text: Our CISO leads our information security team and has more than 20 years of cybersecurity experience across four public companies. He is supported by our Vice President of Privacy Compliance, who leads our data privacy team. Our cybersecurity program is supported by other members of our senior management team as well, including our Chief Legal Officer and members of Peloton's disclosure committee. Members of executive leadership are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management process. The CISO also provides updates to Peloton's senior management regarding cybersecurity risks, and meets regularly with Peloton's finance, enterprise technology, disclosure and internal audit teams.


text: For a discussion regarding risks from cybersecurity threats, see our risk factors, including the risk factors titled "–Any major disruption or failure of our information technology systems or websites, or our failure to successfully implement upgrades and new technology effectively, could adversely affect our business and operations", "–Cybersecurity risks could adversely affect our business and disrupt our operations", "–Our business is subject to the risk of earthquakes, fire, power outages, floods, hurricanes, public health crises, ransomware and other cybersecurity attacks, labor disputes, and other catastrophic events, and to interruption by man-made problems such as terrorism and international geopolitical conflicts", "–We collect, store, process, and use personal data and other Member data, which subjects us to legal obligations and laws and regulations related to security and privacy, and any actual or perceived failure to meet those obligations could harm our business", "–Our growing use of artificial intelligence and machine learning technologies may present additional risks and challenges, which could result in reputational and competitive harm, legal liability and adversely affect our results of operations ", under the heading "Risk Factors—Risks Related to Our Business" in Part I, Item 1A of this Annual Report on Form 10-K.

companyName: PELOTON INTERACTIVE, INC.

ticker: PTON

secItem: Item 1C


text: Risk Management and Strategy We have implemented and maintain a cybersecurity program designed to identify, assess, and manage material risks from cybersecurity threats to (i) our information systems and data, which include critical computer networks, third-party hosted services, communications systems, hardware and software, and (ii) critical data, including our intellectual property, confidential information that is proprietary, strategic or competitive in nature, and our customers' data. Our cybersecurity program includes an information security policy, access management policies, an open-source policy, security incident response processes, and a supply chain policy, in addition to the secure design and vendor management programs described below. For a description of the risks from cybersecurity threats that may materially affect us, see the section titled "Risk Factors" included elsewhere in this Annual Report on Form 10-K.

companyName: Snowflake Inc.

ticker: SNOW


text: Our information systems generally fall into two categories: our platform and our corporate systems. Each category has dedicated teams and processes in place to address cybersecurity risk. Our product security team, which reports into our EVP, Engineering, works alongside our product and engineering teams to address how security is designed into our platform. Our corporate security team, which reports to our Chief Information Security Officer within our Chief Financial Officer's organization, is responsible for the secure design of our corporate systems. In addition, our Chief Information Security Officer manages a global security team that performs certain cybersecurity functions for both our platform and corporate systems, including certification management, incident response, threat detection, analytics, and offensive security (such as simulations and penetration tests).


text: We actively monitor our threat environment for cybersecurity threats using various methods, including automated detection tools, scans of the threat environment, investigations of potential threats we discover or that are reported to us, and reports and services that identify threats. We monitor our information systems for vulnerabilities using internal and third-party penetration testing, intelligence feeds, and vulnerability databases. We also have a bug bounty program.


text: Our security teams work with management to prioritize our risk management processes and mitigate cybersecurity threats, including those that may materially impact our business. Our assessment and management of material risks from cybersecurity threats is a key risk area within our enterprise risk management program. Our Chief Information and Data Officer, Chief Information Security Officer, and EVP, Engineering are responsible for management of cybersecurity risk under our enterprise risk management program, and senior management and the audit committee of our board of directors receive reports on the key risks and the effectiveness of our management of such enterprise risks. In addition, key cybersecurity risks are assessed as part of our internal audit program. We have completed various security audits and certifications, including SOC 2 Type II, SOC 1 Type II, PCI-DSS, HITRUST, FedRAMP High, and ISO/IEC 27001. We also employ a shared responsibility model where our customers are responsible for using and configuring our platform in a manner that meets applicable cybersecurity standards. As part of this shared security model, customers have sole responsibility for creating and securing their access credentials for our platform.


text: Each of our platform and corporate systems involves the use of third-party technology or service providers, or vendors, such as hosting platforms, open-source software, and application providers. We also use vendors to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats to our platform and corporate systems, including consulting firms, external legal counsel, incident response vendors, penetration test providers, auditors, monitoring technology, and cybersecurity data providers. We have a vendor management program under which our corporate security, product security, and legal teams evaluate cybersecurity risks presented by our use of vendors. Depending on the nature of the technology or services provided, the sensitivity of the information systems and data at issue, and the identity of the vendor, our vendor management process may involve different levels of assessment designed to help identify cybersecurity risks. For higher-risk vendors, this process includes a vendor security questionnaire, an evaluation of the vendor's security program and security documentation, and the imposition of contractual obligations related to cybersecurity on the vendor. All vendors are required to undergo this review, which is in addition to the applicable security reviews conducted by our product security and corporate security teams described above.


text: Our board of directors has a cybersecurity committee of the board to assist it in fulfilling its oversight responsibility with respect to the management of cybersecurity risks related to our products and services as well as our information technology and network systems. The responsibilities of the cybersecurity committee include overseeing our implementation and maintenance of cybersecurity measures, data governance, and compliance with applicable information security laws. The cybersecurity committee receives reports from management concerning our significant cybersecurity threats and risk and the processes we have implemented to address them and has access to various reports, summaries or presentations related to cybersecurity threats, risk, and mitigation. In addition, our audit committee has oversight responsibility over our internal financial controls and our enterprise risk management program, including disclosure controls related to cybersecurity. Finally, management periodically provides cybersecurity briefings to the entire board of directors.


text: The members of management who are primarily responsible for assessing and managing our material risks from cybersecurity threats are Brad Jones, our Chief Information Security Officer, and Grzegorz Czajkowski, our EVP, Engineering & Support. Mr. Jones joined Snowflake in 2023 and previously served in various cybersecurity roles for over 12 years across multiple technology sectors, including manufacturing, software, and services. Mr. Jones reports to Sunny Bedi, who has served as our Chief Information and Data Officer since 2020 and, prior to joining us, served as VP of Corporate IT / Head of Global IT at NVIDIA, where his responsibilities included managing IT security. Mr. Czajkowski joined Snowflake as SVP, Engineering & Support in 2019 and, prior to joining us, served in various roles at Google, including as VP Engineering where he was responsible for a portfolio of Google Cloud data analytics and for internal services addressing data analytics needs of Google's businesses. Each of Messrs. Jones and Czajkowski is responsible for hiring appropriate personnel, integrating cybersecurity risk considerations into our overall risk management strategy, communicating key priorities to relevant personnel, approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to management depending on the circumstances, including the individuals named above, who work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our security incident response plan provides for reporting certain cybersecurity incidents to our board of directors.


text: Risk Management and Strategy We have implemented and maintain a cybersecurity program designed to identify, assess, and manage material risks from cybersecurity threats to (i) our information systems and data, which include critical computer networks, third-party hosted services, communications systems, hardware and software, and (ii) critical data, including our intellectual property, confidential information that is proprietary, strategic or competitive in nature, and our customers' data. Our cybersecurity program includes an information security policy, access management policies, an open-source policy, security incident response processes, and a supply chain policy, in addition to the secure design and vendor management programs described below. For a description of the risks from cybersecurity threats that may materially affect us, see the risk factor titled "If we, our customers, or third-party service providers experience an actual or perceived security breach or unauthorized parties otherwise obtain access to our customers' data, our data, or our platform, our platform may be perceived as not being secure, our reputation may be harmed, demand for our platform may be reduced, and we may incur significant liabilities. " in the section titled "Risk Factors" included elsewhere in this Annual Report on Form 10-K.


text: Our information systems generally fall into two categories: our platform and our corporate systems. Each category has dedicated teams and processes in place to address cybersecurity risk. Our product security team, which reports into our SVP, Engineering and Support, works alongside our product and engineering teams to address how security is designed into our platform. Our corporate security team, which reports to our Chief Information Security Officer, is responsible for the secure design of our corporate systems. In addition, our Chief Information Security Officer manages a global security team that performs certain cybersecurity functions for both our platform and corporate systems, including certification management, incident response, threat detection, analytics, and offensive security (such as simulations and penetration tests).


text: Our security teams work with management to prioritize our risk management processes and mitigate cybersecurity threats, including those that may materially impact our business. Our assessment and management of material risks from cybersecurity threats is a key risk area within our enterprise risk management program. Our Chief Information Security Officer and SVP, Engineering and Support are responsible for management of cybersecurity risk under our enterprise risk management program, and senior management and the audit committee of our board of directors receive reports on the key risks and the effectiveness of our management of such enterprise risks. In addition, key cybersecurity risks are assessed as part of our internal audit program. We have completed various security audits and certifications, including SOC 2 Type II, SOC 1 Type II, PCI-DSS, HITRUST, FedRAMP High, and ISO/IEC 27001. We also employ a shared responsibility cybersecurity model where our customers are responsible for using and configuring our platform in a manner that meets applicable cybersecurity standards and requirements. As part of this shared responsibility cybersecurity model, customers have sole responsibility for creating and securing their access credentials for our platform.


text: Our platform and corporate systems involve the use of third-party technology or service providers, or vendors, such as hosting platforms, open-source software, and application providers. We also use vendors to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats to our platform and corporate systems, including consulting firms, external legal counsel, incident response vendors, penetration test providers, auditors, monitoring technology, and cybersecurity data providers. We have a vendor management program under which our corporate security, product security, and legal teams evaluate cybersecurity risks presented by our use of vendors. Depending on the nature of the technology or services provided, the sensitivity of the information systems and data at issue, and the identity of the vendor, our vendor management process may involve different levels of assessment designed to help identify cybersecurity risks. For vendors that may pose higher risks, this process includes a vendor security questionnaire, an evaluation of the vendor's security program and security documentation, and the imposition of contractual obligations related to cybersecurity on the vendor. All vendors are required to undergo this review, which is in addition to the applicable security reviews that may be conducted by our product security and corporate security teams described above.


text: Our board of directors has formed a cybersecurity committee of the board to assist it in fulfilling its oversight responsibility with respect to the management of cybersecurity risks related to our products and services as well as our information technology and network systems. The responsibilities of the cybersecurity committee include overseeing our implementation and maintenance of cybersecurity measures, data governance, compliance with applicable information security laws, and overseeing disclosure controls relating to cybersecurity. The cybersecurity committee receives reports from management concerning our significant cybersecurity threats and risk and the processes we have implemented to address them and has access to various reports, summaries or presentations related to cybersecurity threats, risk, and mitigation. In addition, our audit committee has oversight responsibility over our internal financial controls and our enterprise risk management program. Finally, management periodically provides cybersecurity briefings to the entire board of directors.


text: The members of management who are primarily responsible for assessing and managing our material risks from cybersecurity threats are our Chief Information Security Officer and our SVP, Engineering and Support. Our Chief Information Security Officer joined Snowflake in 2023 and previously served in various cybersecurity roles for over 12 years across multiple technology sectors, including manufacturing, software, and services. Our SVP, Engineering and Support joined Snowflake as VP of AI Engineering in 2023 in connection with our acquisition of Neeva, where he served as the head of engineering and, prior to that, he served in various roles at Google, including as VP Engineering in various technical leadership roles. Each of our Chief Information Security Officer and SVP, Engineering and Support is responsible for hiring appropriate personnel, integrating cybersecurity risk considerations into our overall risk management strategy, communicating key priorities to relevant personnel, approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to management depending on the circumstances, including the individuals named above, who work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our security incident response plan provides for reporting certain cybersecurity incidents to the cybersecurity committee of the board.


text: Following these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate key personnel, including our Director of Operations, who reports to our Chief Financial Officer, to manage the risk assessment and mitigation process.

companyName: ARTELO BIOSCIENCES, INC.

ticker: ARTL


text: As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management. Personnel at all levels and departments are expected to be in compliance with our cybersecurity policies.


text: We engage consultants and auditors in connection with our risk assessment processes. These service providers assist us designing and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to affirm that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: One of the key functions of our Board is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board administers its cybersecurity risk oversight function through its audit committee.


text: Our Chief Financial Officer and members of our audit committee are primarily responsible to assess and manage our material risks from cybersecurity threats with assistance from third-party service providers that may bring more expertise regarding cybersecurity matters.


text: Our Chief Financial Officer and members of our audit committee oversee our cybersecurity policies and processes, including those described in "Risk Management and Strategy" above. The processes by which our Chief Financial Officer and members of our audit committee are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents includes the following:


text: Prevention: Our cyber security consultants operate a remote monitoring and management system which enables continuous monitoring of IT components, provides IT maintenance, and installs and maintains security and recovery capabilities including: patch management, antivirus, cloud data back up, and mobile device management.


text: Detection: Our cyber security consultants continuously monitor our environment for issues and alerts. The security tools that are installed in our systems and devices give them insight into possible suspicious behaviors. When warranted, the cyber security consultants will work with the IT support team to respond to possible security incidents as rapidly as possible.


text: Remediation: When necessary, our cyber security consultants are prepared to respond as a CIRT (Computer Incident Response Team). If necessary, security experts are prepared to perform DFS (Digital Forensics Sciences) on devices that might have been compromised.


text: Our Chief Financial Officer and key personnel provide quarterly briefings to the audit committee regarding our company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. Our audit committee provides regular updates to the Board on such reports.


text: Risk Management and Strategy The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. These processes are integrated into the Company's overall risk management systems, as overseen by the Company's board of directors, primarily through its audit committee.

companyName: Lithium Corp

ticker: LTUM


text: Risk Management and Strategy We are a holding company. Yubo Beijing has implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to its critical computer networks, third-party hosted services, communications systems, hardware and software, and its critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and trade secrets, data related to its stem cell bank and customers of its light application products and health related services (collectively, the "Information Systems and Data").

companyName: Yubo International Biotech Ltd

ticker: YBGJ


text: The cybersecurity function within Yubo Beijing helps identify, assess and manage its cybersecurity threats and risks. The cybersecurity function identifies and assesses risks from cybersecurity threats by monitoring and evaluating the threat environment using various methods including, for example manual tools, internal or external audits, automated tools, subscribing to and analyzing reports and services that identify cybersecurity threats and threat actors, conducting vulnerability assessments to identify vulnerabilities, conducting scans of the threat environment, and evaluating threats reported to management. Yubo Beijing implements and maintains various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to the Information Systems and Data, including, for example: an incident response policy, incident detection and response, data encryption, network security controls, system monitoring, penetration testing, employee training, a dedicated cybersecurity staff member, and physical security mechanisms.


text: Yubo Beijing's assessment and management of material risks from cybersecurity threats are integrated into its overall risk management processes. For example, the cybersecurity function works with management to prioritize the risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to its business.


text: Yubo Beijing uses third-party service providers to assist it from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example cybersecurity software providers, managed cybersecurity service providers, and penetration testing firms. Yubo Beijing also uses third-party service providers to perform a variety of functions throughout its business, such as application providers and hosting companies. Yubo Beijing manages cybersecurity risks associated with its use of these providers by reviewing their security assessments and applicable reports.


text: Cybersecurity Governance Our Board considers cybersecurity risk as part of its risk oversight function and is responsible for overseeing the cybersecurity and other information technology risks. Our board also oversees Yubo Beijing's management's implementation of the cybersecurity risk management program.


text: The Board receives periodical reports from Yubo Beijing's management on cybersecurity risks. In addition, Yubo Beijing's management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: The Board also receives briefings from Yubo Beijing's management on the cyber risk management program. Board members receive presentations on cybersecurity topics certain Yubo Beijing's management, internal security staff or external experts as part of the Board's continuing education on topics that impact public companies.


text: Yubo Beijing's management team is responsible for assessing and managing the material risks from cybersecurity threats. The team has primary responsibility for its overall cybersecurity risk management program and supervises both its internal cybersecurity personnel and its retained external cybersecurity consultants. Yubo Beijing's management team's experience includes decades of managing public pharmaceutical companies, including their related information technology and cybersecurity risk management programs.


text: Yubo Beijing's management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by Yubo Beijing; and alerts and reports produced by security tools deployed in the IT environment.


text: The Company has cloud based security, and their computers and servers are fire walled. In addition, the Company does not allow virtual log-in on their computers.

companyName: CitroTech Inc.

ticker: CITR


text: We are currently seeking and investigating potential assets, property or businesses to acquire, and currently have no material business operations. As such, we have very limited information technology systems and infrastructure in place to assist with our search with potential assets, property or businesses to acquire. Further, we have very limited cybersecurity measures in place, such as, firewalls and intrusion detection systems.

companyName: Xenous Holdings, Inc.

ticker: XITO


text: However, there can be no assurance that these measures will be effective in preventing or mitigating the impact of a cyber-attack or data breach. We cannot predict the occurrence, timing, or severity of cybersecurity incidents, but we remain committed to protecting our information assets and maintaining the trust of our stakeholders.


text: The Company's process for assessing, identifying, and managing material risks from cybersecurity threats is as follows: the Company has cloud-based security, our computers and servers are fire walled. In addition, the Company does not allow virtual log-in on their computers. The Company has engaged any third-party consultants with regard to our cloud-based cybersecurity. We have had no current or previous cybersecurity incidents that have materially affected or were likely to materially affect the Company's business strategy, results of operations or financial condition.

companyName: My City Builders, Inc.

ticker: MYCB


text: The Company's management team and board of directors jointly oversee the Company's cybersecurity. The third party consultants provide monthly online security reports as well as any web based security updates and possible threats to be aware of.


text: Risk Management and Strategy We are an early stage biopharmaceutical company and we are focused on developing our patented DehydraTECH technology. We do not sell products and therefore do not maintain customer lists or similar personal information. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted a formal cybersecurity risk management program or process for assessing cybersecurity risk currently. We assess material risks from cybersecurity threats on an ongoing basis, including any potential unauthorized access to or occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. To this end, we utilize an outsourced information technology consultant, who we believe has sufficient experience and expertise with regard to cybersecurity matters, to implement systems and procedures designed to reduce, respond to and monitor for cybersecurity threats and vulnerabilities. Our outsourced information technology consultant conducts proactive patching and monitoring of all of our existing systems monthly and has implemented systems and procedures to mitigate cybersecurity risks that we believe are appropriate for a company of our size, stage of growth and financial condition.

companyName: Lexaria Bioscience Corp.

ticker: LEXX


text: As of the date of this Annual Report on Form 10-K, we are not aware of any cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected us, including our business strategy, results of operations or financial condition. However, as discussed under "Risk Factors" in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple risks to us, including potentially to our results of operations and financial condition. For additional information concerning risks related to cybersecurity, see Item 1.A. Risk Factors: Risks Associated with our Business and Industry.


text: Management is responsible for the day-to-day management of the risks we face, while our Board of Directors as a whole has responsibility for the oversight of risk management, including as to material risks from cybersecurity threats. In its risk oversight role, our Board of Directors has the responsibility to satisfy itself that the risk management processes designed and implemented by management are appropriate and functioning as designed. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, integrity, and availability of the information that we collect and store by identifying, preventing, and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.


text: The Company has cloud-based security, and their computers and servers are fire walled. In addition, the Company does not allow virtual log-in on their computers.

companyName: Pacific Sports Exchange Inc.

ticker: PSPX


text: We engage consultants and auditors in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to affirm that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: One of the key functions of our Board is the informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board administers its cybersecurity risk oversight function through its audit committee.


text: Prevention: Our cyber security consultants operate a remote monitoring and management system which enables continuous monitoring of IT components, provides IT maintenance, and installs and maintains security and recovery capabilities, including patch management, antivirus, cloud data back up, and mobile device management.


text: Our Board receives periodical reports from Yubo Beijing's management on cybersecurity risks. In addition, Yubo Beijing's management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Our Board also receives briefings from Yubo Beijing's management on the cyber risk management program. Board members receive presentations on cybersecurity topics certain Yubo Beijing's management, internal security staff or external experts as part of our Board's continuing education on topics that impact public companies.


text: We have implemented cybersecurity risk management procedures, in accordance with our risk profile and business size. We rely on our information technology to operate our business. As such, we have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.

companyName: LINGERIE FIGHTING CHAMPIONSHIPS, INC.

ticker: BOTY


text: We have designed our business applications to minimize the impact that cybersecurity incidents could have on our business and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We have a trained group of people to carry out the activities of monitoring and detection of cybersecurity threats and respond to any cybersecurity threats or incidents. The Head of IT department is responsible for oversight of cybersecurity risks and addressing potential cybersecurity risks to business programs, employees, clients, vendors and partners. The Head of IT Department reports to our Chief Executive Officer who reports to the Audit Committee at the board-level, as appropriate.


text: As of December 31, 2024, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and financial statements.


text: As of January 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: STARGUIDE GROUP, INC.

ticker: STRG


text: As of March 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: PetroGas Co

ticker: PTCO


text: As of April 30, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: Natural Resource Holdings, Inc.

ticker: NRHI


text: As of March 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and financial statements.

companyName: Greentech Innovations, Inc.

ticker: GTIC


text: We rely on proprietary and third-party information systems to process, transmit and store information and to manage or support our business processes. We store and maintain confidential financial and business information regarding us and persons with whom we do business on our information technology systems. We also collect and hold personally identifiable information of our employees in connection with their employment. In addition, we engage third-party service providers that may collect and hold personally identifiable information of our employees in connection with providing business services to us, including web hosting, accounting, payroll and benefit services.

companyName: GIVBUX, INC.

ticker: GBUX


text: Cybersecurity Governance The protection of the information technology systems on which we rely is critically important to us. The Audit Committee of the Board of Directors has oversight for the reliability and security of our information systems, including identifying material risks and cybersecurity threats arising in our business. The Audit Committee receives updates from management of the ongoing cybersecurity initiatives and events at least once per quarter. In the event of a material cybersecurity incident, management will notify the Board of Directors, which will provide oversight for the Company's response and mitigation to the incident.


text: Our Chief Technical Officer is responsible for the management of the Company's information systems and oversees the Company's information technology team ("IT Team"). The IT Team has in place documented procedures for cybersecurity response plans, which are reviewed annually or as events warrant. The IT Team utilizes third party security experts to provide continuous external penetration testing, conduct security reviews, and to provide a managed security operations center that does 24/7 monitoring as well as provide additional resources for threat and incident response activities.


text: Cybersecurity Risk Management and Strategy We employ a multi-layered approach to protect our information systems from cybersecurity threats. We have around the clock security operations center coverage that uses an industry leading security information and event management tool to aggregate and analyze data and provide immediate alerts of potential breaches.


text: Cybersecurity Risk Management We are in the process of implementing a structured cybersecurity risk management framework designed to assess, identify, and manage material risks from cybersecurity threats. These processes are being integrated into our overall enterprise risk management system to ensure that cybersecurity considerations are embedded within broader risk assessment and mitigation efforts. As part of this framework, we plan to engage qualified third-party consultants and auditors to assist in identifying risks, validating controls, and supporting continuous improvement. We also intend to establish oversight procedures to evaluate and monitor risks associated with our use of third-party service providers.

companyName: VERDE RESOURCES, INC.

ticker: VRDR


text: Cybersecurity Risks To date, we have not experienced a cybersecurity incident that has materially affected our business strategy, results of operations, or financial condition. While we recognize that evolving cybersecurity threats could pose risks, we currently believe such risks are not reasonably likely to materially affect our performance.


text: Cybersecurity Governance Our Board of Directors retains overall responsibility for oversight of cybersecurity risks. Once formed, we intend to formally delegated this oversight function to the audit committee, which will receive regular reports from management regarding cybersecurity risk assessments, monitoring activities, and incident response planning. We intend to update the audit committee as frequently as warranted by material developments, but in no event less often than annually.


text: Day-to-day responsibility for managing cybersecurity risks rests with senior management, including the Chief Operating Officer, with support from external cybersecurity advisors. Management is responsible for overseeing the Company's prevention, detection, and response measures, as well as the development of incident response and recovery plans. Management receives updates from third-party service providers, consultants, and internal staff, and reports these matters to the Board of Directors or the Audit Committee on a scheduled basis.


text: The Company's process for assessing, identifying, and managing material risks from cybersecurity threats is as follows: the Company has cloud-based security, our computers and servers are fire walled. In addition, the Company does not allow virtual log-in on their computers. The Company has engaged third-party consultants with regard to our cloud-based cybersecurity. We have had no current or previous cybersecurity incidents that have materially affected or were likely to materially affect the Company's business strategy, results of operations or financial condition.


text: The Company's management team and board of directors jointly oversee the Company's cybersecurity. The third-party consultants provide monthly online security reports as well as any web-based security updates and possible threats to be aware of.


text: Management is responsible for the day-to-day management of the risks we face, while our Board of Directors ("Board") as a whole has responsibility for the oversight of risk management, including as to material risks from cybersecurity threats. In its risk oversight role, our Board has the responsibility to satisfy itself that the risk management processes designed and implemented by management are appropriate and functioning as designed. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, integrity, and availability of the information that we collect and store by identifying, preventing, and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.


text: As of the date of this Annual Report, we have not yet adopted a formal, written cybersecurity risk management policy or enterprise-wide cybersecurity governance framework. However, we are aware of the growing risks associated with cybersecurity threats and are in the early stages of assessing and developing appropriate controls to identify and mitigate such risks in proportion to our size, scale, and operational complexity. We intend to implement a formal cybersecurity risk assessment and governance policy by Q1 2026. This process will include third-party vendor risk assessment, incident response protocols, and reporting mechanisms to management and the sole director.

companyName: VITASPRING BIOMEDICAL CO. LTD.


text: like other companies in our industry, face several cybersecurity risks in connection with our business. Our business strategy, results of operations, and financial condition have not, to date, been materially affected by risks from cybersecurity incidents or threats. During the reporting period, we have not, to our knowledge, experienced any material cybersecurity threats or incidents.

companyName: NexMetals Mining Corp.

ticker: NEXM


text: Company does not currently have processes in place for assessing, identifying or managing material risks from cybersecurity threats, but we intend to implement a formal cybersecurity program in the future. The program will be aimed at safeguarding the confidentiality, integrity, and availability of our essential systems and information, and will be designed to detect and mitigate risks from cybersecurity threats to our data and our systems. Central to our future cybersecurity efforts will be a robust incident response plan designed to designing and evaluating our cybersecurity program, we intend to adopt the National Institute of Standards and Technology Cybersecurity Framework (" NIST CSF 2.0 ") as a guiding principle. It is important to clarify that our use of the NIST CSF 2.0 will be for guidance purposes to frame our risk identification, assessment and management processes and will not equate to compliance with any specific technical standards or requirements.


text: key components of our future cybersecurity program are expected to include: conducting risk assessments to pinpoint material cybersecurity threats to our critical systems, data, products, services, and overall IT infrastructure;


text: third-party security expert consultant overseeing the risk assessment process, maintenance of security controls, and coordination of responses to cybersecurity incidents;


text: with external service providers to evaluate, enhance, or support our security measures; and incident response plan outlining specific procedures for managing cybersecurity incidents.


text: governance of cybersecurity risks will be a critical function of our Board, which will have a key role in the oversight of cybersecurity and related technology risks. The Board will be tasked with monitoring the effectiveness of our cybersecurity risk management program, once adopted.


text: Board will receive regular updates from management on the state of cybersecurity risks facing the Company. This includes briefings on any significant cybersecurity incidents and ongoing cybersecurity risk management efforts.


text: responsibility for day-to-day management of cybersecurity risks lies with the Chief Financial Officer and Chief Executive Officer, with assistance from other members of management and contracted information technology consultants. The Company's contracted information technology consultants consist of highly experienced professionals in the areas of network security and disaster recovery. This team will be at the forefront of our cybersecurity initiatives, coordinating both internal and external resources to anticipate, identify, and mitigate cyber threats. Our approach will include regular updates from our third-party security expert consultant, leveraging intelligence from various sources, and utilizing advanced security tools to protect our digital environment.


text: have implemented mechanisms to monitor and manage cybersecurity threats and incidents, including utilization of tools for continuous monitoring of our IT environment to detect and mitigate threats, a fundamental plan for responding to cyber incidents and training for employees to recognize and report potential cybersecurity incidents and to foster a culture of cybersecurity awareness and vigilance.

companyName: Processa Pharmaceuticals, Inc.

ticker: PCSA


text: Our Chief Administrative Officer, along with a third-party service provider, are responsible for operational oversight of our cybersecurity strategy and policies. Any identified cybersecurity incident is reported to our Chief Administrative Officer who evaluates the severity of the incident. Based on this assessment, further steps are taken involving other members of management and, depending on the severity, the audit committee and the Board of Directors. We believe this structured approach allows us to effectively manage and mitigate cybersecurity risks, safeguarding our systems and data against various digital threats. Additionally, our proactive stance is supported by cybersecurity insurance, which further reinforces our preparedness against potential cyber threats.


text: Incident Reporting and Management the years ended December 31, 2023 and 2024, we have not identified any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, we remain vigilant and prepared to respond effectively to any incidents, should they arise.


text: our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners. In addition, cybersecurity incidents could have material adverse effects on our business strategy, financial condition, and results of operations (e.g., a significant breach could result in direct financial losses due to fraud, system downtime impacting revenue generation, increased compliance costs or contractual liabilities with third-party are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.

companyName: Rubber Leaf Inc

ticker: RLEA


text: addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices. The Board (or designated committee or officer) will receive periodic updates on cybersecurity risks, including emerging threats, mitigation efforts and incident response activities. The updates will be provided at least annually, or more frequently as needed, to ensure cybersecurity risks are appropriately managed and integrated into our broader risk oversight strategy.


text: Management and Strategy We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Evofem Biosciences, Inc.

ticker: EVFM


text: part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with Information Technology and management. Personnel at all levels and departments are made aware of our cybersecurity policies through engage consultants, or other third parties in connection with our risk assessment processes if required. These service providers assist us in designing and implementing our cybersecurity policies and procedures. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: management team is primarily responsible for assessing and managing our material risks from cybersecurity threats with assistance from third-party service providers as needed. management team oversees our cybersecurity policies and processes, including those described in the "Risk Management and Strategy"


text: above. The cybersecurity risk management program includes tools and activities to prevent, detect, and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents.


text: management team will also provide periodic briefings to the audit committee regarding our Company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. Our audit committee will then provide updates to the Board on such reports.


text: Our board administers its cybersecurity risk oversight function directly through our audit committee. Our audit committee has primary responsibility for overseeing our risk assessment and risk management policies (including with respect to cybersecurity matters). Our audit committee regularly discusses with management, counsel, and auditors the Company's major risk exposures. This includes potential financial impact on the Company and the steps taken to monitor and control those risks. Additionally, our board is informed regarding the risks facing the Company and coordinates with management and our cybersecurity team to ensure our board receives regular risk assessment updates from management.

companyName: Lucid Diagnostics Inc.

ticker: LUCD


text: We retain Techneto, Inc. d/b/a CyberTeam ("CyberTeam"), a third party vendor that reports directly to our president and chief operating officer, to be responsible for identifying, assessing and managing the Company's risks from cybersecurity threats. CyberTeam has been with the Company since the Company's inception and has over 25 years of experience in cybersecurity.


text: CyberTeam provides our board and executive leadership team with periodic updates about our cybersecurity program and material risks. This includes updates on cybersecurity practices, programs, and the status of projects designed to strengthen internal cybersecurity and data protection.


text: Senior management, with the support of CyberTeam, monitors current events and trends related to cybersecurity and assesses any potential impact on current systems and operations.


text: Third-party partners who are in possession of our confidential information are generally required to notify us in the event of a cybersecurity incident within their systems that have, or are reasonably likely to, compromise the security of such information. When appropriate, we enlist CyberTeam to perform a risk and security assessment of the cybersecurity protocols and procedures of critical third-party partners.


text: Processes for managing cybersecurity risks related to cybersecurity until the risk is mitigated to an acceptable level or fully remediated. When risks are identified, CyberTeam oversees mitigation plans with the risk owner which are communicated to necessary teams and remediation steps are taken.


text: Our process for identifying, assessing, and managing risks related to cybersecurity generally involves CyberTeam regularly meeting with our executive leadership team, and when appropriate, our board and/or audit committee to discuss cybersecurity related risks identified and the potential likelihood and severity of each risk.


text: these risk assessments, we intend to take any steps necessary to redesign, implement, and maintain reasonable safeguards to minimize identified risks; to reasonably address any identified gaps in existing safeguards; and to regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with an IT consultant, who reports to our Chief Executive Officer and Chief Financial Officer, to manage the risk assessment and mitigation process. As part of our overall risk management system, we monitor and periodically evaluate our safeguards.

companyName: LIXTE BIOTECHNOLOGY HOLDINGS, INC.

ticker: LIXT


text: may engage consultants, or other third parties in connection with our risk assessment processes. These service providers can assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.


text: date, we have not encountered cybersecurity challenges that have materially impaired our operations or financial condition. Additional information regarding risks from cybersecurity threats is provided at "Item 1A. Risk Factors".


text: Chief Executive Officer and Chief Financial Officer interact with our IT consultant and oversee our cybersecurity policies and processes, including those described above at "Risk Management and Strategy". The cybersecurity risk management program includes tools and activities to prevent, detect, and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents.


text: Chief Executive Officer and Chief Financial Officer provide periodic briefings to the audit committee regarding the Company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and similar issues.


text: cybersecurity policies, standards, processes, and practices are based on applicable laws and regulations and informed by industry standards and industry-recognized practices. Our strategy to assess, identify, and manage material cybersecurity risks is through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security, and availability of our information systems and data. We implement security measures and processes to identify, prevent, and mitigate cybersecurity threats and to effectively respond to cybersecurity incidents when they occur. Our cyber risk management includes: (1) enterprise risk management to identify top cybersecurity risks; (2) vulnerability management to identify software vulnerabilities and risks related to compute infrastructure; (3) vendor risk management to identify risks related to third parties and business partners, which includes pre-engagement review, use of contractual security provisions, and continued monitoring, as applicable; (4) privacy risk management to identify privacy risks in our product and platforms and ensure regulatory compliance; (5) security monitoring to analyze and assess threat activity in real time; and (6) security incident response to investigate, respond to, and mitigate cyber threats. We regularly engage third parties to identify risks in our underlying software and infrastructure, to provide threat intelligence, and to assist in triaging, identifying, and responding to cyber threats.

companyName: VIVOS INC

ticker: RDGL


text: 2024, we were part of an elaborate phishing scam that resulted in a loss and as a result we enabled additional cybersecurity procedures to ensure this does not occur again, and established new checking accounts to mitigate any further losses. Other than this one incident, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: cybersecurity risk management efforts leverage the National Institute of Standards and Technology (NIST) cybersecurity framework, that also aligns with the SP800-53 r5 Information Security controls framework. Our cybersecurity personnel identify and assess risks using various methods and security tools designed to help prevent, identify, protect, detect, escalate, respond, and recover from identified vulnerabilities and security incidents in a timely manner.

companyName: INTELLINETICS, INC.

ticker: INLX


text: maintain various technical, physical, and organizational measures, in the form of policies, standards, processes, and technical capabilities, designed to manage and mitigate material risks from cybersecurity threats to our Systems and Data, including, among other things, risk and threat assessment, internal reporting, annual and ongoing cybersecurity awareness training for employees, mechanisms to detect and monitor unusual network activity, as well as threat detection, containment, incident response and backup recovery tools.


text: conduct tests of our cybersecurity program on a regular basis that are designed to identify our cybersecurity risks. We use third-party security service providers and cybersecurity consultants to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats and review our cybersecurity program. The results of such reviews are reported to certain members of our senior management, who evaluate material risks from cybersecurity threats against our overall business objectives and report to our board of directors, which evaluates our overall enterprise risk. Within our senior management, our Chief Financial Officer and Chief Technology Officer (CTO) review our cybersecurity program at least quarterly. Our CTO is one of our founders and has been in technology since 1996. One of our board members has been employed with a cyber security company.


text: we have not, as of the date of this Annual Report on Form 10-K, experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, please see "Risk Factors" Risks."


text: addition, the Company's information security and/cybersecurity program is managed by our Chief Technology Officer ("CTO"), whose team is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes. The CTO provides periodic reports to our audit committee as well as our Co-Chief Executive Officers and Chief Financial Officer and other members of our senior management as appropriate. We have also established cross-functional teams to collaborate and communicate on cybersecurity-related issues. The reports to management include updates on the Company's cyber risks and threats, the status of projects to strengthen our information security systems, assessments of the information security program, and the emerging threat landscape. Our CTO, Mr. Eliran Ben-Zikri served in the one of the most elite computer units of the Israeli Defense Force and has over 10 years of experience in the cloud technology, previously holding senior positions in leading Israeli technology companies, including eToro and SimilarWeb.

companyName: SKYX Platforms Corp.

ticker: SKYX


text: of the date of this report, the Company has no t identified any cybersecurity threats or incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition. However, there can be no assurance that the Company, or its third-party business partners or service providers, will not experience a cybersecurity threat or incident in the future that could materially adversely affect the Company, including its business strategy, results of operations, or financial condition. For further discussion of the risks related to cybersecurity, see the risk factors discussed under Item 1A. "Risk Factors" in this report.


text: retain Techneto, Inc. d/b/a CyberTeam ("CyberTeam"), a third party vendor that reports directly to our Chief Operating Officer, to be responsible for identifying, assessing and managing the Company's risks from cybersecurity threats. CyberTeam has been with the Company since the Company's inception and has over 25 years of experience in cybersecurity.

companyName: PAVmed Inc.

ticker: PAVM


text: as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. Management is not aware of any cybersecurity incidents encountered by the Company since the Sponsor Handover. In addition to our own cybersecurity risks, any proposed Business Combination target, such as EEW, may have been subject to, or may in the future be subject to, cybersecurity incidents.

companyName: Compass Digital Acquisition Corp.

ticker: CDAQF


text: plan to strategically incorporate cybersecurity risk management into all our comprehensive risk management framework, fostering a corporate culture that prioritizes cybersecurity at all levels. This integration shall be done in stages so as to guarantee that cybersecurity factors are ingrained in our decision-making processes throughout the organization.

companyName: ASIAFIN HOLDINGS CORP.

ticker: ASFH


text: We plan to incorporate a risk management team to collaborate closely with the IT department, consistently assessing and mitigating cybersecurity risks in alignment with our business goals and operational requirements.


text: recognize the intricate and ever-changing nature of cybersecurity threats. To address this, we have collaborated with external experts, including cybersecurity assessors and consultants. This cooperation involves audits, threat assessments, and consultations to enhance our security measures. These efforts ensure that our cybersecurity strategies adhere to industry best practices and remain effective in safeguarding our systems.


text: of Directors is tasked with overseeing data privacy and cybersecurity risks. They regularly review the Company's cybersecurity program with management, evaluating the adequacy of controls and security for our information technology systems. Additionally, they assess the Company's response plan in case of a security breach affecting these systems. Annually, the Board of Directors receives updates on potential cybersecurity incidents, data privacy, and compliance programs, engaging in active discussions with management on cybersecurity risks.


text: Management and Strategy a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have only begun to conduct comprehensive risk assessments, establish an incident response plan, and engage with external cybersecurity consultants for assessments or services. As of the date of this report, we have adopted an incident response plan which governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors. Our Chief Executive Officer has been designated as the lead in implementing our incident response plan.

companyName: MDWerks, Inc.

ticker: MDWK


text: addition, our board of directors will oversee any cybersecurity risk management framework and a dedicated committee of our board of directors will review and approve any cybersecurity policies, strategies and risk management practices.


text: audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The audit committee is informed of material risks, when applicable, from cybersecurity threats by the Company's Chief Executive Officer. Updates on cybersecurity matters, including material risks and threats, are provided to the Company's audit committee, and the audit committee provides updates to the Company's board of directors at regular board meetings.


text: the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.


text: audit committee of the Company's board of directors, with the assistance of the Company's Chief Executive Officer, is responsible for overseeing the establishment and effectiveness of controls and other procedures, including controls and procedures related to the public disclosure of material cybersecurity matters.


text: of the date of this report, other than the foregoing, the Company is no t aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factors in Item 1A. Risk Factors in this report.


text: Risk Management and Strategy have developed and maintained a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats, including by engaging a third-party cybersecurity service provider, which communicates directly with our management and compliance personnel. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants, and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors, and service providers in connection with our operations. Our risk management, legal, and compliance personnel oversee and identify, including through a third-party cybersecurity service provider, material risks from cybersecurity threats associated with our use of such entities.

companyName: SurgePays, Inc.

ticker: SURG


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader including employees and external third-party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; awareness training of our employees, incident response personnel, and senior management;


text: cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and third-party risk management process for service providers, suppliers, and vendors.


text: Board provides strategic oversight on cybersecurity matters, including material risks associated with cybersecurity threats. The Board has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management methodology. Our Board and the Audit Committee receives periodic updates from our Chief Financial Officer and more frequently as needed, regarding the overall state of our cybersecurity preparedness, information on the current threat landscape, and material risks from cybersecurity threats and cybersecurity incidents. The Audit Committee and our management team are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents, including through the receipt of notifications from third-party service providers and reliance on communications with our risk management, legal, and/or compliance personnel.


text: Audit Committee reports to the full Board regarding cybersecurity activities. The full Board also receives briefings from management on cyber risk issues and best practices. Our management team is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for developing and maintaining our overall cybersecurity risk methodology and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.


text: have not adopted any formal cybersecurity risk management program or formal processes for assessing, identifying, and managing material risks from cybersecurity threats. Our board of directors has oversight responsibility for our overall risk management, including cybersecurity risk, and has not delegated oversight authority for cybersecurity risks to any committee. We recently obtained SOC-II Type 1 compliance on March 18, 2025. During the year ended December 31, 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: Wellgistics Health, Inc.

ticker: WGRX


text: our formation, we have been primarily focused on research and development activities and pursuing FDA approval of our planned products, and recently commenced building our commercial team. We have 22 employees and currently use third-party vendors and service providers use a third-party sub-contractor to manage all Information Technology (IT) issues, including protection against, detection, and response to cyberattacks.

companyName: Microbot Medical Inc.

ticker: MBOT


text: measures that are taken to ensure proper protection include: computers are protected using a cloud-powered endpoint security solution that helps enterprises prevent, detect, investigate, and respond to advanced threats on their networks. It offers endpoint protection, endpoint detection and response, mobile threat defense, and integrated vulnerability management. It also provides, among other things, malware and spyware detection and remediation, rootkit detection and remediation and network vulnerability detection. Company computer hard drives are automatically encrypted.


text: The Company is not aware of any material security breach to date. Accordingly, the Company has not incurred any material expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing a disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations. There can be no assurance that the Company's third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be fully implemented, complied with or effective in protecting the Company's systems and information.


text: We recognize the critical importance of cybersecurity in safeguarding sensitive information and maintaining operational resilience. We have processes for assessing, identifying and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from internal and external cyber threats, protect employee and customer information from unauthorized access or attack, as well as secure our networks and systems.

companyName: Sanara MedTech Inc.

ticker: SMTI


text: The audit committee of the board of directors (the "Audit Committee") is responsible for overseeing cybersecurity risk and periodically updates our board of directors on such matters. The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents.


text: As a company, we leverage the National Institute of Standards and Technology (NIST) Cybersecurity Framework to align with industry best practices and to develop policies and procedures, which include a Cybersecurity Response Plan focusing on detection, validation, mitigation, recovery, and refinement. In addition to the Cybersecurity Response Plan, we provide cybersecurity awareness training to our employees, including training on social engineering, phishing, password protection, confidential data protection, mobile security, and incident reporting, to help prevent and reduce the impact of potential cybersecurity events.


text: We have strategically invested resources and tools to combat the ever-changing cyber threat landscape. These investments include growing our internal technology team headcount and bolstering our partnerships with entities with external expertise, resulting in increased protection, monitoring, and response capabilities. We have also made investments to carry cybersecurity insurance that provides additional protection and resources to reduce a cybersecurity event's impact and potential losses.


text: Our technology and management teams meet regularly with key internal and external stakeholders to review cybersecurity concerns and areas for continued focus and improvement.


text: We face risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. To date, we have not experienced any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, financial condition, results of operations, or cash flows.


text: See "Risk Factors – Risks Related to Our Business – Security breaches and other disruptions could compromise our information and expose us to liability, which would cause our business and reputation to suffer."


text: Because we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes annual assessments of the SOC reports of our providers and implementing complementary controls. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. We have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing.

companyName: NewHydrogen, Inc.

ticker: NEWH


text: We maintain a cyber-risk management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our data and information systems. This program is to ensure that cybersecurity considerations are included in decision-making processes throughout the Company.

companyName: Scienture Holdings, Inc.

ticker: SCNX


text: Our approach consists of, among other things, cybersecurity threat and vulnerability prevention, detection, mitigation and remediation of potential cybersecurity risks.


text: We employ cybersecurity intrusion detection systems and continuous monitoring, in order to help defend against unauthorized access. We also employ identity-based access controls and identity authentication requirements. Access to the Company's data is monitored and controlled according to access control policies. Data protection and privacy practices, including data loss prevention, help to safeguard sensitive information. We have also outsourced significant elements of our information technology infrastructure; as a result, we manage independent vendor relationships with third parties who are responsible for maintaining significant elements of our information technology systems and infrastructure.


text: Risk Management and Strategy. We depend on software applications, information technology systems, computing infrastructure and cloud service providers to operate our of these systems are managed, hosted, provided or used by third parties to assist in conducting our business and which have their own cybersecurity measures in place. We are currently working to ensure that we satisfy generally applicable industry standards and best practice methods for the assessment, identification and management of risks from cybersecurity threats that may jeopardize our line of business or may pose a risk to our information technology systems, including from third parties with whom we work. To further enhance our understanding of potential threats and prioritize our security efforts, we conducted a comprehensive cybersecurity threat survey in 2024, which included a review of cybersecurity threats. Based on the findings of this survey, we are actively implementing recommended security measures to mitigate identified risks, with such implementation being conducted with the support and expertise of a professional services company serving as our outsourced cybersecurity partner.

companyName: Odysight.ai Inc.

ticker: ODYS


text: cybersecurity team is composed of our Information Security Coordinator, who has several years of experience overseeing cybersecurity and other IT matters, our IT Coordinator and an outsourced cybersecurity partner, who employs various professionals with expertise in the field of cybersecurity. Our cybersecurity team oversees our internal information security policies and procedures and is responsible for the day-to-day implementation and monitoring of our security controls, including those developed as a result of the 2024 threat survey.


text: In case of a cyber incident, our cybersecurity team will maintain a cyber incident reporting and response process and will provide management notifications based on the seriousness of any incident. Management will provide periodic reports to our board of directors/audit committee on cybersecurity risks and steps that the Company has taken to address those risks. Our outsourced cybersecurity partner provides expert support in areas such as threat intelligence, vulnerability assessments, incident response and ongoing security monitoring. This collaborative approach allows us to leverage both internal oversight and external expertise to enhance our cybersecurity posture.


text: Our information security policies and procedures are required to be reviewed on a regular basis have not experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations; however, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect our Company, see "Item 1A. – Risk Factors" included elsewhere this Annual Report on Form 10-K, including "Our data and information systems and network infrastructure may be subject to hacking or other cybersecurity threats. If our security measures are breached and an unauthorized party obtains access to our proprietary business information, our information systems may be perceived as being insecure, which could harm our business and reputation and our proprietary business information could be misappropriated, which could have an adverse effect on our business and results of operations."


text: is an integral part of the Board's risk analysis and discussions with management. Our board of directors administers the Company's cybersecurity risk oversight function directly as a whole, as well as through the audit committee. At least annually, the full Board is updated on the Company's cybersecurity risks and risk mitigation strategy by the audit committee. The audit committee has access to advisors, and various other reports, and presentation materials related to cybersecurity threats, risk and mitigation. The Board also receives ad hoc updates, as needed, about material changes to the Company's cybersecurity program and/or the cybersecurity landscape, including briefings on major legislative and regulatory developments.

companyName: OXBRIDGE RE HOLDINGS Ltd

ticker: OXBR


text: The Company regularly evaluates its cybersecurity risk profile and leads the development of strategies to mitigate risks and address cybersecurity issues that may arise in consultation with members of our senior management team. On an as needed basis, the Company engages external advisors and consultants to assess our internal cybersecurity programs and compliance with applicable regulatory requirements and industry standards have formal policies and procedures that address cybersecurity incident response and disaster recovery from interference with our critical applications. Our Cybersecurity Incident Response Standard provides a documented framework for responding to cybersecurity incidents in coordination across multiple departments. In the event of such an incident, our Cybersecurity Incident Response Team ("CIRT"), which includes our CIO, Chief Executive Officer, Chief Financial Officer, and outside legal counsel, would respond to such incident in accordance with our Cybersecurity Incident Response Standard. Any cybersecurity incident that is designated by the CIRT with a "High"


text: user awareness training is mandatory for all new hires and for existing employees on an annual basis to help protect our employees and the Company against cybersecurity threats. Novel cybersecurity threats to the Company that are identified are communicated to all employees by email, as needed, in an effort to promote awareness and protect the Company from cyber attacks.


text: Management Strategy maintain an Enterprise Risk Management ("ERM") program to identify and respond to the most critical risks to our business, including cybersecurity risks. Risks and vulnerabilities from our increased reliance on information technology systems are assessed at least annually by our Executive Management Team as part of our ERM program. In response to such assessments, controls are embedded into our processes and technology by our Executive Management Team to seek to mitigate risks to our systems and processes from cybersecurity incidents. We continuously evaluate whether we have adequate controls in place utilizing a risk-based approach that tailors and applies best practice from various industry standard IT Management frameworks such as Information Technology Infrastructure Library (ITIL), Control Objectives for Information Technologies (COBIT), National Institute of Standards and Technology CyberSecurity Framework, and ISO/IEC 27001.


text: daily operations are continuously monitored. We monitor traffic traversing our computer networks and have implemented IT controls and processes to secure our business applications and prevent unauthorized access to or the loss of sensitive data. Our controls include the use of multiple encryption layers for data in transit and at rest, multi-factor authentication, data classification, and data loss prevention. We plan to assess the adequacy of our cybersecurity IT controls through annual cybersecurity vulnerability testing.


text: Company maintains a governance structure to address cybersecurity risk, which involves a dedicated Information Security Team (the "Information Security Team"), an Information Security Governance Board (the " Information Security Governance Board "), the Audit Committee of the Board and the Board.

companyName: Inspired Entertainment, Inc.

ticker: INSE


text: Company's Information Security Team, led by our Director of Information Security, is responsible for identifying, assessing, mitigating, and reporting on material cybersecurity risks to the Company's Information Security Governance Board. The Company's Director Information Security holds high-level licenses and certifications relating to information security, including being a Certified Chief Information Security Officer and holding a BCS Foundation Certificate in Formation Security Management Principles. The Company's Information Security Governance Board, chaired by the Company's Director of Information Security and comprised of the General Counsel, the President & Chief Executive Officer, the Chief Financial Officer, and the Chief Technology Officer - Product, drives awareness and alignment across broad stakeholder groups for cybersecurity governance and risk management and reporting. The Information Security Governance Board receives quarterly reports from the Company's Director of Information Security. The Audit Committee receives at least quarterly reports from the Company's Director of Information Security. The Audit Committee periodically reports to the Board.


text: Cybersecurity Processes continue to strengthen our cybersecurity measures to safeguard our information systems based on industry standards. Our measures include policies to promote internal compliance by our employees, policies and procedures to regularly evaluate the security of our information systems and implementation of third-party products, including intrusion prevention and detection solutions, multifactor identification and anti-virus software, to help detect and protect against potential cybersecurity threats. We educate our staff on cybersecurity matters with periodic risk awareness information, phishing awareness campaigns, and training materials. Moreover, given the rapid growth of our global operations in 2023 due to the Ibeo acquisition, and our expectations for near- and long-term strategic growth, our Information Technology, or IT, team is prioritizing enhancements to our response system and continuity plans.

companyName: MICROVISION, INC.

ticker: MVIS


text: evaluate our third-party information system providers, as well as any other provider that may have access to our data, for their maturity and reliability, and as a matter of policy we choose to only work with reputable vendors.


text: from Cybersecurity Threats have not encountered cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our operations or financial condition. A cybersecurity incident could be deemed to have a material impact on our operations if it caused a disruption to our ability to function as a global organization, including the interruption of our internal and external communications, public reporting, or management of our operations. Refer to "Item 1A. Risk Factors" in this annual report on Form 10-K, including "Our operations could be adversely impacted by information technology system failures, network disruptions, or cybersecurity breaches," for additional discussion about cybersecurity-related risks.


text: of Directors and Audit Committee delegated authority from our Board of Directors and in accordance with its charter, our Audit Committee is charged with the oversight of enterprise risk, including risk related to cybersecurity threats. Our Audit Committee Chair is expected to report regularly to our Board of Directors about our Audit Committee's oversight of enterprise risk. Our Audit Committee Chair reports quarterly to our Board of Directors specifically about our cybersecurity incident management and governance.


text: Management, and specifically our Chief Financial Officer, reports quarterly to our Audit Committee on cybersecurity, including initiatives and strategies, and incident reporting and any lessons learned. From time to time, management will also engage in informal discussions with members of the Audit Committee about our cybersecurity practices and risks, including informing our Audit Committee Chair in a timely manner about any cybersecurity incidents that management determines may have a significant impact on our operations or that may trigger any reporting obligations. Audit Committee will conduct an annual review of our cybersecurity measures and the effectiveness of our risk management strategies.


text: to the nature of our business, we face a variety of potential cybersecurity risks that are ever evolving and include unauthorized access to our systems and data, disruption of our online game services, theft of intellectual property, and third-party risks as a result of our use of various third party service providers and cloud service providers. The Company's risks related to our end user data is borne by our platform partners as we do not maintain any sensitive information of our players within our infrastructure. There have been no cybersecurity threat events identified during the year ended December 31, 2024, which have resulted in a material incident, or are reasonably likely to result in a material impact on our business strategy, results of operations or financial condition. For more information regarding risks relating to intellectual property and cybersecurity related attacks, see Item 1A of Part I, "Risk Factors — Risks Related to Intellectual Property" and "Risk Factors — Risks Related to Our Business and Industry" of this Annual Report.

companyName: Snail, Inc.

ticker: SNAL


text: are working towards the implementation of relevant controls within the National Institute of Standards and Technology ("NIST") Cybersecurity Framework to better address cybersecurity threats and we actively maintain a risk management plan that outlines the processes and procedures we use to identify, assess, mitigate and respond to cybersecurity risks. The plan is designed to protect the Company's assets and safeguard the confidentiality, integrity and availability of its data and operations. Our cybersecurity risk management plan is integrated into the Company's overall risk management process and establishes a clear framework with roles and responsibilities for managing cybersecurity risks. The Company currently uses a variety of security controls, including but not limited to firewalls, intrusion detection systems, data encryption in transit and at rest, and multi-factor authentication. We provide regular training to our employees and educate them on cybersecurity risks and best practices to mitigate these risks. The Company also maintains a comprehensive incident response plan to detect, respond to, assess the materiality of, and recover from cybersecurity incidents effectively.


text: Company's executive management considers cybersecurity risk and other information technology risk as part of its risk oversight and has the ultimate responsibility for overseeing our cybersecurity strategy. Furthermore, during the year ended


text: December 31, 2024, we have bolstered our Board of Directors through the appointment of a Director with an extensive history in cybersecurity and a deep understanding of cybersecurity threats which may have a material impact on our business and the video game industry as a whole. Our Director of IT holds operational responsibility for cybersecurity and maintains a suite of industry-standard tools to consistent confidentiality, integrity and availability of Company systems and data.


text: Suspicious activity within Company networks and systems are investigated and assessed by the Director of IT and then reported to the executive management team. Verified incidents are also communicated to the Board of Directors. On a quarterly basis, the Director of IT reports cybersecurity monitoring updates to the CEO, coordinates with our newly appointed Board Member to implement our information technology and cybersecurity programs, as well as with our HR Manager to ensure that the Company's employees have the adequate training on cybersecurity best practices.


text: have developed and implemented cybersecurity risk management processes intended to protect the confidentiality, integrity, and availability of our critical systems and information. While everyone at our company plays a part in managing cybersecurity risks, primary cybersecurity oversight responsibility is shared by our board of directors and senior management. Assessment Processes: We conduct regular risk assessments to proactively identify potential cybersecurity threats and vulnerabilities. These assessments involve thorough evaluations of our IT infrastructure, data systems, and processes to pinpoint areas of weakness;

companyName: Jet.AI Inc.

ticker: JTAI


text: Security Measures: In addition to risk assessments, we employ proactive security measures to enhance our cyber defenses. These measures include the continuous monitoring of network activity, the implementation of access controls and encryption protocols, and the deployment of intrusion detection systems to swiftly detect and respond to any suspicious activities.


text: for Identifying and Mitigating Threats: We follow a structured framework for identifying and mitigating cybersecurity threats, which outlines procedures for threat detection, incident response, and risk mitigation.


text: Training and Awareness Programs: We provide training to our management and employees designed to equip employees with the knowledge and skills necessary to identify and respond to cybersecurity risks, tailored based on the persons' roles within our organization.