Board also receives updates from management and the Compliance Committee on cybersecurity risks on at least an annual basis.


text: Vice President of Information Technology has over 15 years of experience managing information technology and cybersecurity matters. The Vice President of Information Technology, together with our senior leadership team, are responsible for assessing and managing cybersecurity risks and they work collaboratively across our company to implement policies and procedures designed to protect our information and systems from cybersecurity threats and to respond promptly to any material cybersecurity incidents in accordance with our incident response plans. A cross-functional team is responsible for responding to cybersecurity incidents.


text: We operate in the electric vehicle manufacturing sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. Both our executive management team and our board of directors are involved in the assessment, identification, and management of such risks, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: StableX Technologies, Inc.

ticker: SBLX


text: Our executive management team is responsible for day-to-day assessment, identification and management of material risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. The individual currently serving in this role is our Executive Chairman. The executive management team monitors current events in order to remain aware of current cybersecurity threats and is informed of cybersecurity incidents as they arise by our frontline personnel.


text: We engage a third-party consultant to review our cybersecurity defense measures, inform our executive management team of emerging cybersecurity threats, and assist our executive management team in responding to any potential cybersecurity incidents. The executive management team is also responsible for overseeing and identifying risks from cybersecurity threats associated with our use of any third-party service providers.


text: Our board of directors is responsible for oversight of risks from cybersecurity threats in conjunction with our executive management team. Our board of directors receives updates from our management team with respect to risks from cybersecurity threats and are notified of any new significant cybersecurity threats or incidents as they arise. Additionally, our board of directors considers risks from cybersecurity threats as part of its overall assessment of risk management, including its general oversight of the Company's business strategy, risk management policies, and financials.


text: To date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our business strategy, results of operations or financial condition, and we are no t aware of any cybersecurity incidents that are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. For further information regarding the risks associated with cybersecurity incidents, see "Risk Factors — Failure in our information technology and storage systems could significantly disrupt the operation of our


text: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: HWH International Inc.

ticker: HWH


text: We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management.


text: This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management continuously evaluate and addresses cybersecurity risks in alignment with our business objectives and operational needs. We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing. considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee (the "Committee")


text: oversight of cybersecurity, data privacy and other information technology risks. The Committee oversees management's implementation of our cybersecurity risk management program and cybersecurity risk exposures, and the steps taken by management to monitor and mitigate cybersecurity risks. The Committee is composed of members of our board of directors with diverse expertise, which has prepared them to oversee our cybersecurity risks.


text: The Committee receives periodic reports from management on our cybersecurity risks. In addition, management updates the Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: The Committee reports to the Board regarding its activities, including those related to cybersecurity. The Board also receives briefings from management on our cybersecurity risk management program.


text: Our management team, including our Chief Executive Officer, are responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security consultants; threat intelligence and other information obtained from governmental, public or private sources, including external consultants which may be engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our management team's experience includes monitoring the cybersecurity landscape for new risks and best practices, developing and executing cybersecurity strategies, overseeing related governance policies, testing compliance with applicable technical standards, remediating known risks and leading employee training programs.


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Alset Inc.

ticker: AEI


text: Material Risks and Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management continuously evaluate and addresses cybersecurity risks in alignment with our business objectives and operational needs. from Cybersecurity Threats have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee (the "Committee")


text: Committee receives periodic reports from management on our cybersecurity risks. In addition, management updates the Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Committee reports to the Board regarding its activities, including those related to cybersecurity. The Board also receives briefings from management on our cybersecurity risk management program.


text: management team, including our Chief Executive Officer, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security consultants; threat intelligence and other information obtained from governmental, public or private sources, including external consultants which may be engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our management team's experience includes monitoring the cybersecurity landscape for new risks and best practices, developing and executing cybersecurity strategies, overseeing related governance policies, testing compliance with applicable technical standards, remediating known risks and leading employee training programs.


text: Company depends on the proper functioning, availability and security of its information systems, including financial, data processing, communications and operating systems. Several information systems are software applications provided by third parties. Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, like other companies in our industry, we could, from time to time, experience threats and security incidents related to our and our third-party vendors' information systems, including attempts to gain unauthorized access to our confidential data, and other electronic security breaches. Such cybersecurity attacks can range from individual attempts to gain unauthorized access to our information technology systems to more sophisticated security threats. While we employ a number of measures to prevent, detect and mitigate these threats, there is no guarantee such efforts will be successful in preventing a cybersecurity attack. A cybersecurity attack could compromise the confidential information of our employees, customers and vendors. A successful cybersecurity attack could disrupt and otherwise adversely affect our business operations.

companyName: AmpliTech Group, Inc.

ticker: AMPG


text: identification and management of cybersecurity related risks are integrated into our overall risk management process. Cybersecurity related risks are included in the risk universe we evaluate to assess top risks to the Company at least annually. To the extent our processes identify a heightened cybersecurity related risk, risk owners are assigned to develop risk mitigation plans, which are then tracked to completion.


text: Board of Directors considers cybersecurity risk as part of its risk oversight function and has delegated oversight of cybersecurity risk strategy and governance and of other information technology risks to the Audit Committee of the Board of Directors (the "Audit Committee"). The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity.


text: Senior management, including the Company's Chief Executive Officer, Chief Financial Officer and Chief Operating Officer, is responsible for assessing and managing cybersecurity risk, and provides briefings regarding the assessment and management of such risk to the Audit Committee, which then reports, as necessary, to the Board of Directors.


text: members of our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with in-house information-technology specialists, enables them to effectively assess and manage material risks from cybersecurity threats.


text: Company relies on in-house information-technology specialists to assist in managing relevant risks. Any cybersecurity incident would be reported promptly to management and material and potentially material incidents would be assessed by management and the Audit Committee for remediation and future prevention and detection.


text: Company, at least annually, updates its policies or procedures that could help mitigate cybersecurity risks. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. The Company has incorporated cybersecurity coverage in its insurance policies; however, there is no assurance that the insurance the Company maintains will cover all cybersecurity breaches or that policy limits will be sufficient to cover all related losses.


text: Management and Strategy are committed to protecting information and the underlying information systems involved in the functionality of our products and the operation of our business. We assess, identify, and manage material risks from cybersecurity threats through various processes and procedures, including: assessing risks, ad hoc, to identify the potential impact and likelihood of various risks and scenarios and to determine appropriate mitigation strategies and controls; third-party manufacturer, partner, and supplier selection processes; (iii) utilizing procedures for responding to cybersecurity incidents; training our employees, incident response personnel, and senior management on cybersecurity awareness; monitoring the responsibilities of our information technology team and evaluating our cybersecurity posture and performance on an ongoing basis;

companyName: DNA X, Inc.

ticker: SONM


text: conducting regular vulnerability scans and tests utilizing threat intelligence feeds in the assessment of hardware and software; and providers and other third parties, where appropriate, to assess, test, or otherwise assist with aspects of our systems addressing cybersecurity threats.


text: we are still in the process of developing a formal incident response plan, our team is trained and had practical experience to cover all phases of the incident management process, including identification, containment, eradication, recovery, and post-incident analysis.


text: Significant cybersecurity incidents are elevated within the hierarchy of management and assessed by a cross-functional, executive management-level team, which is responsible for making the necessary strategic decisions, prioritizing actions that can minimize the impact of the cybersecurity incidents on us and our customers, and determining the materiality of such incidents.


text: the past we were subject to attempts to compromise our information technology systems, and, like all information technology systems, our systems are potentially vulnerable to damage, unauthorized access, or interruption from a variety of sources. As of the date of this annual report on Form 10-K, we are not aware of any such attacks that have materially affected, or are reasonably likely to materially affect, us, including our business strategy, results of operations, or financial condition, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. In addition, our third-party service providers and other partners face similar cybersecurity threats, and although we assess these third parties' cybersecurity controls through a cybersecurity assessment, which may include a cybersecurity questionnaire depending on our risk evaluation, and include security and privacy addendums to our contracts where applicable, a cybersecurity incident any of these entities could materially adversely affect our business and results of operations. For more information on our cybersecurity-related risks, please see "Risks Related to Information Corporate Governance Cybersecurity Risks Oversight by the Members of our Board


text: Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats as a part of its overall risk oversight responsibilities. Such responsibility includes compliance with disclosure requirements, cooperation with law enforcement, and analyzing the related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full board for consideration. The Audit Committee receives annual reports on our cybersecurity risks from management. In addition, management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: management team, including our Chief Information Security Officer ("CISO"), is responsible for addressing, assessing, and managing our material risks from cybersecurity threats. Our CISO supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants (when applicable). Our management team's experience includes demonstrated expertise in cybersecurity, mobile and data devices, and smartphone software. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.


text: is a SPAC with no business operations. Since its initial public offering, its sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, HVII does not consider that it faces significant cybersecurity risk and has not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk.

companyName: Hennessy Capital Investment Corp. VII

ticker: HVII


text: depends on digital technologies, including information systems, infrastructure and cloud applications and services, including those of third parties with which it may deal. Sophisticated and deliberate attacks on, or security breaches in, its information systems or infrastructure, or the information systems or infrastructure of third parties or the cloud, could lead to corruption or misappropriation of its assets, proprietary information and sensitive or confidential data. Because of its reliance on the technologies of third parties, HVII also depends upon the personnel and the processes of third parties to protect against cybersecurity threats. In the event of a cybersecurity incident impacting HVII, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with the cybersecurity incident. As an early-stage company without significant investments in data security protection, there can be no assurance that HVII will have sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have adverse consequences on its business and lead to financial loss.


text: of the date of this Report, HVII has not identified any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that it believes have, or are likely to, materially affect it since its initial public offering.


text: We believe cybersecurity is critical to advancing our technological developments. As a U.S. commercial space company with an established manufacturing business, we face a multitude of cybersecurity threats common to most industries, such as ransomware and denial-of service. Our customers, suppliers, subcontractors, and business partners face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our business strategy, performance, and results of operations. These cybersecurity threats and related risks make it imperative that we expend resources on cybersecurity.

companyName: Sidus Space Inc.

ticker: SIDU


text: We engage third-party services to conduct evaluations of our security controls, whether through penetration testing, independent audits, or consulting on best practices to address new challenges. We have established cybersecurity security awareness training and ongoing monitoring.


text: In the event of an incident, we intend to follow our cybersecurity incident response plan, which outlines the steps to be followed from incident detection to mitigation, and notification. We contract with external firms that have extensive information technology and program management experience. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risks. As a commercial space company, we must comply with extensive regulations, including requirements imposed by the Department of Defense related to contracts with government agencies and reporting cybersecurity incidents to the SEC. In addition to following SEC guidance and implementing pre-existing third party frameworks, we have developed our own practices and frameworks, which we believe enhance our ability to identify and manage cybersecurity risks. Assessing, identifying, and managing cybersecurity related risks are factored into our overall business approach. We rely heavily on our supply chain to deliver our products and services, and a cybersecurity incident at a subcontractor, or business partner could materially adversely impact us. We require that our subcontractors report cybersecurity incidents to our IT Incident Response Coordinator who will investigate the direct impact of the incident. Once a potential incident has been confirmed, the Incident Response Coordinator will notify senior management that activation of the incident response plan is required and assign a severity rating, ranging from none to critical, based on the perceived impact.


text: The Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full Board for consideration. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with the Audit Committee.


text: While we have not experienced any material cybersecurity threats or incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While we maintain cybersecurity insurance, the costs related to cybersecurity threats or disruptions may not be fully insured. See "Risk Factors" for a discussion of cybersecurity risks.


text: have not had any reportable cybersecurity breaches or espionage, including what we may perceive or recognize as cybersecurity incidents, espionage or credible threats during the fiscal year ended December 31, 2024. To date, as a result, there has no t been any material adverse effect on our business operations or financial condition. If there is a cybersecurity attack, espionage and/or an infiltration of our files, data, customer data and the like, there would be a material adverse effect on our business, our reputation, our operations and financial condition. For example, our reputation would be damaged in the event of a cybersecurity infiltration. If there were a cybersecurity infiltration, we could lose access to our data which would disrupt our operations, and we even may not be able to operate. Such a loss of access might be temporary or permanent, and it might be localized or general. The level of disruption will depend on our backup systems. Our clients financial and other data could be taken and used against us to damage our reputation or cause harm to our clients in different ways. In the latter instance, we may be liable for monetary damages to our clients. We may be held for cyber ransom, which would be a loss to our financial resources. Our inability to operate, payment of damages, payment of ransom, and the costs of reparation of our systems, consultants and tangential expenses will all result in damage to our business and our financial resources.

companyName: EXOZYMES INC.

ticker: EXOZ


text: believe that we have implemented a comprehensive cybersecurity program aimed at identifying, monitoring, and mitigating cybersecurity risks to the best of our ability. Our security program encompasses information security responsibilities, incident response, and is diligently managed by our information technology consultants. Cybersecurity is integrated into our overall risk management framework, with consultation from our subject matter experts to assess and address potential cyber risks and their impacts.


text: is committed to providing the Audit Committee with regular cybersecurity updates, at least annually or more often as needed, based on emerging threats or specific incidents. These updates cover risk assessments, the current threat landscape, and any recent cybersecurity incidents.


text: Company has retained outside consultants to assist with information technology activities and has put in place governance measures for information security with a focus on continuous improvement of its systems. This includes control requirements for change management, patching processes, the implementation of multifactor authentication, comprehensive data backup strategies, and continuous security monitoring. Additionally, management continues to enhance our security controls, with any significant issues promptly reported to the Audit Committee.


text: management and strategy understand the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Processes to manage risks from cybersecurity threats have been incorporated as a part of our overall risk assessment process. Our cybersecurity risks include theft of business data, fraud or extortion, lack of access to our information systems, harm to employees, harm to business partners, violation of privacy laws, potential reputational damage, and litigation or other legal risk if a cybersecurity incident were to occur. It is difficult to assign a monetary materiality assessment to these risks or to the impact if we were to sustain a breach of our systems. Our approach is based on the premise that any cybersecurity incident could result in material harm to our company.

companyName: Vivos Therapeutics, Inc.

ticker: VVOS


text: utilize a seasoned and mature artificial intelligence-based security system that learns and monitors the actions of individuals that have access to our networks and systems, including location of access (notably from international locations), email, and SAAS platforms that we do not host. The system not only protects based off of the specific rules implemented, it also takes action based on user activity (including remote access to our systems by our employees) that is outside their normal behavior pattern. Additionally, our employees go through cybersecurity awareness training as part of their onboarding procedures.


text: a threat is detected, our system automatically notifies our internal information systems management ("ISM") team of all activities and ranks those activities based on their level of threat to the system and/or deviation of behavior from normal. Severe threats notify the ISM team via text message, regardless of hours of operation. In addition to the notification, the system will automatically take action to secure the system, up to and including blocking user accounts and access. The ISM team will then review the notification, assess the action that was taken against the actual threat, and then clear the condition or take further action.


text: mitigate risk, we periodically evaluate and assess the threat landscape and our security controls, through assessments, regular network and endpoint monitoring. We also have processes to oversee and identify material cybersecurity risks associated with our use of third-party service providers, including performing diligence on certain third parties that have access to our systems, data or facilities that store such systems or data, continually monitoring cybersecurity threat risks identified through such diligence our framework, cybersecurity issues, including those involving vulnerabilities introduced by our use of third-party software, are analyzed by subject matter experts for potential financial, operational, and reputational risks, based on, among other factors, the nature of the matter and breadth of impact.


text: of the date of this Report, there have been no cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, operations, or financial condition.


text: determined to present potential material impacts to our financial results, operations, and/or reputation would immediately be reported by our Senior Vice President of Technology to our Chief Financial Officer and escalated, as appropriate, to our board of directors or individual members or committees thereof, in accordance with our escalation framework. Given the lack of material cybersecurity incidents relating to our company, we have not been required to escalate any matters to our board of directors, although management keeps the board of directors periodically informed of cybersecurity matters. In addition, we have established procedures to ensure that members of our management responsible for overseeing the effectiveness of disclosure controls are informed in a timely manner of known cybersecurity risks and incidents that may materially impact our operations and that timely public disclosure is made, as appropriate.


text: technology (IT) is critical to many of our operating activities and is subject to security threats and increasingly sophisticated cyber-attacks.

companyName: XMax Inc.

ticker: XWIN


text: As a result, we have policies and processes in place to assess, identify, and manage the strategic and operational IT-related risks as an integrated part of our overall risk management system. These risks include the risk of cyber-attacks on IT infrastructure and intellectual property, as well as on cybersecurity for our online product offerings. The Company has adopted Risk Assessment Methodology Policy, Information Security Policy and Incident Response Plan Policy to managing material risks from cybersecurity threats and hired IT consultant to help managing cybersecurity risks. When the Company uses a third party service provider and shares sensitive data such service provider, it must adhere to the compliance requirements in the Service Agreement which includes an acknowledgement that the service provider is responsible for safeguard and the security of the sensitive data. As of date of this report, there has been no previous cybersecurity incidents, have materially affected the Company yet. The independent director of the Board Charlie La is responsible for the oversight of risks from cybersecurity threats on behalf of the Board. Mr. Teng Ai Leng, our IT consultant and Tawny Lam, Chief Executive Officer of the Company report to Mr. Charlie La and Board of Directors for cybersecurity risks and incidents. Teng AI Leng has 30 years of working experience in the Information technology industry. The Company has adopted Incident response plan policy, including Roles and Responsibilities, Incident Categories, Categories of Event, Incident Severity, Escalation Levels, and Incident Response Life Cycle, so that the weakness, events, alerts and incidents can be appropriately managed and escalated from IT personnel, IT consultant, Chief Executive Officer to independent director and the Board.


text: underlying processes and controls of our cyber risk management protocol incorporate recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF"). We have undertaken, on an annual basis, to conduct an assessment of our cyber risk management processes and controls to identify, quantify, and categorize material cyber risks. In addition, we have developed a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the annual assessment process.

companyName: RetinalGenix Technologies Inc.

ticker: RTGN


text: addition, we maintain policies over areas such as information security, access on/offboarding, and access and account management, to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities. We consult with a third-party specialist with regard to our cyber risk management processes and controls.


text: management team is responsible for oversight and administration of our cyber risk management protocol, and for informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents. RetinalGenix' management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained from governmental, public, or private sources.


text: part of its review of the adequacy of our system of internal controls over financial reporting and disclosure controls and procedures, the Board of Directors is specifically responsible for reviewing the adequacy of our computerized information system controls and security related thereof. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services, brief the Board of Directors on cyber vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, and the emerging threat landscape and new cyber risks on at least an annual basis. This includes updates on RetinalGenix's processes to prevent, detect, and mitigate cybersecurity incidents. In addition, cybersecurity risks are reviewed by our Board of Directors at least annually, as part of the Company's corporate risk oversight processes.


text: face risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. RetinalGenix acknowledges that the risk of cyber incidents is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. To date, we have not had a cybersecurity incident. We proactively seek to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery;


text: however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. See Item 1A. "Risk Factors" for more information on cybersecurity risks.


text: board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer and Chief Financial Officer, are actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM"). Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts.

companyName: ADM ENDEAVORS, INC.

ticker: ADMQ


text: In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. In addition, we regularly review cybersecurity trends and, partially as a result of our prior cybersecurity exposure, have moved some of our internal servers to off-site locations.


text: Management and Strategy one of the critical elements of our overall ERM approach, our cybersecurity efforts are focused on the following key areas: Governance: Management oversees cybersecurity risk mitigation and reports to the board of directors any cybersecurity incidents.


text: Approach: We have implemented a cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: parties also play a role in our cybersecurity. We engage third-party service providers to conduct evaluations of our security controls, independent audits or consulting on best practices to address new challenges.


text: we have experienced cybersecurity threats in the past in the normal course of business and expect to continue to experience such threats from time to time, to date, none have had a material adverse effect on our business, financial condition, results of operations or cash flows. Even with the approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: Risk Management and Strategy our business operations, we use information technology, enterprise applications, communications tools, cloud network solutions, and related systems to manage our operations, including to manage our building systems, vendor relationships, accounting and recordkeeping, and communications, among other aspects of our business.

companyName: Calidi Biotherapeutics, Inc.

ticker: CLDI


text: have developed and implemented a cybersecurity risk management program intended to protect our confidential and proprietary data, and information technology and systems, from cybersecurity threats, including unauthorized access or attack. We leverage the SOC 2 TYPE II Cybersecurity Framework as a guide to help us identify, assess, and manage cybersecurity risks relevant to the business. This does not imply that we meet any particular technical standards, specifications, or requirements.


text: processes for assessing, identifying, and managing risks from cybersecurity threats, including operational risks, financial reporting risks, reputational risks, personal data theft, fraud, and other potential risks, are integrated into our overall enterprise risk management process, and share common methodologies, reporting channels, and governance processes that apply across the enterprise risk management process to other legal, compliance, strategic, operational, and financial risk areas.


text: cybersecurity risk management program includes the following: multidisciplinary team comprised of personnel from information technology ("IT"), internal audit, accounting, and legal, as well as third-party cybersecurity experts principally responsible for directing (i) our cybersecurity risk assessment processes, (ii) our security processes, and (iii) our response to cybersecurity incidents, and a third-party security operations center.


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader and third-party security tools to monitor our systems, identify cybersecurity risks, and test our IT environment. use of third-party cybersecurity experts, where appropriate, to assess, test or otherwise assist with aspects of our security processes. cybersecurity incident response plan and business continuity plan. training for employees and key business partners with access to our systems. third-party cybersecurity risk management process for service providers and vendors who access our systems.


text: employees, as well as third parties who have access to our systems, to treat confidential and private information and data with care, including performing controls relating to such data; and cybersecurity risk insurance. also seek to engage reputable service providers that maintain cybersecurity programs or controls.


text: have not identified risks from known cybersecurity threats within the prior fiscal year, including as a result of any prior cybersecurity incident, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. Please refer to "Item 1A, Risk Factors" in this report for additional information about certain ongoing risks related to our information technology that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: is an important part of our overall risk management processes and an area of focus for our Board of Directors and management.


text: Board, in coordination with the Audit Committee, oversees the Company's enterprise risk management process, including the management of material risks arising from cybersecurity threats. The Audit Committee regularly receives updates from management and third-party cybersecurity experts about major cybersecurity risks, their potential impact on our business operations, and management's processes to identify, monitor, and mitigate such risks, including, as relevant, the results of assessments or audits of our processes. The Audit Committee periodically provides updates on these matters to the Board of Directors.


text: enterprise risk team consists of cross-functional professionals who collaborate with subject matter specialists, as necessary, including an independent third-party expert we have retained to identify and assess material risks from cybersecurity threats, their severity, and potential mitigation steps. The CISO is primarily responsible for leading our cybersecurity risk assessment and management processes.


text: Our executive staff, supported by external IT, currently serves as our CISO. The CISO regularly reviews and assesses cybersecurity initiatives, including our incident response plan, as well as cybersecurity compliance, training, and risk management efforts.


text: incorporate by reference the disclosure about cybersecurity regulation that is generally applicable to MDB from section Part I, Item 1, Business – Regulation – Data Protection ad Cybersecurity Regulation.

companyName: MDB Capital Holdings, LLC

ticker: MDBH


text: have not had any reportable cybersecurity breaches, including what we may perceive or recognize as cybersecurity incidents or credible threats during the fiscal year ended December 31, 2024. To date, as a result, there has not been any material adverse effect on our business operations or financial condition. If there is a cybersecurity attack and an infiltration of our files, data, customer data and the like, there would be a material adverse effect on our business, our reputation, our operations and financial condition. For example, our reputation would be damaged in the event of a cybersecurity infiltration. If there were a cybersecurity infiltration, we could lose access to our data which would disrupt our operations, and we even may not be able to operate. Such a loss of access might be temporary or permanent, and it might be localized or general. The level of disruption will depend on our backup systems. Our clients financial and other data could be taken and used against us to damage our reputation or cause harm to our clients in different ways. In the latter instance, we may be liable for monetary damages to our clients. We may be held for cyber ransom, which would be loss to our financial resources. Our inability to operate, payment of damages, payment of ransom, and the costs of reparation of our systems, consultants and tangential expenses will all result in damage to our business and our financial resources.


text: MDB Holdings and its subsidiaries including Public Ventures, our regulated broker-dealer, we have implemented a comprehensive cybersecurity program aimed at identifying, monitoring, and mitigating cybersecurity risks to the best of our ability. Our security program encompasses information security responsibilities, incident response, and is diligently managed by our information technology department. Cybersecurity is integrated into our overall risk management framework, with consultation from subject matter experts to assess and address potential cyber risks and their impacts.


text: is committed to providing the Audit Committee with regular cybersecurity updates, at least annually or more often as needed, based on emerging threats or specific incidents. These updates cover risk assessments, the current threat landscape, and any recent cybersecurity incidents.


text: information technology department has put in place robust governance measures for information security. This includes control requirements for change management, patching processes, the implementation of multifactor authentication, comprehensive data backup strategies, and continuous security monitoring. Additionally, management continues to enhance our security controls, with any significant issues promptly reported to the Audit Committee.


text: Risk Management & Strategy Our cybersecurity risk management process is a component of our overall approach to managing material risks that could impact our operations, including cybersecurity threats. In general, we seek to manage material internal and third-party cybersecurity risks through an approach that focuses on: (i) protecting information systems and the information residing therein; (ii) identifying, preventing, and mitigating cybersecurity threats; and (iii) assessing and responding to cybersecurity incidents when they occur. Maintaining, monitoring, and updating our information security program—in an effort to ensure that it remains reasonable and appropriate in light of changes in the security threat landscape, available technology, and applicable legal and contractual requirements—is an ongoing effort.

companyName: Celcuity Inc.

ticker: CELC


text: We have implemented and maintain various processes, procedures, and measures to support our overall risk management strategy and to manage and mitigate the material risks posed by cybersecurity threats to our systems and data. With respect to cybersecurity, these measures include conducting risk assessments of our operations and using a risk register to assess identified risks; developing business continuity, disaster recovery and incident response plans; implementing technical safeguards and tools; conducting ongoing cybersecurity awareness training; and using contractual protections where appropriate.


text: Our incident response plan outlines the procedures for reporting, investigating, and remediating cybersecurity incidents, including a framework to facilitate the escalation to our management team and board of cybersecurity incidents, so that our management team is alerted in a timely manner to material information that would be required to be disclosed or reported.


text: Our IT department maintains policies and procedures regarding network security, data protection and incident response. Pursuant to those policies, IT engages with the Chief Financial Officer, General Counsel and other experts when assessing cybersecurity threats, incident response, and making disclosure determinations following a data or network breach. The Vice President, IT is accountable at the management level for our overall IT risk management program. Additionally, our Chief Executive Officer and Audit Committee receives regular updates from the Chief Financial Officer, General Counsel and the Vice President, IT about significant threats and incidents involving cybersecurity and data protection, as well as security enhancements made to our IT infrastructure.


text: We use third-party service providers for a variety of services throughout our business, ranging from infrastructure support and maintenance, cybersecurity incident response, data protection and privacy compliance. In addition, we engage with contract research organizations, contract manufacturing organizations, distributors, and other supply chain resources.


text: We believe that the use of external service providers improves our operational capabilities, and we have implemented a vendor qualification and management program that applies to our service providers, including those that handle protected health information, personal information, or other information subject to protection under applicable privacy and data protection regulations. This program is designed to identify, address and seek to mitigate potential cybersecurity and data protection risks that arise from our use of external service providers. While we do not have full visibility into the cybersecurity risk management processes of our vendors, we require new service providers to complete a vendor questionnaire that identifies the vendor's network and user protections, such as the use of multi-factor authentication, and other cybersecurity risk management processes. Vendors that store or access our confidential information are required to certify that their information systems comply with applicable industry guidelines for cybersecurity, backup, and system recovery. We rely on our third-party service providers to provide notification of, and remediate, significant cybersecurity threats and cybersecurity incidents that jeopardize the confidentiality, integrity, or availability of our information.


text: We periodically evaluate, test, and update our policies, standards, and processes to mitigate cybersecurity threats and manage incidents effectively. These efforts include risk assessments, vulnerability assessments and remediations, phishing tests and employee education, and external scans. Additionally, to enhance our capabilities, we periodically engage third-party service providers, including cybersecurity consultants, to incorporate threat intelligence into our processes.


text: of any risks from cybersecurity threats, including those resulting from any previous cybersecurity incidents experienced by us or, to our knowledge, by any of our third-party service providers, that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For further discussion of cybersecurity and data privacy risks that may materially affect the Company and how they may do so, see "Risk Factors—If our information technology systems or data, or those of third parties upon which we rely, are or were compromised, we could face clinical trial delays; regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; and other adverse consequences,"


text: Our Audit Committee oversees Celcuity's management of risks arising from cybersecurity threats. Our CEO delivers periodic briefings to the Board and Audit Committee on material cybersecurity risks that are pertinent to our business operations. Additionally, we have processes to promptly notify the Audit Committee and Board of a significant cybersecurity incident and to inform the Audit Committee and Board of remediation progress, as appropriate.


text: The Vice President, IT has overall responsibility for our information security program, with support from our management team and specialized partners in cybersecurity incident response and privacy. The process includes managing our incident response strategy. If a cybersecurity incident meets certain criteria, however, our CEO, CFO and General Counsel will become involved with the response strategy, including decisions about public disclosure and reporting.


text: Our Vice President, IT also coordinates with our CEO, CFO and General Counsel to determine strategic cybersecurity priorities and to establish compliance procedures.


text: We believe our business leaders have the appropriate expertise, background and depth of experience to manage risks arising from cybersecurity threats. Our Vice President, IT has served in various roles in information technology and information security for over three decades, which includes experience in the biotech, pharmaceutical and healthcare industries and experience in cybersecurity risk management and data privacy compliance.


text: In the ordinary course of our business, we, and the third parties upon which we rely, collect, process, receive, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, share and store (collectively, "process") proprietary, confidential, and sensitive information, including protected health information, personal information, credit card and other financial information, or other sensitive information owned or controlled by ourselves or our customers, payors, and other parties.


text: a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and as noted in " Item 1A. Risk Factors " of this Annual Report, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our Board of Directors oversees risk for our Company, and prior to approving our filings with the SEC, our Board of Directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in " Item 1A. Risk Factors " of this Annual Report.

companyName: Valuence Merger Corp. I

ticker: VMCAF


text: underlying processes and controls of the bioAffinity cyber risk management program incorporate recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity addition, bioAffinity maintains policies over areas, such as information security, access on/offboarding, and access and account management, to help govern the processes put in place by management designed to protect bioAffinity IT assets, data, and services from threats and vulnerabilities. bioAffinity partners with industry-recognized cybersecurity providers leveraging third-party technology and expertise.

companyName: bioAffinity Technologies, Inc.

ticker: BIAF


text: These cybersecurity partners, including consultants and other third-party service providers, are a key part of bioAffinity's cybersecurity risk management strategy and infrastructure and provide services including maintenance of an IT assets inventory, periodic vulnerability scanning, identity access management controls including restricted access to privileged accounts, network integrity safeguarded by web-based software, including endpoint protection, endpoint detection and response, and remote monitoring management on all devices, industry-standard encryption protocols, critical data backups, infrastructure maintenance, incident response, cybersecurity strategy, and cyber risk advisory, management team, in conjunction with third-party IT and cybersecurity service providers, is responsible for oversight and administration of the cyber risk management program and informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents. Our management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained from governmental, public, or private sources.


text: Audit Committee of the Board of Directors oversees bioAffinity cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services, brief the Audit Committee on cyber vulnerabilities identified through the risk management process, the effectiveness of the cyber risk management program, and the emerging threat landscape and new cyber risks on at least an annual basis. This includes updates on bioAffinity processes to prevent, detect, and mitigate cybersecurity incidents. In addition, cybersecurity risks are reviewed by our Board of Directors at least annually, as part of the Company's corporate risk oversight processes.


text: faces risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows, or reputation. bioAffinity acknowledges that the risk of cyber incident is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. However, prior cybersecurity incidents have not had a material adverse effect on our business, financial condition, results of operations, or cash flows. The Company proactively seeks to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery; however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject the Company to additional liability and reputational harm. In response to such risks, the Company has implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. For more information on cybersecurity risks see Item 1A. "Risk Factors – Our internal information technology systems, or those of our third-party clinical research organizations or other contractors or consultants, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our diagnostic tests' or therapeutic product candidates' development programs, compromise sensitive information related to our business, or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business."


text: Company is committed to protecting the personal data shared by its clients and partners. The Company employs a combination of industry-standard security technologies, procedures, and organizational measures to safeguard personal data from unauthorized access, use, or disclosure. Employees receive extensive training to ensure the privacy and confidentiality of client information.

companyName: FDCTECH, INC.

ticker: FDCT


text: Company's Board of Directors possesses a foundational understanding of cybersecurity matters, reflecting the company's ongoing commitment to safeguarding its financial technology infrastructure. While board members may not currently hold formal cybersecurity certifications such as CISSP or CISM, several directors have prior experience in managing technology-driven businesses where data security and regulatory compliance were integral to operations. The Board remains actively engaged in cybersecurity oversight through regular updates from senior management, including the Chief Technology Officer and other executives responsible for information security. These updates typically cover threat assessments, system vulnerabilities, incident response protocols, and regulatory developments. This communication ensures that the Board is informed of emerging risks and can provide appropriate strategic guidance in alignment with the Company's overall risk management framework.


text: In its privacy policy, the Company outlines its data-sharing practices, stating that personal data is not sold or rented to third parties without permission. The company may disclose personal data in response to legal requirements or to establish or exercise its legal rights.


text: Additionally, the Company may collect and share personal data to investigate, prevent, or take action regarding illegal activities, suspected a developer of regulatory-grade financial technology, the Company ensures that its cybersecurity measures align with relevant regulations and standards. The company's subsidiaries, such as Alchemy Markets Ltd. and Alchemy Prime Limited, are regulated by financial authorities like the Malta Financial Services Authority (MFSA) and the UK's Financial Conduct Authority (FCA), respectively. Compliance with these regulatory bodies necessitates adherence to stringent cybersecurity protocols to protect client data and maintain the integrity of financial operations.


text: While the Company implements robust cybersecurity measures, it acknowledges the inherent risks associated with cyber threats. Potential risks include unauthorized access, cyberattacks, and data breaches, which could lead to financial loss, reputational damage, and regulatory penalties. The company continuously assesses and enhances its cybersecurity framework to mitigate these risks and protect stakeholders' interests. In summary, the Company prioritizes cybersecurity through comprehensive measures, regulatory compliance, and ongoing risk management to safeguard its operations and client data.


text: To ensure compliance with industry standards and safeguard sensitive customer data, the Company mandates that all employees, regardless of department or role, participate in annual Payment Card Industry Data Security Standard (PCI DSS) training. This training is designed to educate staff on best practices for handling payment card information securely, identifying potential security risks, and mitigating vulnerabilities. By reinforcing the importance of PCI compliance, we aim to foster a culture of cybersecurity awareness throughout the organization, reduce the risk of data breaches, and maintain the highest level of protection for our customers' financial information. Failure to complete the required training may result in disciplinary actions, underscoring the critical importance of this initiative in protecting both the Company and its customers.

companyName: GOOD GAMING, INC.

ticker: GMER


text: acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: Titan Environmental Solutions Inc.

ticker: TESI


text: a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.


text: our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.


text: are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: addition, our board of directors will oversee any cybersecurity risk management framework and a dedicated committee of our board of directors or an officer appointed by our board of directors will review and approve any cybersecurity policies, strategies and risk management practices.


text: our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats. a discussion of potential cybersecurity risks affecting us, please refer to the "Risk Factors" section.


text: Management and Strategy maintain standard procedures to help assess, identify and manage material risk posed by cybersecurity threats and regularly evaluate how we can integrate these procedures into our overall risk management processes. For example, we require that all of our employees who have access to our internal network complete formal cybersecurity training upon hire and on a periodic basis, including training on phishing, malware, and other cybersecurity risks. We also continuously evaluate our information technology systems and our practices that relate to our information technology systems. To date, we have not engaged any assessors, consultants, auditors or other third parties in connection with these efforts but may elect to do so in the future.

companyName: RenovoRx, Inc.

ticker: RNXT


text: the extent we identify areas in our information systems that need improvement, we seek to timely implement and monitor such improvements.


text: While we believe that we have taken appropriate security measures to protect our data and information technology systems, and have been informed by our third-party vendors that they have as well, there can be no assurance that our efforts will prevent breakdowns or breaches in our systems, or those of our third-party vendors, that could materially adversely affect our business and financial condition. For additional information regarding whether risks from cybersecurity threats are reasonably likely to materially affect us, see Item 1A, "Risk Factors — Security threats to our information technology infrastructure and/or our physical buildings could expose us to liability and damage our reputation and business " in this Report.


text: of the functions of our Audit Committee is to identify principal risks related to our company and ensure implementation of appropriate systems to manage these risks, including risks from cybersecurity threats. Our Audit Committee works with members of our management to identify and manage these risks, including cybersecurity risks. We currently outsource a qualified Information Technology Administrator who reports to our Chief Executive Officer. This consultant has over 25 years of experience with cybersecurity, information technology development and deployment and information technology risk assessment and management, including information security management. Our Information Technology Administrator regularly monitors our information technology systems and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents in consultation with our Chief Executive Officer. To the extent necessary, our Chief Executive Officer reports such risks to our Board of Directors.


text: Company has not adopted any formal cybersecurity risk management program or formal processes for assessing, identifying, and managing material risks from cybersecurity threats. At the management level, our Chief Executive Officer and Chief Financial Officer are responsible for addressing cybersecurity incidents, while our full board of directors has oversight responsibility for the Company's overall risk management, including cybersecurity risk, and has not delegated oversight authority for cybersecurity risks to any committee. In the event a cybersecurity incident occurs, the Company's Chief Executive Officer and the Financial Officer are expected to inform our board of directors of the details of such incident as well as the measures taken in response to such incident. In fiscal year 2024 we did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: JONES SODA CO.

ticker: JSDA


text: are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Bayview Acquisition Corp

ticker: BAYA


text: Management and Strategy we are in our early stages of our business plan, we regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities and test those systems pursuant to our cybersecurity processes and practices, which are integrated into our overall risk management system. As we progress with the development of our business plans, we plan to use various security tools designed to help us identify, investigate, resolve and recover from security incidents in a timely manner.

companyName: CalEthos, Inc.

ticker: GEDC


text: date, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and we believe are not reasonably likely to affect our company, including our business strategy, results of operations or financial condition.


text: of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face.


text: take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and incidents.


text: Chief Executive Officer is primarily responsible for assessing and managing our material risks from cybersecurity threats with assistance from third-party service providers and outside counsel, as needed. Chief Executive Officer oversees our cybersecurity policies and processes, including those described in "Risk Management and Strategy"


text: above. Our cybersecurity risk management program includes tools and activities to prevent, detect and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents.


text: security and availability of our information systems and the protection of the information we collect, create, process, and store are important to our business. We have implemented a cybersecurity program that is designed to support both the effectiveness of our systems and our preparedness for information security risks. This program includes a number of safeguards, such as: multi-factor authentication;

companyName: Tevogen Bio Holdings Inc.

ticker: TVGN


text: monitoring internal and cloud-based systems for threats; email filters; cybersecurity awareness training; limitation on the use of third-party devices; conditional access rules; and regular evaluations of our cybersecurity program.


text: use a risk-based approach with respect to our use and oversight of third-party service providers and vendors, tailoring processes according to the nature and sensitivity of the data accessed, processed, or stored by such third-party service provider. We use numerous means to assess cyber risks related to our third-party service providers, including for example use of a managed security service provider ("MSSP") that monitors cybersecurity events for our cloud systems. We also seek to include appropriate security terms in our contracts where applicable as part of our oversight of third-party service providers.


text: controls and processes employed to assess, identify, and manage material risks from cybersecurity threats are implemented and overseen by our Chief Information Officer ("CIO"). Our CIO has more than 20 years of information technology experience, including seven years specializing in cybersecurity. Our CIO is responsible for assessing the impact of cybersecurity threats and incidents, assessing whether and to what extent they can be contained and mitigated, containing and mitigating them, remediating incidents, and performing post-incident analysis and program enhancements. In the event of a significant cybersecurity incident, our CIO would engage senior management to inform them of the incident and related threats and response. We would also likely engage a third-party incident response vendor to assist us in the event of a significant cybersecurity incident. Our Chief Executive Officer directly oversees our CIO and receives information on cybersecurity risks from our CIO. Our CIO, in turn, is informed about risks from cybersecurity threats through dashboards, email alerts, reporting from the MSSP, and regular review of our systems and information technology environment.


text: the Board has overall responsibility for risk oversight, the Board delegated to the audit committee the responsibility for assisting the Board with oversight and monitoring of matters relating to our risk assessment, risk management, and risk mitigation policies and programs, including matters related to privacy, information technology, and cybersecurity, and for reviewing and discussing with management our risk exposures related to these matters. In its oversight role, the Board is expected to specifically consider risks that relate to our reputation and the general industry in which we operate, including with respect to privacy, information technology and cybersecurity, and threats to technology infrastructure.


text: CIO may report to and brief the Board and the audit committee on cybersecurity matters, including key risks, the potential impact of those exposures on our business, financial results, operations, and reputation, as well as the programs and steps implemented by management to monitor and mitigate risks. The reporting cadence and structure continues to develop.


text: cybersecurity risk management processes are integrated into our overall approach to risk management. Given the nature and size of our Company, we do not have a dedicated enterprise risk function, but our executives regularly consider and evaluate risks to our Company.


text: As part of that risk management process, members of our executive team identify, assess, and evaluate risks impacting our operations, including those risks related to cybersecurity, and raise them for discussion with other executives, and where it is determined to be appropriate, issues are also raised to the Board for consideration.


text: of the date of this Annual Report, we are no t aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations, or financial condition or are reasonably likely to have such a material effect. While we have implemented a cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement security measures adequate to prevent cybersecurity incidents or fully mitigate their impact. For additional information regarding risks relating to privacy and cybersecurity, see "Item 1A—Risk Factors".


text: management and strategy recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: BIOXYTRAN, INC

ticker: BIXT


text: Material Risks & Integrated Overall Risk Management has strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our risk management team works to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-parties on Risk Management the complexity and evolving nature of cybersecurity threats, Bioxytran engages external experts, including cybersecurity assessors and auditors in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties includes regular audits, threat assessments, and consultation on security enhancements.


text: Third-party Risk we are aware of the risks associated with third-party service providers, Bioxytran implements stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes quarterly assessments by our Chief Financial Officer ("CFO"). This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. from Cybersecurity Threats have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Board has established robust oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence, Board of Directors Oversight Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this domain.


text: The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.


text: CFO play a pivotal role in informing the Audit Committee on cybersecurity risks. He provides comprehensive briefings to the Audit Committee on a regular basis, with a minimum frequency of once per year. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; of ongoing cybersecurity initiatives and strategies;


text: reports and learnings from any cybersecurity events; and addition to our scheduled meetings, the Audit Committee and CFO maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive. The Audit Committee actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated into the broader strategic objectives of Bioxytran. The Audit Committee conducts an annual review of the company's cybersecurity posture and the effectiveness of its risk management strategies. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: Management Personnel responsibility for assessing, monitoring and managing our cybersecurity risks rests with the CFO, Mr. Ola Soderquist. Although, not ideal Mr. Soderquist brings a certain expertise to his role through his earlier career while working within companies providing cybersecurity.


text: His in-depth knowledge is instrumental in developing and executing our cybersecurity strategies. Our CFO oversees our governance programs, tests our compliance with standards, remediates known risks, and leads our employee training program.


text: CFO is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The CFO implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the CFO is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: CFO, in his capacity, regularly informs the Chief Executive Officer (CEO) of all aspects related to cybersecurity risks and incidents.


text: This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing Bioxytran.


text: Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Board of Directors, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Hapi Metaverse Inc.


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board considers cybersecurity risk as part of its risk oversight function and has oversight of cybersecurity, data privacy and other information technology risks. The Board oversees management's implementation of our cybersecurity risk management program and cybersecurity risk exposures, and the steps taken by management to monitor and mitigate cybersecurity risks. The Board is composed of directors with diverse expertise, which has prepared them to oversee our cybersecurity risks.


text: The Board receives periodic reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. Board also receives briefings from management on our cybersecurity risk management program.


text: management team, including our Chief Executive Officer, are responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security consultants; threat intelligence and other information obtained from governmental, public or private sources, including external consultants which may be engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our management team's experience includes monitoring the cybersecurity landscape for new risks and best practices, developing and executing cybersecurity strategies, overseeing related governance policies, testing compliance with applicable technical standards, remediating known risks and leading employee training programs.


text: is committed to ensuring the highest standards of cybersecurity to protect our systems, networks, and data from cyber threats. We recognize the critical importance of safeguarding sensitive information and maintaining the trust of our customers, partners, and stakeholders. cybersecurity strategy is built on a foundation of proactive risk management, continuous monitoring, and adherence to industry best practices. We employ a multi-layered approach which leverages technologies to defend against evolving cyber threats.

companyName: Aspire Biopharma Holdings, Inc.

ticker: ASBP


text: have made significant investments in modernizing, streamlining, and simplifying our technology footprint to both enhance customer experience and strengthen our internal security controls.


text: time-to-time, we may engage third-party consultants, legal advisors, and audit firms to evaluate and test the Company's risk management systems and assess and remediate certain potential cybersecurity incidents, as appropriate. We prioritize the integrity of our data access controls to prevent unauthorized access, data breaches, and malicious activities. We regularly assess and enhance our cybersecurity posture through comprehensive risk assessments, security audits, and vulnerability assessments. is a shared responsibility requiring collaboration and cooperation across all levels of our organization.


text: recognizes that cybersecurity is not solely a technology issue but also a people and process issue. We invest in ongoing employee training and awareness programs to empower our staff to recognize and respond to potential security threats effectively.


text: the event of a cybersecurity incident, we have established incident response plans and protocols to minimize the impact and facilitate swift recovery. The Company's Audit Committee oversees cybersecurity risk. The Audit Committee is promptly notified by Information Technology leadership of any potentially serious incidents including details and recommendations on the detection, mitigation, and remediation of the same. During the calendar year 2024, there have been no known reported cybersecurity incidents that have materially affected our believe in transparency and open communication, promptly informing affected parties and relevant authorities as required by law. Together, we remain vigilant, adaptive, and resilient in the face of evolving cyber threats, safeguarding the trust and confidence of those we serve.


text: the past year, our team has implemented, optimized, and matured our cybersecurity practices, aiming to meet all major industry benchmarks.

companyName: MOBIVITY HOLDINGS CORP.

ticker: MFON


text: Our goal is to safeguard our information systems and protect the confidentiality, integrity, and availability of both our and our customers' data. This includes measures related to cybersecurity incidents, risk management, management roles, and governance.


text: 1) Cybersecurity incidents: Our public-facing website complies with WCAG 2.2 level AA standards for accessibility. We manage various databases, including those on Amazon and Google Clouds, each with three sets of development, testing, and production environments. Our main data warehousing solutions is Amazon Redshift, complemented by Amazon S3 for object storage.


text: prevent unauthorized access, we have established a series of security gates across all production environments and instances two individuals have update access to production database instances, and a limited number of individuals have read-only access to our cloud environments, 2-3 members of our Platform Engineering team have access to production and test instances, and logs are generated for any changes made Risk Management: We maintain multiple AWS and Google Cloud environments, each with three sets of development, testing, and production environments. Our primary data warehousing solution is Amazon Redshift, while we use Amazon S3 Glacier for archival storage and Amazon S3 for object storage. We also employ Amazon Sagemaker for machine learning tasks and internally host Apache Superset on the AWS platform for data visualization.


text: environments are isolated using credentials and accounts are following a plan to ensure scheduled patching, upgrades, and other maintenance occur every quarter. This includes updates for have the capability to search our logs for security incidents are on schedule to monitor every public endpoint using a Web Application Firewall (WAF), ensuring that all traffic is logged with patterns to detect any suspicious behavior aim to enable automatic processes to ensure no production data is changed without systematic audits data visualization tool has login credentials with role-based access 3) Management's Role: Our board of directors has ultimate oversight of cybersecurity risk. Our VP of Engineering and Platform Engineering Manager lead cybersecurity risk assessment and management efforts, collaborating closely with the interim CEO for guidance, strategic direction, alignment with business objectives, and environment.


text: Platform Engineering Manager has over 5 years of experience and holds a bachelor's degree in computer science. The VP of Digital Engineering brings 19 years of expertise in digital transformations across various industries, holding leadership roles at Nordstrom, Walgreens, T-Mobile, and Sony PlayStation, with a Master's degree in Business Administration from the University of Michigan have robust logging systems in place to monitor our systems, and our response plan includes promptly identifying the executives and parties affected Governance: Our governance includes routing all production changes through approval processes and testing in the test environment adhere to SOX regulations to ensure proper documentation and signoffs for any production data alterations due to incorrect data entry the event of changes, we document the reason for the update, the responsible individual, and the details of what was modified (both before and after). Additionally, all modifications undergo verification by at least one individual before and after the change board holds oversight of the Company's risks related to cybersecurity risks.


text: business strategy, results of operations, and financial condition have no t been materially affected by risks from cybersecurity threats, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents.


text: are committed to protecting the confidentiality, integrity, and availability of its information systems and the data they contain from cybersecurity threats. We acknowledge that cybersecurity is a dynamic and evolving area of risk that requires ongoing assessment, management, and oversight. As we grow in size and revenue, we intend to work with third party companies to assess, identify, manage, and mitigate material cybersecurity threats, as well as to respond to and recover from cybersecurity incidents, all as necessary.

companyName: AVAX ONE TECHNOLOGY LTD.

ticker: AVX


text: recognize the importance of maintaining our technology and data systems. Our cybersecurity policies, standards, processes, and practices are integrated across our operational departments.