text: The management team is responsible for establishing and monitoring the integrity and effectiveness of our controls and other procedures, which are designed to ensure that all information required to be disclosed is recorded, processed, summarized and reported accurately and on a timely basis, and all such information is accumulated and communicated to management and the Board, as appropriate, to allow for timely decisions regarding such disclosures. The controls and procedures subject to the Board's oversight include processes related to managing material risks from cybersecurity are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including in our business strategy, results of operations or financial condition. However, our business is highly dependent on our ability to collect, use, store and manage organizational and property data. If any of our significant information and data management systems do not operate properly or are disabled, we could suffer a material disruption of our business or managing real estate, loss of sensitive data, regulatory intervention, breach of confidentiality or other contract provisions, or reputational damage. These systems may fail to operate properly or become disabled as a result of events wholly or partially beyond our control, including disruptions of electrical or communications services, natural disasters, political instability, terrorist attacks, sabotage, computer viruses, deliberate attempts to disrupt our computer systems through "hacking," "phishing," or other forms of both deliberate or unintentional cyber-attack, or our inability to occupy our office location. See "Part I, Item 1A. Risk Factors" for more information on risks from cybersecurity threats that are reasonably likely to materially affect our business strategy, results of operations and financial condition.


text: The Board oversees the Company's risk management policies, including the management of risks arising from cybersecurity threats and the steps that management has taken to protect against threats to the Company's information systems and security. Our management team works to conceive, implement and monitor the program designed to protect information systems from cybersecurity threats and to promptly respond to any security incidents. Our management team will promptly notify the General Counsel and other executive officers of any cybersecurity events, with material cybersecurity events promptly communicated to the Board and publicly disclosed as deemed necessary.

companyName: Hi-Great Group Holding Co

ticker: HIGR

secItem: Item 1C


text: The Company's cybersecurity program is designed to identify, assess, and manage material risks from cybersecurity threats. The Company relies on Saratoga Investment Advisors to implement the cybersecurity program. The cyber risk management program involves risk assessments relating to the information systems of Saratoga Investment Advisors, incident response training and testing, implementation of security measures, identification of sensitive information assets ("Critical Information") and ongoing monitoring of systems and networks and assessment of the associated risks on an annual basis, including networks on which the Company relies on. The Chief Compliance Officer, along with the Company's external information technology consultant (the "IT Consultant"), actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats. The Company and Saratoga Investment Advisors have engaged external experts, including consultants, such as the IT Consultant, to evaluate cybersecurity measures and risk management processes, and depends on and engages various third parties, including suppliers, vendors, and service providers. The compliance team of the Company and Saratoga Investment Advisors will conduct ongoing due diligence of its significant service providers to determine whether the cybersecurity programs of service providers include, among other things, procedures and safeguards designed to ensure the protection of Critical Information and the information of the Company's stockholders and portfolio companies, as well as adequate responses in the case of a cybersecurity incident.

companyName: SARATOGA INVESTMENT CORP.

ticker: SAR


text: of Cybersecurity Risks The Board has the primary responsibility for overseeing and reviewing the guidelines and policies with respect to the Company's risk management, including risks associated with cybersecurity threats. The Chief Compliance Officer will periodically report to the Board on cybersecurity matters, such as the overall state of the Company's cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and material cybersecurity incidents.


text: The Company's management is responsible for assessing and managing material risks from cybersecurity threats, in consultations with cybersecurity consultants. The compliance team of the Company will maintain effective disclosure controls and procedures to ensure timely identification, consideration, and disclosure of material cybersecurity incidents, including through timely reporting to management and the Board. The Chief Compliance Officer, in consultation with the IT Consultant, will periodically determine whether the Company requires additional information technology or cybersecurity support.


text: The potential impact of risks from cybersecurity threats are assessed on an ongoing basis, and how such risks could materially affect the Company's business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, the Company has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Company believes has materially affected, or are reasonably likely to materially affect, the Company, including the Company's business strategy, operational results, and financial condition.


text: Risk Management and Strategy systems, and third-party service providers to operate its digital media platform, which is focused on engaging Gen Z audiences through casual gaming, college sports, and social experiences. As a technology-enabled media company, we recognize the importance of cybersecurity in protecting our digital assets, user engagement data, and strategic operations.

companyName: Brag House Holdings, Inc.

ticker: TBH


text: We are in the process of formalizing a cybersecurity risk management program tailored to our current scale and evolving operations. Our risk management efforts are focused on foundational protections, including the use of secure infrastructure (e.g., cloud-hosted environments via Amazon Web Services), hardware-based protections (e.g., exclusive use of Apple systems by key internal personnel such as our Chief Executive Officer), and security features such as multi-factor authentication (MFA) for key accounts and tools. We also maintain a cyber liability insurance policy intended to mitigate potential financial impacts arising from cyber threats.


text: To support our technical development and operational scalability, Brag House partnered and is engaged with two experienced technology companies—Artemis and EVEMeta. Both companies work under the supervision of Brag House executive management and are led by a shared Chief Technology Officer with extensive experience in enterprise-scale software development and infrastructure management. These technology partners are integral to our engineering and product support, and we coordinate closely with them on matters relating to information security, data protection, and secure development practices.


text: We understand that cybersecurity threats—ranging from phishing to more sophisticated forms of intrusion—are dynamic and evolving. While we have not, to date, experienced any cybersecurity incidents that have materially affected our operations, results of operations, or financial condition, we continue to monitor our risk exposure and expect to expand our cybersecurity infrastructure and governance as our business matures. For additional information about risks related Governance


text: The oversight of cybersecurity risk at Brag House is currently managed by our senior executive team, including our Chief Executive Officer and Chief Operating Officer, who work closely with our technology partners to monitor, assess, and manage our exposure to cybersecurity threats. While we do not currently maintain an internal Chief Information Security Officer or formal risk committee at the board level, cybersecurity is included as part of our broader operational and strategic risk review process.


text: Our CEO and COO receive regular updates from Artemis and EVEMeta regarding technology system integrity, cybersecurity considerations, and best practices. These updates include assessments of vulnerabilities, product-related security implications, and measures to address emerging risks. As our company continues to grow and mature, we expect to enhance our internal cybersecurity governance processes, including formalizing responsibilities, increasing engagement with external experts, and providing regular briefings to our Board of Directors on relevant cybersecurity developments.


text: We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us. However, like other companies in our industry, we and our third-party vendors have from time-to-time experienced threats to and security incidents relating to our information systems. For more information, please see "Risk Factors – Our business could be adversely affected if our data privacy and security practices are not adequate, or perceived as being inadequate, to prevent data breaches, or by the application of data privacy and security laws generally" and "Risk Factors - A failure of Brag House's information technology (IT) and data security infrastructure could adversely impact our business, operations, and reputation."


text: Despite our efforts with respect to information technology operations, cybersecurity and data privacy, we have been, and may continue to be, impacted by breaches in data security and lapses in data privacy, which occur from time to time. During fiscal year 2025, the Company did not experience any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, cash flow or financial condition.

companyName: RBC Bearings INC

ticker: RBC


text: This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs.

companyName: Hudson Acquisition I Corp.


text: The Audit Committee receives updates from members of management on our cybersecurity risks at its quarterly meetings, and reviews metrics about cyber threat response preparedness, program maturity, risk mitigation status, and the current and emerging threat landscape. In addition, management provides updates to the Audit Committee, as necessary, regarding any material cybersecurity threats or incidents, as well as any incidents with lesser impact potential.

companyName: Zeo Energy Corp.

ticker: ZEO


text: The key components of our cybersecurity program will include: conducting risk assessments to pinpoint material cybersecurity threats to our critical systems, data, product, services, and overall IT infrastructure;

companyName: Onconetix, Inc.

ticker: ONCO


text: Cybersecurity Governance The governance of cybersecurity risks is a critical function of our Board, with the Audit Committee playing a key role in the oversight of cybersecurity and related technology risks. The Audit Committee is tasked with monitoring the effectiveness of our cybersecurity risk management program as implemented by management.


text: The Audit Committee receives regular updates from management on the state of cybersecurity risks facing the Company. This includes briefings on any significant cyber incidents and ongoing risk management efforts. These updates enable the Audit Committee to provide informed reports on cybersecurity matters to the full Board.


text: The responsibility for day-to-day management of cybersecurity risks lies with our management team, including the Interim Chief Financial Officer. This team is at the forefront of our cybersecurity initiatives, coordinating both internal and external resources to anticipate, identify, and mitigate cyber threats. Our approach includes regular updates from our third-party security expert consultant, leveraging intelligence from various sources, and utilizing advanced security tools to protect our digital environment. Our third-party security expert consultant has over 30 years of experience with cybersecurity, information technology development and deployment, and information technology risk assessment and management, including information security management.


text: Alternus employs a strategic, multilayered approach to cybersecurity based on the National Institute of Standards and Technology (NIST) framework. The company maintains a dedicated internal cybersecurity team that oversees the development, implementation, and continual improvement of cybersecurity policies, tools, and procedures to identify, prevent, detect, respond to, and recover from evolving cyber threats.

companyName: Alternus Clean Energy, Inc.

ticker: ALCE


text: The Information Technology team collaborates with key functions across the company, including risk management, legal, finance, and operations to assess organizational exposure to cybersecurity risks. These assessments are integrated into Alternus' Information Security Policy, which is regularly reviewed and updated in coordination with company leadership.


text: The implementation of a comprehensive cybersecurity policy addressing acceptable use, data governance, social media, encryption, remote access, authentication, vulnerability management, and incident response; Cybersecurity awareness training for all employees; A multidisciplinary cybersecurity incident response team with defined protocols and escalation paths; Tabletop exercises to test and refine response readiness; Continuous integration of intelligence from industry and government sources into internal monitoring and defense processes; Ongoing internal reviews of enterprise applications and infrastructure, including access control evaluations and configuration audits.


text: The Chief Information Officer (CIO), with more than 20 years of experience in information and operational technology, holds primary responsibility for the cybersecurity program. Under the CIO's leadership, the IT team continuously evaluates risk postures and safeguards Alternus' critical cyber assets. Their efforts are designed to provide resilience against both common and sophisticated cyber threats.


text: The organization has implemented strong internal evaluation mechanisms and governance structures to ensure the integrity and maturity of its cybersecurity position. Risk management of third-party service providers, especially those handling sensitive data or enterprise applications, is carried out through documented access reviews and contractual safeguards, including SOC 2 reporting where applicable.


text: Although Alternus has not experienced cybersecurity events that have materially impacted the business, like most organizations, it faces ongoing risks such as phishing, malware, and attempted unauthorized access. These are monitored and addressed in accordance with established policies. See "Item 1A. Risk Factors" 1C. Cybersecurity".


text: We address cybersecurity risk with input from our employees and Audit Committee. The Audit Committee, and senior management devote significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats in a timely and effective manner. We regularly assess the threat landscape and take a universal view of cybersecurity risks, with a layered cybersecurity strategy based on prevention, detection, and mitigation. Our information technology (IT) security team reviews enterprise risk, including management-level cybersecurity risks annually.

companyName: Allied Gaming & Entertainment Inc.

ticker: AGAE


text: In addition, we have a set of Company-wide policies and procedures concerning cybersecurity matters, which include an IT security manual as well as other policies that directly or indirectly relate to cybersecurity, such as policies related to encryption standards, antivirus protection, remote access, multifactor authentication, confidential information and the use of the internet, social media, email and wireless devices. These policies go through an internal review process and are approved by appropriate members of management.


text: At the management level, our IT security team regularly monitors alerts and meets to discuss threat levels, trends, and remediation. The team also reviews a monthly cyber scorecard, regularly collects data on cybersecurity threats and risk areas and conducts an annual risk assessment. Further, we conduct periodic external penetration tests, red team testing and maturity testing to assess our processes and procedures and the threat landscape. These tests and assessments are useful tools for maintaining a robust cybersecurity program to protect our investors, customers, employees, vendors, and intellectual property. In addition to assessing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with use of third-party service providers. Our Internal Audit team conducts an annual review of third-party hosted applications with a specific focus on any sensitive data shared with third parties. The internal business owners of the hosted applications are required to document user access reviews at least annually and provide from the vendor a System and Organization Controls (SOC) 1 or SOC 2 report. If a third-party vendor is not able to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis. Our assessment of risks associated with use of third-party providers is part of our overall cybersecurity risk management framework.


text: We face a number of cybersecurity risks in connection with our business. Although such risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we have, from time to time, experienced threats to and breaches of our data and systems, including malware and computer virus attacks. As of the date of this Annual Report on Form 10-K, we are not aware of any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company.


text: All companies utilizing technology are subject to the risk of breaches of or unauthorized access to their computer systems. The Company maintains a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. The Audit Committee of our Board of Directors and our management are actively involved in the oversight of our risk management program, of which cybersecurity represents an important component. We have established policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats and incidents. Our policies, processes and procedures include, among other things, external penetration testing using an experienced third-party company conducted every three years; a cybersecurity incident response and recovery plan; periodic and ongoing security awareness training for employees; the use of several comprehensive vulnerability analysis systems to evaluate software vulnerabilities both internally and externally; and mechanisms to detect and monitor unusual network activity. The Company also requires that all third-party vendors that have access to or handle sensitive information undergo a risk-based vendor security assessment. We also maintain controls and procedures that are designed to promptly escalate certain cybersecurity incidents so that decisions regarding public disclosure and reporting of such incidents can be made by management and our Board of Directors in a timely manner. There can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective.

companyName: IEH Corp

ticker: IEHC


text: Our cyber risk management program is based on recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology Cybersecurity Framework. Our cybersecurity risks are identified and addressed through a comprehensive, cross- functional approach. The Company's Vice President of Engineering is primarily responsible for the implementation of defense capabilities and risk mitigation strategies in connection with the Company's information security and cybersecurity risks. The Company's Vice President of Engineering, in coordination with the Company's senior management, works collaboratively across the Company to implement the cyber risk management program. To facilitate the success of the Company's cybersecurity program, cross-functional teams throughout the Company address cybersecurity threats and respond to cybersecurity incidents. Through ongoing communications with these teams, the Company's Vice President of Engineering and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time, and report such threats and incidents to the Audit Committee of the Board of Directors when appropriate.


text: Our Audit Committee takes the lead on behalf of our Board of Directors in monitoring risk management, which includes overseeing the Company's management of its cybersecurity and data privacy. The Audit Committee meets on a quarterly basis with our Vice President of Engineering, General Counsel and Chief Financial Officer, who provide quarterly reports concerning the Company's information security and cybersecurity risks.


text: Although we have not been materially impacted by any cybersecurity incident to date, we are subject to cybersecurity threats, as discussed in Item 1A. Risk Factors, including in the risk factor entitled " Our business and operations would suffer in the event of system failures, cyber-attacks or a deficiency in our cyber-security. "


text: Technological safeguards that are designed to protect the Company's information systems from cybersecurity threats, including the prevention and detection of systems, access controls, and firewalls, which the Company assesses the vulnerability and cybersecurity threat and makes necessary improvements. Utilization of third parties as part of the Company's risk-based approach in identifying and overseeing cybersecurity risks.

companyName: AURA SYSTEMS INC

ticker: AUSI


text: The Company maintains an incident plan that addresses the Company's response to a cybersecurity event, which is periodically reviewed and updated.


text: As of the date of this report, the Company has not experienced any material cybersecurity events. However, the presence of new or more advanced forms of cybersecurity threats could have a material and adverse impact on the business, results of operations, and financial position. For further discussion relating to this topic, see Item 1A. Risk Factors "The Company's information technology systems may be negatively affected by cybersecurity threats. "


text: are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Goldenstone Acquisition Ltd.

ticker: GDST


text: We believe a robust and proactive approach to cybersecurity risks and threats is essential to achieving our strategic business objectives and protecting our business. We may face a wide range of cybersecurity threats, such as ransomware and denial-of- service attacks. Our customers, suppliers and other business partners may also face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these third parties could have a material adverse effect on our business and results of operations. Due to the risks that cybersecurity threats can pose to our business, we intend to continually evaluate best practices and methods, including cyber defense systems and training programs, to protect our business from a wide range of potential threats.

companyName: Modular Medical, Inc.

ticker: MODD


text: We continue to evaluate our cybersecurity control processes and procedures to address the evolving cybersecurity risks that we may face in an increasingly technically capable environment. We have implemented practices and intend to implement policies to educate and provide guidance to our personnel, including awareness programs and other related cybersecurity best practices. We plan to conduct technical risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We also plan to conduct programmatic risk assessments, including identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Following these risk assessments, we will evaluate: i) whether and how to implement, and maintain reasonable safeguards to minimize identified risks, ii) how to reasonably address any identified gaps in existing safeguards; and how to regularly monitor the effectiveness of our safeguards. As we are a small pre-revenue company, we currently outsource our information technology (IT) functions to a third party. Working with the outsourced IT firm, our president will manage the risk assessment and mitigation process. Third parties will play an important role in our cybersecurity program. We intend to engage third-party service providers to conduct evaluations of our security controls, including penetration testing and consulting on best practices. The third-party services include testing both the design and operational effectiveness of security controls. This dependence exposes us, along with others who use such service providers, to the impact of a cyber-attack on their service providers. It is possible for a cyber-attack at a third- party service provider to have a significant financial, operational, or reputational impact to us. To reduce the effective impact to us of a cyber-attack on a third-party service provider, we intend to monitor the risks associated with our service providers through periodic review of these providers' cybersecurity programs.


text: Our board of directors, through its audit committee, oversees our processes for identifying and mitigating risks, including cybersecurity risks. Management will periodically brief the audit committee and/or the board of directors on our cybersecurity and information security policies and plans. Our board of directors will be apprised of cybersecurity incidents deemed to have a moderate or higher business impact, and we will provide updates on management's incident response plan for addressing and mitigating any impacts and risks associated with such an incident. We intend to develop a formal incident response plan, which sets forth the steps to be followed from incident detection and assessment to mitigation, recovery and notification and reporting within our organization and to our board of directors.


text: We are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board is generally responsible for the oversight of risks from cybersecurity threats, if any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Chain Bridge I

ticker: CBRRF


text: Head of IT reviews Cyber Security risk on a regular basis as identified by our external IT service provider based on the current threat landscape and threat intelligence publicly available. These are with a background and understanding of ISO 27002 controls and IASME Cyber Essentials.

companyName: Pacific Green Technologies Inc.

ticker: PGTK


text: threats are then addressed by implementing appropriate technical and management controls or policies. The board are made aware of the risk, impact and approve a business response.


text: IT provider is responsible for asset management, automated patching, monitoring of critical systems, Security information and event management, incident detection and response, mobile device security and remote management of all the business digital assets.


text: program is outlined within our IT Security Policy and includes but is not limited to: authentication and authorization procedures, employee security awareness training, logging and monitoring procedures, in transit and at rest encryption of certain data we deem sensitive, periodic vulnerability scanning, periodic phishing attack simulations. We also use external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security processes.


text: the beginning of the last financial year, we have identified and prevented risks from known cybersecurity threats that have not had any material affected on the business. For a discussion of how cybersecurity risks could materially affect us in the future, please see the risk factors set forth under the caption Part I, Item 1A, Risk Factors.


text: follow a practical approach to Cyber Security governance. Cyber Security governance is handled primarily within the IT team and reported directly to the CEO or any affected key management personnel as appropriate.


text: The IT team brings over 25 years of collective experience in senior management, web, and application development. Working in close alignment with the CEO and executive leadership, the team maintains a strong understanding of the company's business priorities, risk landscape, and governance requirements in-house capability is further enhanced by a long-standing partnership with an outsourced IT provider with over 23 years of operation, offering access to a broad pool of expertise, including on-demand virtual CTO and CISO services.


text: follow an annual IT Security assessment based on the IASME Cyber Essentials framework which is approved by the UK government Cyber Security NCSC and implement policies and controls based on the understanding of ISO 27001 and NIST framework which assist the governance process.


text: Senior management team are highly engaged and hands on with all areas of the business operations and are in close contact and communication with the Head of IT and act quickly to implement controls, policy and change within the business where it is communicated by the IT team.


text: Risk management and strategy The Company is committed to securing our information technology systems, including accounting software and back-of-house software, against cybersecurity threats and protecting the privacy of the data of our customers, employees, and other business partners. We recognize that cybersecurity threats are an ongoing concern in today's digital world and that, despite devoting resources to secure our information technology systems, cybersecurity incidents can occur and, if so, could negatively impact our brand, business, results of operations and financial condition. Cybersecurity threats include any potential unauthorized occurrence on or conducted through our information technology systems or information technology systems of a third party that we utilize in our business that may result in adverse effects on confidentiality, integrity, or access to our information technology systems.

companyName: US NUCLEAR CORP.

ticker: UCLE


text: Our cybersecurity risk management program includes a cybersecurity incident response plan. We design and assess our program primarily following the guidelines of the National Institute of Standards and Technology and Payment Card Industry Data Security Standard. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use these frameworks as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. The objectives of our programs are to protect the confidentiality, integrity, use and availability of the Company's data; to protect against unauthorized access to the Company's data, the Company's network and information technology applications; and to maintain disaster recovery plans to prepare for and respond to the potential for disruption in the Company's information technology. To meet these objectives, the Company's Chief Executive Officer, website, and technical personnel manage our cybersecurity, information technology, and data privacy programs.


text: Our information technology infrastructure includes firewalls, modern endpoint protections, intrusion detection tools and alerts, as well as multi-factor authentication to provide a multi-layered approach to protecting our information technology systems from unauthorized access, use, disclosure, disruption, or destruction. Such applications are regularly monitored and reviewed for adequacy and potential enhancements. We obtain System and Organizational Controls ("SOC") 1 or SOC 2 reports on an annual basis from vendors that host our significant financial applications to aid in our assessment of information security risk amongst our relationships with the host vendors. We also perform access reviews for any of these systems that are subject to Sarbanes-Oxley oversight.


text: We have developed an incident response plan outlining immediate response actions, including internal and external communication protocols. Under the plan, we have identified a management group comprising our Chief Executive Officer, Chief Financial Officer, and Corporate Controller. The plan provides that any cybersecurity incident will be reviewed by this group to determine whether it is material for securities law purposes and whether public disclosure is required, following consultations with outside counsel and/or the Board of Directors.


text: We currently do not maintain cyber risk insurance coverage that is intended to mitigate the financial impact of cybersecurity and data privacy incidents experienced by the Company.


text: The full Board of Directors has the overall responsibility for risk oversight, including cybersecurity matters. At a management level, our cybersecurity program is led by our Information Technology manager, who reports to the Chief Financial Officer. Our Information Technology manager is equipped to help navigate the landscape of cybersecurity risks and challenges and to implement and manage a comprehensive security strategy.


text: Annual risk assessments and penetration testing are primarily performed by our internal staff, and we have not engaged any third parties in connection with such processes except that we have an external Management Information Systems consultant, or MIS consultant, who provides advice to our CEO in the review of test results. We believe these tests are useful tools for maintaining a robust cybersecurity program to protect our investors, customers, employees, vendors, and intellectual property. The results of these tests are presented annually to the CEO, with support provided by our external MIS consultant, for review to ensure compliance with cybersecurity standards.

companyName: Jerash Holdings (US), Inc.

ticker: JRSH


text: During the fiscal year ended March 31, 2025, we have not identified any risks from cybersecurity threats that have materially affected our business operations or financial conditions.


text: The Fund relies on management of the Investment Adviser to implement third-party risk management processes to manage the risks associated with reliance on vendors, critical service providers, and other third parties that may lead to a service disruption or an adverse cybersecurity incident. This includes assessment of vendors during the selection/onboarding process, internal controls, compliance with service level agreements, and more.

companyName: Wellings Real Estate Income Fund


text: A critical component of the Fund's cybersecurity program is its incident response plan. This plan includes a requirement to evaluate the materiality of any data incident. Should the evaluation conclude that the data incident rises to the level of materiality it will be incumbent for the Fund, working with the Investment Adviser and legal and cybersecurity professionals, to describe the data incident within four business days of determining that an incident is material. The Fund shall also be responsible to provide ongoing reporting about the status of the material data incident until such time that the material data incident is no longer a factor with respect the Fund's operations.


text: As the Fund evaluates the materiality level of a data incident it will consider a variety of factors including the operational impact, the type of data impacted, how the data has been impacted, the business continuity and recovery procedures affected, the impact of the incident on the Fund's finances and any length of service interruption. Additional factors may also be considered given the nature of the event.


text: the year ended March 31, 2025, the Company was not subject to material fines or penalties in connection with cybersecurity, and there were no material cybersecurity incidents arising from cybersecurity or personal data protection.

companyName: Senmiao Technology Ltd

ticker: AIHS


text: of Third-Party Service Providers have in place certain infrastructure, systems, policies, and procedures that are designed to proactively and reactively address circumstances that arise when unexpected events such as a cybersecurity incident occur. These include processes for assessing, identifying, and managing material risks from cybersecurity threats. Identifying, assessing, and managing cybersecurity risk is integrated into our overall risk management systems and processes, and we have in place cybersecurity and data privacy training and policies designed to (a) respond to new requirements in privacy laws and (b) prevent, detect, respond to, mitigate and recover from identified and significant cybersecurity have relied on the third-party security assessment procedures and data outflow control procedures to manage risks from cybersecurity threats associated with our use of third-party service providers. For example, the servers of the system of Hunan Ruixi are housed at third-party data centers, and its operations depend on the service providers' ability to protect such systems in their facilities as well as their own systems. The qualified third-party performs security assessment by timely assessing their cybersecurity policies, data encryption and privacy policies and relevant certificates, establishing procedures in granting such third parties access to our database and requiring them to conduct regular inspections. Since in cooperation with third-party service providers may involve data outbound, we desensitize sensitive information before transferring such data.


text: While we have not, as of the date of this Report, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, we cannot assure you that we will not experience such an incident in the future. Any cybersecurity incidents, whether or not successful, could result in our incurring additional costs related to, for example, rebuilding our internal systems, implementing additional threat protection measures, responding to regulatory inquiries or actions, paying damages or making payments to obtain access to our computer systems, or taking other remedial steps with respect to third parties, as well as incurring significant reputational harm.

companyName: QDM International Inc.

ticker: QDMI


text: We seek to detect and investigate unauthorized attempts and attacks against our network, products, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to our internal processes and tools and changes or updates to our products and services; however, we remain potentially vulnerable to known or unknown threats. In some instances, we, our business partners and our customers can be unaware of a threat or incident or its magnitude and effects. Further, there are increasing regulation requirements regarding responses to cybersecurity incidents, including reporting to regulators, which could subject us to additional liability and reputational harm.


text: We have not encountered cybersecurity risks, threats or incidents that have materially affected or are reasonably likely to materially affect the Company, our business strategy, results of operations, or financial condition during the fiscal year ended March 31, 2025.


text: We believe cybersecurity is critical to advancing our business securely. We face a multitude of cybersecurity threats, and may experience cyber incidents in the normal course of business. Such cybersecurity threats could have a material adverse effect on our business, financial condition, operations, results of operations, performance, cash flows or reputation. Our service providers (including the transfer agent), and other business contacts may face similar cybersecurity threats, and a cybersecurity incident impacting these persons or entities could materially adversely affect our operations, performance and results of operations.

companyName: Arogo Capital Acquisition Corp.


text: Cybersecurity Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws. Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Our integration involves regular, systematic reviews and assessments conducted alongside other operational risks inspections. The findings from these reviews are communicated across relevant departments timely to inform decision-making. We have not engaged outside assessors, consultants, auditors or third parties in connection with such processes. We have processes to oversee and identify such risks from cybersecurity threats associated with our use of any third-party provider. Such processes include conducting due diligence assessments for all vendors, regularly reviewing vendor security practices, and including cybersecurity performance metrics in our vendor contracts to ensure that they comply with our security requirements.

companyName: Marwynn Holdings, Inc.

ticker: MWYN


text: Cybersecurity Risks and Impact MWYN Inc. has not experienced any cybersecurity incidents to date that have materially affected its business strategy, results of operations, or financial condition. The Company recognizes that cybersecurity threats, including attempts to gain unauthorized access to systems, data breaches, and other malicious activities, continue to evolve in complexity and frequency across industry. While no material impacts have occurred thus far, the Company acknowledges that future incidents may reasonably be expected to materially affect its operations if not effectively prevented or mitigated. MWYN stores its sensitive and operational data on secured internal servers protected by firewall and access control protocols designed to prevent unauthorized access and ensure data integrity.


text: The Board of Directors maintains oversight of the Company's cybersecurity risk management practices. MWYN has engaged an external information technology specialist to monitor and assess the Company's cybersecurity posture. This external service provider is responsible for identifying potential threats, conducting regular system reviews, and reporting material cybersecurity risks or incidents directly to the Board. The Board is informed of relevant cybersecurity developments on an as-needed basis and plays a role in reviewing and approving significant changes to the Company's cybersecurity strategies.


text: Management's Role in Cybersecurity Risk Management The Company's management team is actively involved in overseeing cybersecurity risk in coordination with the external IT specialist. While day-to-day technical operations are managed externally, internal leadership maintains responsibility for the overall risk management framework, including resource allocation, incident response planning, and strategic integration of cybersecurity within broader business operations. Management evaluates the cybersecurity program's effectiveness periodically and ensures alignment with business continuity and operational risk mitigation objectives.


text: Roles and Expertise Cybersecurity responsibilities are primarily assigned to the Company's external IT specialist, who brings extensive experience in network security, infrastructure protection, and cybersecurity threat mitigation.


text: The service provider has demonstrated expertise in firewall management, intrusion detection, and incident response protocols. Internally, the Company's senior leadership team collaborates with the external provider and is responsible for ensuring that cybersecurity risks are effectively integrated into enterprise risk management practices. Although MWYN does not currently employ dedicated internal cybersecurity personnel, it leverages external expertise to support its cybersecurity operations.


text: Cybersecurity Monitoring and Reporting Processes MWYN's cybersecurity program includes continuous monitoring of its internal IT infrastructure, including its secured servers and firewall systems. The external IT specialist conducts regular system checks, vulnerability assessments, and real-time threat monitoring to detect and respond to potential cybersecurity incidents. In the event of an identified risk or security event, the specialist reports directly to management and, where appropriate, escalates the matter to the Board of Directors. Preventive controls, incident response procedures, and remediation protocols are reviewed and updated periodically to ensure continued protection of the Company's digital assets.


text: Risk management and strategy We rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident. We seek to mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We plan to engage a third-party consultant to assist us with designing controls and our cybersecurity risk management framework. We have not encountered cybersecurity threats or incidents that have had a material impact on our business.

companyName: Maison Solutions Inc.

ticker: MSS


text: Our Board of Directors, which also oversees our general risk management, has specific oversight responsibility for cybersecurity. The Board of Directors reviews and discusses with management our policies, practices and risks related to information security and cybersecurity. Our chief financial officer has primary responsibility for assessing, monitoring and managing cybersecurity risks. Our chief financial officer provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.


text: Engage Third Parties on Risk Management the complexity and evolving nature of cybersecurity threats, we engage with a range of external experts, including cybersecurity assessors, consultants, and auditors in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties includes regular audits, threat assessments, and consultation on security enhancements.

companyName: New Horizon Aircraft Ltd.

ticker: HOVR


text: The Audit Committee is composed of independent board members with diverse expertise including risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.


text: Incident reports and learnings from any cybersecurity events; and addition to our scheduled meetings, the Audit Committee, CISO and Chief Executive Officer maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive. The Audit Committee actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated into our broader strategic objectives. The Audit Committee conducts an annual review of the Company's cybersecurity posture and the effectiveness of its risk management strategies. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: CISO is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition is crucial for effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The CISO implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the CISO is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: CISO, in his capacity, regularly informs the Chief Financial Officer and Chief Executive Officer of all aspects related to cybersecurity risks and incidents. This ensures that the senior management team is kept abreast of the cybersecurity posture and potential risks facing Horizon. Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Board, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.


text: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: American Clean Resources Group, Inc.

ticker: ACRG


text: Our current cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats.


text: Our President, CFO and CEO are responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents.


text: We routinely undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including an annual risk review, policy reviews and revisions. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a cybersecurity incident by the administering of local and cloud based back up of files and emails.


text: As of the date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition.


text: However, an actual or perceived breach of our security could damage our reputation, risk loss of our proprietary information and prevent us from attracting new clients, customers and/or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We currently do not carry a cyber liability insurance policy.


text: Risk Management and Strategy We periodically assess risks from cybersecurity threats and monitor our information systems for potential vulnerabilities. However, to date, given the small size of our company and the nature of our operations, our reliance on information systems has been limited to the use of standard off-the-shelf software (such as Google, QuickBooks, and Microsoft Office) and the use by our employees of standard personal computers. Accordingly, management has not implemented any formal process for assessing, identifying, and managing risks from cybersecurity threats.

companyName: Aeluma, Inc.

ticker: ALMU


text: Accordingly, we have not tasked our Board of Directors with any additional cybersecurity oversight duties or designated any committee of the Board of Directors to specifically oversee cybersecurity risks to our business.


text: Due to the current small size and limited commercial operations of the Company, we have no formal cybersecurity policies and processes in place, however, the Board and management believe cybersecurity represents an important component of the Company's overall approach to risk management and oversight.

companyName: SUNHYDROGEN, INC.

ticker: HYSR


text: Cybersecurity threats have not materially affected, and are not reasonably likely to affect, the Company, including its business strategy, results of operations or financial condition while we are strategically focused on developing an efficient and cost-effective way to produce truly renewable hydrogen using sunlight and any source of water and have minimal commercial operations. The Company is not aware of any material security breach to date. Accordingly, the Company has not incurred any expenses over the last two years relating to information security breaches.


text: The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing a disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations.


text: There can be no assurance that the Company's third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be effective in protecting the Company's systems and information.


text: are a growing geopolitical risk, becoming larger, more frequent, more intricate and more relentless. These attacks represent a significant threat to individual organizations and their ability to conduct daily operations. We rely on accounting, financial, and operational management information systems to conduct our operations. Any disruption in these systems could adversely affect our ability to conduct our business.

companyName: Ispire Technology Inc.

ticker: ISPR


text: Furthermore, as part of our normal business activities, we collect and store common confidential information about customers, employees, vendors, and suppliers. This information is entitled to protection under a number of regulatory regimes.


text: failure to maintain the security of the data, including the penetration of our network security and the misappropriation of confidential and personal information, could result in business disruption, damage to our reputation, financial obligations to third parties, fines, penalties, regulatory proceedings and private litigation with potentially large costs. This scenario may also result in a deterioration of customer confidence in us and potentially other competitive disadvantages. As such, a cyberattack could have a material adverse impact on our financial condition and results of operations.


text: we devote resources to implement and maintain security measures to protect our systems and data, these measures cannot provide absolute security against a cyberattack. In such an event, the insurance coverage we maintain may be inadequate to cover claims, costs, and liabilities relating to cybersecurity incidents.


text: we have not been subject to cyberattacks and other cyber incidents, we take cybersecurity preparedness seriously. Our risk management framework considers cybersecurity risk alongside other company risks as part of our overall risk assessment process. We have plans to implement cybersecurity training for all employees upon onboarding, and then annual follow-up training courses to ensure that all employees understand the risk and implications of a cyber event.


text: We have implemented a Cybersecurity Committee which met three times last year and is now responsible for the day-to-day management of cybersecurity risks, and the review our practices related to cyber events and risk management. The Committee is composed of the Chief Financial Officer, Chief Legal Officer, Controller, and Head of Human Resources.


text: The Committee is responsible for developing and implementing cybersecurity risk mitigation strategies and activities, including the managing of comprehensive incident response plans, overseeing the cybersecurity risks posed by third-party vendors, keeping our policies and procedures current, assessing compliance with our cybersecurity policies and procedures, and receiving regular updates on cybersecurity-related matters.


text: Further, the Committee will, from time to time and as needed, engage subject matter experts such as consultants and auditors to assist us in establishing processes to assess, identify, and manage potential and actual cybersecurity threats, to actively monitor our systems internally using widely accepted digital applications, processes, and controls, and to provide forensic assistance to facilitate system recovery in the case of an incident. The Audit Committee of our Board of Directors (the "Audit Committee")


text: oversees our policies and practices with respect to risk assessment and risk management, including the review, in coordination with our management, of our management of cybersecurity. The Audit Committee receives regular updates from the Cybersecurity Committee on the state of cybersecurity risks we face. This includes briefings on any significant cyber incidents and ongoing risk management efforts. These updates enable the Audit Committee to provide informed reports on cybersecurity matters to the full Board.


text: of the date of this Annual Report on Form 10-K, we are not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: We operate in the biotechnology industry, where the protection of sensitive information and the continuity of our operations are critical. We are subject to cybersecurity risks which could adversely affect our business, financial condition, or results of operations. We maintain a risk-based cybersecurity program designed to identify, assess, and mitigate cybersecurity threats. Our program incorporates applicable industry standards and is managed through a cross-functional approach involving our Information Technology, legal, compliance, and other relevant teams. It is overseen by our Chief Information Officer ("CIO"), who is responsible for the day-to-day management of cybersecurity risks and the implementation of our information security program and incident response plans.

companyName: Pluri Inc.

ticker: PLUR


text: Our risk management activities include periodic assessments, vulnerability testing, and tabletop exercises, as well as regular engagement with third-party experts to perform independent security assessments. We have expanded employee training and phishing simulations, and we conduct ongoing monitoring of access to our systems, including oversight of third-party vendors and service providers. The results of assessments and reviews are reported to senior management and the Audit Committee, and our policies and controls are updated as necessary.


text: While we have experienced a cybersecurity incident in the past and encounter cybersecurity threats from time to time in the ordinary course of business, none to date have had a material adverse effect on our business, financial condition, results of operations or cash flows. Despite our proactive measures, including expanded employee training and enhanced vendor oversight, cybersecurity threats continue to evolve, and no system can be entirely secure. A future cybersecurity incident could materially impact our operations, financial results, or reputation.


text: As part of our overall risk management framework, our cybersecurity program takes a comprehensive, layered approach to identifying, preventing and mitigating cybersecurity threats and incidents. This includes implementing controls and escalation procedures to ensure that significant incidents are promptly communicated to management for timely decision-making regarding public disclosure and regulatory reporting.


text: We deploy multiple technical safeguards designed to protect our information systems, including firewalls, intrusion prevention and detection systems, anti-malware tools, access controls, and continuous monitoring. These safeguards are evaluated and enhanced through regular vulnerability assessments, penetration testing and ongoing cybersecurity threat intelligence.


text: We maintain formal incident response and recovery plans that define our procedures for addressing cybersecurity incidents. These plans are tested, updated, and refined on a regular basis to ensure readiness.


text: We apply a risk-based approach to managing cybersecurity risks posed by third parties, including vendors, contract research organizations, service providers and other external users of the our systems. This also includes assessing and overseeing risks related to third-party systems that, if compromised, could negatively impact our business operations.


text: The Audit Committee of our Board oversees our risk management process, including the management of risks from cybersecurity threats. Our CIO, Mr. Oren Kochavi, is an accomplished executive with 14 years of experience leading information technology, enterprise systems, information security, and related technology functions. Mr. Kochavi holds an MBA in Business Administration and multiple professional certifications, and is responsible for the day-to-day administration of our cybersecurity program and reports to the Audit Committee on cybersecurity matters. The Audit Committee receives periodic reports and presentations addressing cybersecurity risks, recent developments, evolving standards, results of vulnerability assessments, findings from third-party and independent reviews, current threat intelligence, technological trends, and relevant developments regarding security considerations arising with respect to our peers and third parties. According to our procedures, the Audit Committee is promptly informed of any cybersecurity incident that meets established reporting thresholds and receives ongoing updates until the matter is fully resolved.


text: Management and Strategy regularly assess, identify, and manage material risks from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: InMed Pharmaceuticals Inc.

ticker: INM


text: conduct risk assessments at least annually to identify cybersecurity threats. These risk assessments include identifying reasonably foreseeable potential internal and external risks, the likelihood of occurrence and any potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, controls and other safeguards we have put in place to manage such risks. Our risk management process also encompasses cybersecurity risks associated with the use of our major third-party vendors and service providers.


text: Additionally, we maintain cyber coverage through our insurance carrier to mitigate risks associated with cybersecurity incidents, subject to customary terms and exclusions.


text: these risk assessments, we design, implement, and maintain reasonable safeguards to minimize the identified risks; reasonably address any identified gaps in existing safeguards; update existing safeguards as necessary; and monitor the effectiveness of our safeguards.


text: Moreover, we remain committed to investing in the development and improvement of our security processes and controls, as well as maintaining our technology infrastructure. These processes include a plan for notifying, informing, consulting, analyzing, and communicating any risks or incidents to a range of internal stakeholders, including executive management and the Board of Directors, as well as external stakeholders, as deemed necessary and appropriate based on the circumstances. We believe we have allocated adequate resources related to our cybersecurity risk management processes and have designated our Chief Financial Officer with the responsibility of managing the cybersecurity risk assessment and mitigation process.


text: part of our overall risk management program, we provide required training to employees in high-risk areas on cybersecurity and will distribute standard operating procedures to all employees. For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, please refer to Item 1A, "Risk Factors," in this Annual Report.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks arising from cybersecurity threats. Our Chief Financial Officer and Chief Operating Officer are primarily responsible for assessing and managing material risks from cybersecurity threats on a day-to-day basis. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our management team is additionally responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole. We additionally utilizes the assistance of a third-party service provider, an information technology solutions service provider located in Richmond, BC, for purposes of broadly managing its cybersecurity risks.


text: Risk Identification: We maintain an updated inventory of critical digital assets and leverage internal assessments and external threat intelligence to monitor and protect against emerging threats. We conduct periodic scans and audits identify vulnerabilities in our systems.

companyName: Armlogi Holding Corp.

ticker: BTOC


text: Risk Assessments: We evaluate cyber threats such as data breaches, ransomware, and insider threats through threat modeling and business impact analysis. Prioritizing risks based on potential operational disruption ensures timely mitigation of critical threats.


text: Risk Mitigation: We implement layered security controls, including firewalls, encryption, multi-factor authentication, and network segmentation. Patch management, access controls, and a robust incident response plan ensure proactive risk reduction and rapid recovery from incidents.


text: Risk Monitoring and Review: We implement tools to continuously monitor network traffic, system logs, and user activities to detect threats in real-time. Regular audits and metrics help identify gaps, track performance, and strengthen our cybersecurity posture.


text: As of the date of this annual report, we are not aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, results of operations, or financial condition. Our board of directors (the "Board")


text: We have established certain processes for identifying, evaluating, and managing material risks from cybersecurity threats as a part of our overall technology management strategy. These processes are designed and reassessed on a periodic basis to help protect our technology assets and operations from internal and external security threats.

companyName: Longduoduo Co Ltd

ticker: LDDD


text: The Company's employees are required to sign confidentiality agreements in an effort to, among other things, help to ensure cybersecurity. The Company has taken measures to better ensure that key employees are aware of data security threats (including cybersecurity threats), and Company security policies and procedures, as appropriate. Improper or illegitimate use of the Company's information system resources or violation of the Company's information security policies and procedures may result in disciplinary action.


text: In the last two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to eliminate all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident. For more information about these risks, please see Item 1A.


text: cybersecurity measure is primarily focused on ensuring the security and protection of computer systems and networks. All pertinent Chinese operating entities of the Company shall adhere to a standardized Company Confidentiality System, which shall be centrally overseen and enforced by Shuhai Beijing, subject to oversight by our management and Board of Directors. This Company Confidentiality System shall include specific provisions for information pertaining to network security, data security, and information that, if disclosed, could have detrimental effects on the public interest and the Company. We plan to establish an appropriate confidentiality framework and adhere to relevant document management regulations. The Company and its employees are also required to sign confidentiality agreements for purposes including ensuring cybersecurity. As of the date of this Annual Report, we are not aware of any material risks from cybersecurity threats, that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition.

companyName: DATASEA INC.

ticker: DTSS


text: Risk Management and Strategy Cybersecurity Risk Assessment and Management: The Sponsor has established a risk-based cybersecurity framework for the Funds to manage cybersecurity risks. This framework includes regular assessments of its information systems, physical and virtual infrastructure, and the data therein, to identify potential cybersecurity threats and vulnerabilities. This cybersecurity strategy is integrated into the Funds' overall risk management processes, with specific consideration given to the confidentiality, integrity, and availability of our information systems.

companyName: Amplify Commodity Trust

ticker: BDRY


text: Material Impact of Cybersecurity Threats: To date, there have been no known material cybersecurity incidents that have significantly impacted the Funds' business strategies, results of operations, or financial condition. The Sponsor continues to monitor systems and processes to mitigate potential cybersecurity risks actively.


text: Risk Management and Strategy We recognize the importance of assessing, identifying, and managing risks from cybersecurity threats. Our approach to cybersecurity risk management is aligned with our risk profile and business.

companyName: Amesite Inc.

ticker: AMST


text: We follow a formal, documented process to assess the data protection practices of certain third-party vendors that handle sensitive information on our behalf.


text: Governance Related to Cybersecurity Risks Our board of directors has oversight over cybersecurity risks. Our management provides periodic presentations to the board of directors on our cybersecurity program, including updates on cybersecurity risks and related cybersecurity strategy, as applicable. The management provides updates regarding our cybersecurity program to the board of directors when material.


text: Incident reports and issues identified from any cybersecurity events; and requirements and industry standards. In addition to our regularly scheduled Board meetings, the ISO regularly communicates with senior staff regarding emerging or potential cybersecurity risks. They discuss any significant developments in the cybersecurity domain, which when reported to the Board, ensures the Board's oversight is proactive and responsive. The Board actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives.

companyName: Kentucky First Federal Bancorp

ticker: KFFB


text: This involvement ensures that cybersecurity considerations are integrated into the broader strategic objectives of the Company. The Board closely reviews these reports of the Bank's cybersecurity posture and the effectiveness of its risk management strategies prior to approval. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: Primary responsibility for assessing and providing strategic direction to our cybersecurity program resides with our ISO. The ISO's experience includes prior leadership roles within the Company, where they developed an expert level of understanding of the intersection between financial regulations and cloud-based technologies. The ISO and other information systems staff possess in-depth knowledge and experience which are instrumental in developing and executing our cybersecurity strategies. The ISO and the Tech Steering Committee oversee our governance programs, work with our technology-focused leaders and partners to align security and compliance, and have developed our employee security awareness training program.


text: Monitoring Cybersecurity Incidents The ISO and other information security staff utilizes vendor relationships and various other internet based daily updates for the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This knowledge is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The ISO provides structure for clear processes to ensure the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities.


text: In the event of a cybersecurity incident, we believe we are equipped with a well-defined Incident Response Plan that is adequately resourced. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevent future incidents.


text: We recognize the importance of identifying, assessing, and managing material risks from cybersecurity threats, as defined in Item 106(a) of Regulation S-K. Our risk management program is designed to detect, evaluate, and mitigate cybersecurity risks, and is informed by applicable laws, regulations, and industry best practices.

companyName: Advanced Biomed Inc.

ticker: ADVB


text: Our Chief Executive Officer oversees our cybersecurity program and leads our incident response efforts. The incident response team is cross-functional, drawing members from cybersecurity, IT support, mining operations, software engineering, compliance, legal, contractors, and partners.


text: When a potential incident is detected, the cybersecurity team validates it before escalating to the incident response team for triage. Significant incidents are escalated to executive management. Response actions such as allocating resources, setting priorities, creating action plans, and notifying external parties are directed by the Chief Executive Officer in coordination with the cross-functional working group. We also consult outside counsel on materiality assessments and disclosure decisions, with executive management making the final determinations.


text: In 2025, we did not identify any cybersecurity threats that materially affected, or are reasonably likely to materially affect, our strategy, operations, or financial condition. However, no program can eliminate all risks, and we cannot guarantee that undetected incidents have not occurred. See Part I, Item 1A. "Risk Factors" of this Annual Report for further details.


text: Risk Management and have established cybersecurity risk assessment procedures to ensure effectiveness in cybersecurity management, strategy and governance and reporting cybersecurity risks. The process is in alignment with our strategic objectives and risk appetite.

companyName: Singularity Future Technology Ltd.

ticker: SGLY


text: Board oversees the Company's cybersecurity risks management and reviews management reports on material cybersecurity risks and issues on an as-needed basis. The chief executive officer (the "CEO") and the chief financial officer (the "CFO") are responsible for discussing material cybersecurity incidents or threats with specific constituencies before sign-off, ensuring thorough review of information and disclosures. The CEO and CFO are also responsible for assessing, identifying and managing material risks from cybersecurity threats to our company and monitoring the prevention, detection, mitigation and remediation of material cybersecurity incident, maintaining oversight of the disclosure in the periodic reports (including our annual reports on Form 10-K) of the Company.


text: As part of our broader risk management system and processes, we maintain procedures for identifying, assessing, and managing material risks from cybersecurity threats that is designed to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: Lakeside Holding Ltd

ticker: LSH


text: connection with the Closing, on September 24, 2024, our Board of Directors approved our Cybersecurity Incident Response Policy (the "Cybersecurity Policy"), We have integrated the processes as described in the Cybersecurity Policy into our overall risk management systems and processes According to the Cybersecurity Policy, we routinely assess material risks from cybersecurity threats that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Foxx Development Holdings Inc.

ticker: FOXX


text: to the Cybersecurity Policy, we conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats.


text: These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate high-level personnel, including our Chief Technology Officer ("CTO"), James Liao, to manage the risk assessment may engage consultants and other third parties as needed in connection with our risk assessment policies and processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function primarily through the Audit Committee. Our CIO provides periodic briefings to the Audit Committee regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity policies and procedures, activities of third parties, and the like.


text: CTO, James Liao, and senior vice president of the Operating Subsidiary, Ruobing Yu, constitute our cybersecurity incident management team and are primarily responsible to assess and manage our material risks from cybersecurity threats. Our CTO has over 25 years in consumer electronics and telecommunication sectors and has a professional background in computer science and engineering, which enables him to oversee our IT systems efficiently.


text: part of the executive team reporting to the Board, our CTO oversees our cybersecurity policies and processes, including those described in "Risk Management" above. The processes by which our CTO is informed of and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents include log review from IT and operations teams or reports received from network systems and applications if any unusual activity occurs, such as email system notification of items opened that could be malicious.


text: We maintain a comprehensive cybersecurity program designed to protect our information systems and digital assets, including identity and access management controls, network security monitoring, employee awareness training, and periodic third-party assessments. Our cybersecurity policies are reviewed by management and overseen by the board's audit committee at least annually. We regularly evaluate emerging threats and update our security controls and incident-response procedures accordingly.

companyName: TREASURE GLOBAL INC

ticker: TGL


text: Incident and Remediation Summary In May 2025, we detected unauthorized changes to our domain, DNS, and email configurations originating from administrative credentials retained by a former employee. The impact was limited to a brief email-routing disruption; all production systems remained fully operational. Based on internal reviews and independent external assessment, we found no evidence of data exfiltration or compromise involving customer data, financial information, or internal systems, and the issue was contained on the same day it was discovered.


text: Upon detection, we immediately purged and rotated credentials across all critical systems, enforced company-wide multi-factor authentication, closed orphaned accounts, and moved registrar and DNS administration under centralized secure access controls. We also hardened email authentication (SPF, DKIM, DMARC), implemented registry-level domain locks and DNSSEC, and completed a secure migration of domain and DNS records to a new registrar environment.


text: We have since completed a forensic investigation, automated off-boarding and access-revocation processes, established 24/7 SIEM/SOC monitoring for identity and domain anomalies, and conducted targeted cybersecurity training. Our domain, DNS, and email operations are now fully stabilized and secured, with quarterly access reviews and ongoing monitoring to ensure continued resilience. The incident did not have a material impact on our operations or financial condition.


text: Cybersecurity risk management is an integral part of our overall enterprise risk management program. The Company manages cybersecurity and data protection through a continuously evolving program. Our cybersecurity risk management program is designed to provide a framework for assessing, identifying, and managing cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers, and to facilitate coordination across different departments of our Company. Our processes include steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat, including whether the cybersecurity threat is associated with a third-party service provider, and implementing cybersecurity countermeasures and mitigation strategies and informing management and the board of directors of material cybersecurity threats and incidents.

companyName: Enlightify Inc.

ticker: ENFY


text: The Board of Directors has oversight into the most significant risks facing us and our processes to identify, prioritize, assess, manage, and mitigate those risks. The Audit Committee of the Board of Directors (the "Audit Committee") has been designated to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our management. The Board of Directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs.


text: Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects.


text: During the past fiscal year, based on our current detection and monitoring capabilities, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate, and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon.


text: cybersecurity framework (which includes management of related risks), is based on recognized cybersecurity industry frameworks and standards, including those of the National Institute of Standards and Technology, the Center for Internet Security Controls, and the International Organization for Standardization. We do not certify that we meet any particular technical standards, specifications, or requirements, but we use the aforementioned frameworks and standards as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. We use these frameworks, together with information collected from internal assessments, to develop policies for the use of our information assets (e.g., IT business information and information resources such as mobile phones, computers and workstations), access to specific intellectual property or technologies, and protection of personal information. We protect these information assets through industry-standard techniques, by strong Identity and Access Management framework, such as Role Based Access Control, Attribute Based Access Control, principle of Least Privilege, Need-to-Know access and multi factor authentication as obligatory second factor to our core resources. We also enhance our endpoint protection by deploying an endpoint detection and response tool. Its core mission is to defend our endpoints and systems against new malware, rootkits, spywares and ransomware. We also work with internal stakeholders across the Company to integrate foundational cybersecurity principles throughout our operations, including the employment of multiple layers of cybersecurity defenses, restricted access based on business needs, and integrity of our business information. We routinely train our employees on cybersecurity awareness on social engineering attacks, confidential information protection, emerging threats and simulated phishing attacks to improve self-awareness of our employees.

companyName: Zedge, Inc.

ticker: ZDGE


text: have standing engagements with incident response experts and external counsel, including through our cyber insurance. We frequently collaborate with industry experts and cybersecurity practitioners at other companies to exchange intelligence about potential cybersecurity threats, best practices and trends. We continuously monitor and collect insights on the latest vulnerabilities and attack patterns (TTPs) released by the Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST).


text: annual "Threat Landscape" report published by the European Union Agency for Cybersecurity (ENISA) each October serves as a key strategic intelligence source supporting the hardening and protection of our infrastructure. This report offers a comprehensive perspective on prevalent attack types, mapped across threat vectors and industry domains, accompanied by actionable defense strategies that support effective risk reduction to levels aligned with our organizational tolerance. It allows for the deployment of tailored security also have our own incident response team who is engaged in dealing with security events triggered by our Security Information and Event Management (SIEM) system. Continuous monitoring of our infrastructure — from endpoint devices to virtual clusters — helps detect potential interception of internal communications, preventing the leakage of business-critical data.


text: cybersecurity risk management extends to risks associated with our use of third-party service providers. For instance, we conduct risk and compliance assessments of third-party service providers by checking on a permanent basis every new vendor that is going to cooperate with the Company. The aim is to verify if vendors due diligence and risks associated with it are within our risk tolerance set by management.


text: cybersecurity risk management is an important part of our comprehensive business continuity program and enterprise risk management. Our global information security team periodically engages with a cross-functional group of subject matter experts and leaders to assess and refine our cybersecurity risk posture and preparedness. For example, we regularly evaluate and update contingency strategies for our business in the event that a portion of our information resources were to be unavailable due to a cybersecurity incident. We practice our response to potential cybersecurity incidents through regular tabletop exercises, threat hunting and red team exercises.


text: vulnerability management program involves regular scanning and testing of systems, endpoints, virtual environments, and cloud-based assets to identify potential software flaws, misconfigurations, or exposure points. Once vulnerabilities are detected, we prioritize remediation based on risk impact and business criticality, ensuring that all gaps are addressed in a timely and effective manner. This proactive approach enables us to maintain a hardened infrastructure, reduce attack surface, and align with industry best practices and regulatory part of our secure development lifecycle (SDLC), we conduct both automated and manual code reviews to ensure that the applications we deliver to our users are resilient against exploitation and designed to prevent data leakage. By embedding security controls throughout the development process — from design to deployment — we uphold confidentiality, integrity, and reliability. This approach not only protects sensitive user data, but also reinforces trust in our platform and supports long-term compliance with regulatory frameworks.


text: response to the growing use of AI, by bad actors, we adapt our internal policies, procedures, and control mechanisms to address AI-driven threats, including: Automated phishing campaigns and deepfake content used for impersonation or fraud. code generation via large language models. attacks that manipulate input data to bypass security algorithms. vulnerability scanning and exploitation of system weaknesses. monitoring and anomaly detection powered by machine learning to identify AI-driven attack patterns. SDLC with static and dynamic code analysis to detect AI-generated vulnerabilities. training on AI-related risks, such as synthetic media, prompt injection, and suspicious automation. risk assessments that evaluate the AI capabilities of vendors and partners to prevent external exposures. response playbooks tailored to AI-specific scenarios, such as automated botnet coordination or synthetic identity fraud. practices ensure our organization remains agile, secure, and prepared for the evolving AI-driven threat landscape.


text: board of directors, as a whole, has oversight responsibility for our strategic and operational risks and sets associated risk parameters and tolerance levels. The audit committee assists the board of directors with this responsibility by reviewing and discussing the defined risks, its assessment and proposed mitigation strategies, including cybersecurity risks, with members of management. The audit committee, in turn, periodically reports on its review with the board of directors. is responsible for day-to-day assessment and management of cybersecurity risks and reports regularly to the audit committee.


text: Cybersecurity risk governance has several components that can help our organization understand and implement cybersecurity governance practices achieve long-term cybersecurity goals beyond the day-to-day information security tasks, align with legal and regulatory compliance, and the direction of the Company through: Developing


text: a mature cybersecurity culture which ensures that all employees understand they are stakeholders in cybersecurity. Employees not only engage with cybersecurity controls but must be proactive in risk mitigation and remediation.


text: risk assessments which identify cybersecurity business risks and the Company's cybersecurity gaps and vulnerabilities. Using agreed-upon key performance indicators (KPIs), stakeholders can measure the Company's cybersecurity capabilities clearly and objectively. This facilitates our ability to audit the effectiveness of future vulnerabilities and remediation activities.


text: Accountability Framework which measures performance across departments and systems and ensures that those identified as responsible for meeting objectives are aware of the results and work with the cyber risk governance team leader to achieve and enhance them. With consistent feedback and the ability to reference established metrics, we can successfully monitor, review, and enforce cyber risk governance plans.


text: In turn, through these processes, we improve our framework, remediate serious issues, and update organizational cyber risk governance roadmaps accordingly.


text: Embedding cybersecurity within the broader enterprise risk management (ERM) strategies to evaluate cyber risks alongside financial, operational, and reputational risks, enabling executive leadership to make informed decisions.


text: Leveraging external threat intelligence and collaborating with industry peers, regulatory bodies, and national cybersecurity agencies to adapt to emerging threats. Embedding security into software development through deployment, with regular code reviews, SDLC checkpoints, and secure architecture principles. Reviewing governance practices, incorporating lessons learned from incidents, audits, and tabletop exercises to refine policies, controls, and strategic priorities.


text: Providing transparent cyber risk metrics and governance outcomes to the Board of Directors, ensuring alignment with strategic priorities and positioning cybersecurity as a business enabler.