text: Our Chief Financial Officer is responsible for our cybersecurity program, and our Manager of Cybersecurity is our incident response team leader. In this position, our Manager of Cybersecurity oversees our cybersecurity team, and guides our incident response team, which is comprised of members from across our organization, including cybersecurity, IT support, mining operations, software engineering, compliance and legal, as well as contractors and other partners, as they support our cybersecurity functions. Our Manager of Cybersecurity has nearly two decades of experience in cybersecurity management and policy, achieved through job training and higher education, and possesses a background in security and alignment of information technology solutions.


text: Our Response Plan, developed by management and our cybersecurity team, and IT support team, serves as a Company-wide guide to facilitate coordinated, prompt, and systematic responses to any cybersecurity incidents and utilizes four interconnecting phases: (1) Preparation; (2) Detection and Analysis; (3) Containment, Eradication, and Recovery; and (4) Post-Incident Activity.

companyName: BTC Digital Ltd.

ticker: BTCT

secItem: Item 1C


text: Upon detection of a cybersecurity incident and initial intake and validation by our cybersecurity team, our incident response team triages and evaluates the cybersecurity incident, and, depending on the severity, escalates the incident to management and a cross-functional working group. Any incident assessed as potentially being or potentially becoming material is immediately escalated for further assessment and reported to executive management.


text: Determination of what resources are needed to address the incident, prioritizing of response activities, forming of action plans, and notification of external parties as needed are then undertaken by executive management and the cross-functional working group, led by our Chief Financial Officer and Manager of Cybersecurity. We consult with outside counsel as appropriate, including on materiality analysis and disclosure matters, and our executive management makes the final materiality and disclosure determinations, among other compliance decisions.


text: In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not be successful in eliminating all risks from cybersecurity threats and can provide no assurances that undetected cybersecurity incidents have not occurred. See Part I, Item 1A. "Risk Factors" of this Annual Report for more information regarding the cybersecurity risks we face.


text: Risk Management and Strategy We identify and assess material risks from cybersecurity threats to our information systems and the information residing in our information systems by monitoring and evaluating our threat environment on an ongoing basis using various methods including, for example, using manual and automated tools, subscribing to reports and services that identify cybersecurity threats, analyzing reports of threats and threat actors, conducting scans of the threat environment, and conducting risk assessments.

companyName: SOCIETY PASS INCORPORATED.

ticker: SOPA


text: We manage material risks from cybersecurity threats to our information systems and the information residing in our information systems through various processes and procedures, including, depending on the environment, risk assessment, incident detection and response, vulnerability management, disaster recovery and business continuity plans, internal controls within our accounting and financial reporting functions, encryption of data, network security controls, access controls, physical security, asset management, systems monitoring, and employee training. We engage third-party service providers to provide some of the resources used in our information systems and some third-party service providers have access to information residing in our information systems. With respect to such third parties, we seek to engage reliable, reputable service providers that maintain cybersecurity programs. Depending on the nature and extent of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our processes may include conducting due diligence on the cybersecurity practices of such provider and contractually imposing cybersecurity related obligations on the provider.


text: We are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect SOPA, including our business strategy, results of operations, or financial condition. Refer to "Part I, Items 1A – Risk Factor Relating to SOPA's business – Our business and operations would suffer in the event of third-party computer system failures, cyber-attacks on third-party systems or deficiency in our cyber security" in this Form 10-K for additional discussion about cybersecurity-related risks.


text: Cybersecurity Governance Our Board of Directors holds oversight responsibility over SOPA's risk management and strategy, including material risks related to cybersecurity threats. This oversight is executed directly by our board of directors and through its committees. Our audit committee oversees the management of SOPA's major financial risk exposures, the steps management has taken to monitor and control such exposures, and the process by which risk assessment and management is undertaken and handled, which would include cybersecurity risks, in accordance with its charter. The audit committee holds regular meetings and receives periodic reports from management regarding risk management, including major financial risk exposures from cybersecurity threats or incidents.


text: Within management, the Group Chief Technology Officer of our business units are primarily responsible for assessing and managing our material risks from cybersecurity threats on a day-to-day basis and keep the senior executive officers informed on a regular basis of the identification, assessment, and management of cybersecurity risks and of any cybersecurity incidents. Such management personnel have prior experience and training in managing information systems and cybersecurity matters and participate in ongoing training programs.


text: Our Board and management recognize the critical importance of maintaining the trust and confidence of our customers, clients, business partners and employees.

companyName: Cuentas Inc.

ticker: CUEN


text: Our cybersecurity risk management risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment; a security team principally responsible for managing (1)


text: our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; and a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: Our board of directors considers cybersecurity risk as part of its risk oversight function. The board of directors oversees management's implementation of our cybersecurity risk management program.


text: Our management team, including our CEO, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.


text: We believe cybersecurity is critical to advancing our technological advancements. As an esports company, we face a multitude of cybersecurity threats that range from attacks common to most industries, such as ransomware and denial-of service. Our customers, suppliers, subcontractors, and business partners face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our operations, performance, and results of operations. These cybersecurity threats and related risks make it imperative that we expend resources on cybersecurity.

companyName: Mobile Global Esports, Inc.

ticker: MGAM


text: Our Board of Directors oversees management's processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives. The full Board retains oversight of cybersecurity because of its importance. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risks.


text: We work on assessing cybersecurity risk and on policies and practices aimed at mitigating these risks. We believe we are positioned to meet the requirements of the SEC. Assessing, identifying, and managing cybersecurity related risks are factored into our overall business approach.


text: rely on our information technology to operate our business. As such, we have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.

companyName: Regenerative Medical Technology Group Inc.

ticker: RMTG


text: have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We engage a third-party consultant to assist us with our cybersecurity risk management framework, including the monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. Our third-party consultant team is managed by our Chief Financial Officer who reports to the Audit Committee at the board-level, as appropriate.


text: of December 31, 2023, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.


text: information security and risk management program is designed to identify, assess, and manage material risks from cybersecurity threats to our applications, computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, personal information, or PHI (collectively, "Information Systems").

companyName: OptimizeRx Corp

ticker: OPRX


text: information security program's basis is a comprehensive set of policies and procedures covering various information security domains (collectively, "Information Security Policies"), including, but not limited to: Access control, Endpoint protection, Third-party oversight, Education, training, and awareness, security, management, Incident response, Business continuity and disaster recovery, protection and privacy, and security domains. penetration tests, and security assessments. risks are documented in a central Risk Register and tracked for mitigation and other treatment decisions.


text: information security program is audited annually against a well-known security framework, by an accredited third party. We currently carry a HITRUST certification, which is a security assessment that targets the healthcare industry and HIPAA compliance. We are currently which has more general applicability and covers the trust services criteria of security, confidentiality, privacy, accessibility, and processing integrity.


text: 2023, we stored and processed certain PHI on behalf of customers. From a cybersecurity perspective, this data was stored on secure AWS managed servers in the contiguous United States and encrypted at rest and in transit. End users did not have permission to access PHI unless the end user's account had the proper end user role permissions (ie HCPs or hub service providers). These end user roles were assigned according to the customer's needs to see the information. At all times, such information was segregated so that one customer could not access records containing PHI that were associated with another customer. In late 2023, we discontinued PHI processing; however, certain PHI remains stored on the secure AWS managed servers to the extent information needs to be accessed by a customer.


text: external audits and assessments identify and evaluate material risks from cybersecurity threats against our overall business objectives on a periodic basis and form the basis of internal reports, which can be shared with the management team, the Audit Committee of the Board of Directors, and the Board of Directors to evaluate our overall enterprise risk.


text: incident response program consists of an Incident Response Plan document and a cross-functional Incident Response Team, which are defined in our Information Security Policies. All workforce members are trained on incident reporting procedures, and there is a single point of contact for reporting all incidents. Incident response training is conducted annually, followed by a tabletop exercise. Our Incident Response Plan instructs personnel on how to notify our Incident Response Team in case of an incident. The VP of Information Security is the point person for incident responses and coordinates mitigation and remediation of cybersecurity incidents. We log all incidents and response plans for purposes of internal documentation. We report critical incidents to the management team, the Audit Committee, and the Board of Directors.


text: Company's VP of Information Security is responsible for implementing Information Security Policies on a day-to-day basis along with the Security Team (as defined in the Information Security Policies), which includes the VP of Information Security, the Chief Product Officer, the VP of Data Engineering and Platform Services, and the VP of Technology (Information Technology).


text: use third-party service providers to perform a variety of functions throughout our business, including, but not limited to infrastructure support and maintenance, CRM, contract management, data hosting, and miscellaneous finance and accounting projects. We assess our vendors with respect to cybersecurity risk according to the services provided, the sensitivity of the Information Systems at issue, and the provider's identity. In appropriate cases, we will seek enhanced contractual obligations or guarantees related to cybersecurity on the service provider.


text: Vendor risk assessments are performed before each vendor is engaged, and annual reviews are conducted to ensure vendors continue to meet security requirements.


text: also maintain technical errors and omissions insurance which includes a cyber incident endorsement of up to $20 million with a premium of $60,700. This endorsement provides coverage for Network Security and Privacy, Privacy Regulation Proceeding, Privacy Event Expense Reimbursement, Extortion Demand Reimbursement, Data Restoration, Network Restoration, Business Interruption and System Failure. This coverage reimburses the most common costs for information security incidents, including attorney's fees, consumer notification costs, and regulatory fines. Company has no material incidents to report through the date of this filing. more information on risks from cybersecurity threats that may materially affect the Company, see Item 1A. "Risk Factors".


text: Board of Directors' oversight function includes cybersecurity risk management. The Board of Directors has tasked the Audit Committee with overseeing the Company's cybersecurity risk management processes and with determining which threats are likely to impact the Company's strategy, business operations, and financial condition.


text: cybersecurity risk assessment and management processes are implemented and maintained by our VP of Information Security and the Security Team. For strategic decisions regarding cybersecurity, the VP of Information Security consults with the Chief Product Officer, the Chief Financial Officer, the General Counsel and Chief Compliance Officer, and the VP of Compliance.


text: VP of Information Security is responsible for hiring appropriate personnel, performing vendor risk assessments, and communicating information security priorities to relevant personnel, so that we can build cybersecurity risk considerations into our business practices. The VP of Information Security also plans related budgets, designs cybersecurity processes, and reviews security assessments and related reports.


text: Board of Directors has three members with skills and experience in information security and cybersecurity through their experience as current and former executives of digital technology companies.


text: regularly review our cybersecurity defenses to assess our vulnerability to cybersecurity attacks from viruses, malware and more sophisticated and targeted cyber-related attacks such as hackers looking to demand ransomware or access our systems to obtain information and data, as well as our vulnerability to cybersecurity failures resulting from human error and technological errors. We rely upon internal information technology ("IT") personnel working in conjunction with specialized outside security consultants on a day-to-day basis to conduct reviews and upgrade our systems when determined to be necessary.

companyName: AIR INDUSTRIES GROUP

ticker: AIRI


text: overall strategy in combatting cybersecurity risks includes a variety of measures, including: use of antivirus software, virtual private networks, email security, as well as other software and system-wide measures such as multi-factor of updates and patches as they become available from our software suppliers and consultants and maintaining the current versions of major software to reduce the exposure to vulnerabilities;


text: use of third-party services to conduct mandatory online training for all employees regarding identifying and avoiding cyber-security the review of the security procedures used by third parties that may host or otherwise have access to our systems;


text: the deployment of third-party cybersecurity experts to perform penetration testing on our internal and external networks and systems in an effort to identify potential vulnerabilities; and of the cybersecurity risks posed by interacting with current and potential third-party service providers, suppliers and customers.


text: are not aware of any weakness in our systems or malware embedded in our systems that are likely to would materially affect, or are reasonably likely to materially affect, our operations.


text: day management of cybersecurity threats is conducted by our IT department in conjunction with outside service providers, which is charged with identifying and reporting threats to senior management. On a quarterly basis, cybersecurity is reviewed by our Chief Executive Officer and Chief Financial Officer, who are expected to report to the Audit Committee.


text: Audit Committee of our Board of Directors, which is composed of all non-employee directors, is responsible for oversight of our efforts to eliminate cybersecurity risks. The Audit Committee meets regularly with our Chief Executive Officer and Chief Financial Officer and, in turn, reports its finding to the Board of Directors.


text: like other companies in our industry, face several cybersecurity risks in connection with our business. Our business strategy, results of operations, and financial condition have not, to date, been affected by risks from cybersecurity threats. During the reporting period, we have not experienced any material cyber incidents, nor have we experienced a series of immaterial incidents, which would require disclosure.

companyName: Avalon GloboCare Corp.

ticker: ALBT


text: the ordinary course of our business, we use, store and process a bare minimum of data. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management program, which is comprised of data segregation, penetration testing, and training.


text: The cyber risk management program falls under the responsibility of a third party IT consultant, who has cross-functional expertise in IT management, cybersecurity, and engineering with more than 30 years of experience (the "IT Consultant"), who reports directly to our Chief Financial Officer. Under the guidance of the IT Consultant, we have minimized our data footprint to keep our cyber risk low.


text: have implemented a cybersecurity risk management program that is designed to limit and mitigate risks from cybersecurity threats. Our cybersecurity risk management program incorporates several components, including employee training, periodic penetration tests, and multifactor authentications.


text: the ultimate direction of our CFO, with oversight from the Board, we maintain a security governance structure to evaluate and address cyber risk.


text: Board is responsible for the oversight of cybersecurity risk management. The Board delegates oversight of the cybersecurity risk management program to the Audit Committee. On a quarterly and as-needed basis, the CFO reports to the Audit Committee on our cybersecurity risk management program, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards. The CFO also provides updates to the Audit Committee of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.


text: have implemented best-practices to assess risks from cybersecurity threats; monitor our information systems for potential vulnerabilities; and test those systems pursuant to our cybersecurity policies, processes, and practices, which are integrated into our overall risk management program (see section "Services Overview" for details on each service we use). To protect our information systems from cybersecurity threats, we rely on various security tools that are designed to help identify, escalate, investigate, resolve, and recover from security incidents in a timely manner. We have chosen Microsoft as our main provider for Cybersecurity and Governance services. Our Technology Risk Management Committee, currently including our Vice President of Information Technology, In-house General Counsel, General Manager, Director of Operations and Vice President of Technical Operations, assesses risks based on probability and potential impact to key business systems and processes. Risks that are considered high are addressed promptly and documented to be incorporated into our overall risk management program. A mitigation plan is developed for each identified high risk, with progress reported to the Technology Risk Management Committee and tracked as part of our overall risk management program overseen by the Audit Committee of our board of directors.

companyName: RYTHM, Inc.

ticker: RYM


text: date, cybersecurity threats, including those resulting from any previous cybersecurity incidents, have not materially affected our Company, including our business strategy, results of operations, or financial condition. We do not believe that cybersecurity threats resulting from any previous cybersecurity incidents of which we are aware are reasonably likely to materially affect our Company.


text: board of directors oversees our risk management process, including as it pertains to cybersecurity risks, directly and through its committees.


text: The Audit Committee of the board oversees our risk management program, which focuses on the most significant risks we face in the short-, intermediate-, and long-term timeframe. The Audit Committee reviews our cybersecurity risk profile with management on a periodic basis using key performance and/or risk indicators. These key performance indicators are metrics and measurements designed to assess the effectiveness of our cybersecurity program in the prevention, detection, mitigation, and remediation of cybersecurity incidents.


text: take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and incidents. (Amazon Web Services)


text: short for Amazon Web Services, is a comprehensive cloud computing platform offered by Amazon. It provides on-demand access to various computing resources like servers, storage, networking, databases, analytics, machine learning, and more. AWS eliminates the need for physical hardware investments and gives organizations flexibility and scalability. S3 (scalable object storage), Amazon EC2 (virtual servers), Amazon RDS (managed databases), Amazon CloudFront (Content Delivery Network)


text: cloud computing platform offered by Microsoft, delivering a range of services for building, deploying, and managing applications. Azure supports various programming languages, tools, and frameworks for efficient development and scaling of applications. applications, hybrid cloud solutions, data analysis, building predictive models, continuous integration and deployment (CI/CD) suite of productivity and collaboration tools combining familiar Office apps, cloud-based services, and robust security features. email, document creation, cloud storage, security & compliance, mobile productivity, automation (Power Automate)


text: service software centralizing and automating customer support for seamless interactions across email, live chat, social media, and self-service portals. Provides ticketing, reporting, analytics, and integrations.


text: Alternus employs a multilayer approach to addressing cybersecurity risk based on the National Institute of Standards and Technology (NIST) framework. It has established a dedicated cybersecurity team that utilizes internal and external assessments, automated monitoring tools, and input from public and private partners to identify potential cyber threats. External third party security firms are engaged to assist with cybersecurity risk assessments, penetration testing and system security analysis. Alternus's cybersecurity team works in conjunction with the risk management, legal, finance, accounting, operations, and information technology areas to assess the risk these identified cybersecurity threats present to the organization. To ensure consistency, these cybersecurity risk assessments are incorporated into Alternus's Information Security Policy, Alternus's information technology leadership reviews the company's enterprise risk management-level cybersecurity risks on a quarterly basis, and key cybersecurity risks are incorporated into Alternus's Information Security Policy. Cybersecurity risks are managed and controlled through multiple overlapping layers of cybersecurity defenses that include: expert input from both public and private partnerships;

companyName: Alternus Clean Energy, Inc.

ticker: ALCE


text: implementation of a comprehensive cybersecurity policy that encompasses but is not limited to social media, acceptable use (devices, wireless, remote access, internet use), information governance, monitoring, authentication, encryption, vulnerability management, third-party management, and recovery; annual cybersecurity training for all employees; employee phish testing and follow-up;


text: procedural and automated cyber controls in conjunction with robust detection, mitigation, and recovery the formation of a multidisciplinary cybersecurity incident response team; integration of multiple threat intelligence sources into our cybersecurity tools and processes; retention of external cybersecurity threat response resources;


text: The Alternus board of directors provides enterprise-level oversight of risks associated with cybersecurity threats through the Audit Committee, which assists the Board in fulfilling its oversight responsibilities regarding the Company's policies and processes with respect to risk assessment and risk management, including any significant non-financial risk exposures; reviewing and discussing the Company's information security policies and internal controls regarding information security; and reviewing the Company's annual disclosures concerning the role of the Board in the risk oversight of the Company. The Audit Committee performs an annual review of the Company's cybersecurity program and receives quarterly updates on key cybersecurity risks, the cybersecurity risk management plan, and cyber incident event trends. Alternus's Chief Information Officer (CIO)


text: has primary responsibility for the development and oversight of Alternus's cybersecurity team and the development and maintenance of the company's related cybersecurity policies and procedures. The CIO has over 20 years' experience working in the information and operational technology field. The company's cybersecurity team continuously assesses the evolving cyber threat landscape based on their expertise and that of our third-party partners. They then work with all parts of Alternus to protect against, detect, identify, respond to, and recover from the risks that cybersecurity threats present. The cybersecurity team views and responds to cybersecurity risks in a holistic manner, applying a comprehensive multilayered strategy to prevent, detect, and mitigate them. They have identified Alternus's critical cyber assets and taken appropriate steps to protect them. External expertise is regularly engaged to assess Alternus's cybersecurity program and help the cybersecurity team to strengthen the organization's monitoring, alerting, prevention, mitigation, and recovery capabilities. Third party cyber vulnerability assessments, maturity assessments, and partnerships are used to assess and refine all elements of our cybersecurity program. In addition to managing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of third-party service providers. Risk assessments are performed against third-party service providers with a specific focus on any sensitive data that is to be shared with them. The internal business owners of Alternus's applications are required to document user access reviews regularly. We request a System and Organizational Controls (SOC) 2 report from the vendors of our enterprise cloud applications. If they do not provide us with a SOC 2, we seek additional compensating risk assurance in our contract language with them. Risks associated with the use of third-party service providers are managed as part of our overall cybersecurity risk management framework.


text: To continually manage and control the material risks that cybersecurity threats present to the organization, Alternus invests significantly in the cybersecurity elements outlined above.


text: In addition, the Company has made significant investments to fulfill the operational and financial regulatory requirements laid out by the North American Electric Reliability Corporation Critical Infrastructure Protection Standards and Sarbanes-Oxley Act of 2002.


text: Alternus faces a number of cybersecurity risks in connection with its business. Although such risks have not materially affected us, including our business strategy, results of operations, and financial conditions, to date, we have, from time to time, experienced threats to and breaches of our data systems, including malware, phishing and computer virus attacks. See "Item 1A. Risk Factors" for additional information regarding our organization's cybersecurity risks, which should be read together with this "Item 1C. Cybersecurity".


text: Given the size of our company and the nature of our operations, we do not believe that we face significant cybersecurity risk. We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. We utilize standard commercial software for business operations, which includes basic security features such as password protection and data encryption. Our management is generally responsible for assessing and managing any cybersecurity threats.

companyName: African Agriculture Holdings Inc.


text: Cybersecurity Risk Management and Strategy We face various cyber risks, including, but not limited to, risks related to unauthorized access, misuse, data theft, computer viruses, system disruptions, ransomware, malicious software and other intrusions. We utilize a multilayered, proactive approach, as part of our overall risk mitigation strategy, to identify, evaluate, mitigate and prevent potential cyber and information security threats through our cybersecurity risk management efforts. We have an IT manager who is responsible for the identification, evaluation, and management of cybersecurity risks and controls. Our IT manager has related experience including: (i) network architecture design and planning: working on overall design and planning of network architecture, selection of related equipment and software, and its implementation; (ii) information security architecture design and planning: assisting the development of information security strategy, technical architecture and management system plan, design, and implementation; (iii)

companyName: Future FinTech Group Inc.

ticker: FTFT


text: daily maintenance, emergency response support, maintenance report preparation, major IT project support, etc. and (iv) provide support for the operation and maintenance of various IT infrastructure, and ensure the stability of the company's IT infrastructure. To oversee and identify risks from cybersecurity threats associated with our use of third-party service providers, we maintain third-party risk management efforts designed to help protect against the misuse of information technology and security breaches, including requirements in the agreements with such third parties.


text: We have not, to date, identified any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of our operations, or financial condition.


text: Cybersecurity Governance and Oversight Management is responsible for the cybersecurity risk management program as well as actions to identify, assess, mitigate, and remediate material issues. The Company's cybersecurity risk management program is supervised by our IT manager, who reports directly to the Company's Chief Executive Officer. The IT manager and his team are responsible for leading cybersecurity strategy, policy, standards, architecture and processes.


text: The Audit Committee of the Board of Directors is charged with oversight of cybersecurity matters and receives reports from the IT manager and Chief Executive Officer on, among other things, the Company's cyber risks and threats, the status of projects to strengthen the Company's information security systems, and the emerging threat landscape. In accordance with our Cyber Incident Response Plan, the Audit Committee will be promptly informed by management of cybersecurity incidents with the potential to materially adversely affect the Company or its information systems and is regularly updated about incidents with lesser impact potential. At least annually, the Board reviews and discusses the Company's technology strategy in combination with the Company's strategic objectives with executive management.


text: In an effort to detect and defend against cyber threats, the Company plans to provide its employees with various cybersecurity and data protection training programs which will cover timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educate employees on the importance of reporting all incidents promptly.


text: Risk Management and Strategy We operate in the technology and general wellness, continuous glucose and blood pressure monitoring sectors, which are subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft fraud extortion harm to employees or customers violation of privacy laws and other litigation and legal risk and reputational risk. We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems.

companyName: Corvex, Inc.

ticker: MOVE


text: Our business depends on the availability, reliability, and security of our information systems, networks, data, and intellectual property. Any disruption, compromise, or breach of our systems or data due to a cybersecurity threat or incident could adversely affect our operations, customer service, product development, and competitive position. They may also result in a breach of our contractual obligations or legal duties to protect the privacy and confidentiality of our stakeholders. Such a breach could expose us to business interruption, lost revenue, ransom payments, remediation costs, liabilities to affected parties, cybersecurity protection costs, lost assets, litigation, regulatory scrutiny and actions, reputational harm, customer dissatisfaction, or harm to our vendor relationships.


text: Cybersecurity Governance and Oversight Our board of directors addresses our cybersecurity risk management as part of its general oversight function. We maintain security controls that are continuously reviewed to protect against emerging cyber threats. Our IT Department monitors these security controls and risks and regularly reports to senior management and the board of directors on material developments.


text: manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we undertake the below listed activities: Monitor emerging data protection laws in conjunction with our advisors and implement changes to our processes to comply; Maintain firewall and virus protection software; and Maintain a cybersecurity insurance policy.


text: Our cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to designated employees and other members of management depending on the circumstances, including in some cases to our executive team. The board of directors receives regular reports from management concerning our cybersecurity risk management program. The board also receives various summaries and/or presentations related to cybersecurity threats, risks and mitigation.


text: we are not aware of any cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations or financial position.


text: We are a blank check company with no business operations except the proposed business combination transaction. Since our IPO, our sole business activity has been identifying and evaluating suitable target businesses for an initial business combination. Therefore, we do not believe that we face significant cybersecurity risks and have not adopted any cybersecurity risk management programs or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. In fiscal year 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: Oak Woods Acquisition Corp

ticker: OAKU


text: Management and Strategy have developed and continue to enhance our cybersecurity governance program to help protect the security of our computer systems, software, networks, and other technology assets against material risks from cybersecurity threats, including unauthorized attempts to access confidential information or to disrupt or degrade our business operations. Our cybersecurity governance program is strategically integrated into our broader risk management framework and aims to (1) proactively manage cyber and information security risks at the Company, (2) implement the internal controls required by cybersecurity regulatory requirements as well as the Company's information security control objective documents and information security standards, and (3) improve the efficiency, maturity, and effectiveness date, risks from cybersecurity threats have not materially affected us, and we currently do not expect that the risks from cybersecurity threats are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.

companyName: LogicMark, Inc.

ticker: LGMK


text: Despite our efforts to ensure the integrity of our computer systems, software, networks, and other technology assets, we may not be able to anticipate, detect, or recognize threats to our systems and assets, or to implement effective preventative measures against all cyber threats, especially because the techniques used are increasingly sophisticated, change frequently, are complex, and are often not recognized until discovered.


text: Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats and oversees risks associated with cybersecurity threats. The Board's Audit Committee is central to the Board's oversight of cybersecurity risks and has primary responsibility for this area. The Audit Committee is composed of independent directors with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively. Our Chief Financial Officer ("CFO")


text: with the assistance of IT support plays a pivotal role in informing the Audit Committee on cybersecurity risks. He provides comprehensive briefings to the Audit Committee as needed. These briefings encompass a broad range of topics, including any emerging threats, the status of ongoing cybersecurity initiatives, and incident reports and learnings from any cybersecurity events that may occur.


text: The Audit Committee actively participates and offers guidance in strategic decisions related to cybersecurity. This involvement helps ensure that cybersecurity considerations are integrated into our broader strategic objectives.


text: Our CFO works closely with our IT support to assess, monitor, and manage our cybersecurity risks. Our IT support regularly informs our Chief Executive Officer ("CEO") and CFO of all aspects related to cybersecurity risks and incidents. This helps ensure that the highest levels of management are kept abreast of the cybersecurity potential risks facing the Company. Furthermore, significant cybersecurity matters and strategic risk management decisions, if any, are escalated to our Board of Directors, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.


text: Cybersecurity Governance Our Audit Committee of the Board of Directors is responsible for overseeing cybersecurity risk and periodically updates our Board of Directors on such matters. The Audit Committee regularly reviews and discusses with management the strategies, processes, procedures and controls pertaining to the management of our information technology operations, including cyber risks and cybersecurity. The Audit Committee regularly and management the strategies continuously analyzes cybersecurity and resiliency risks to our business, considers industry trends and implements controls, as appropriate, to mitigate these risks.

companyName: Greenland Technologies Holding Corp.

ticker: GTEC


text: Company acknowledges the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition, and reputation.

companyName: La Rosa Holdings Corp.

ticker: LRHC


text: We routinely assess material cybersecurity risks, including potential unauthorized occurrences on, or conducted through, our information systems that may compromise the confidentiality, integrity or availability of those systems or information maintained in them. We devote appropriate resources and designate members of our management, including our Chief Technology Officer, to manage the risk assessment and mitigation process.


text: a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team, or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan, or engaged with external cybersecurity consultants for assessments or services.


text: our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches, and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs, and negatively impact our reputation among customers and partners. Company is in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture.


text: This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments, and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity, and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and the Company will continue to assess and update our cybersecurity measures in response to emerging threats. a discussion of potential cybersecurity risks affecting the Company, please refer to Item 1A - Risk Factors.


text: Management and Strategy We have developed and maintain a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: RemSleep Holdings Inc.

ticker: RMSL


text: Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats, including by engaging a third-party cybersecurity service provider, which communicates directly with our management and compliance personnel. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations. Our risk management, legal, and compliance personnel oversee and identify, including through a third-party cybersecurity service provider, material risks from cybersecurity threats associated with our use of such entities.


text: We are a SPAC with no business operations. Since our initial public offering, our sole business activity has been identifying and evaluating suitable target businesses.

companyName: DIGIASIA CORP.


text: Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cyber security risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our initial public offering.


text: acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: Applied UV, Inc.

ticker: AUVI


text: Management and Strategy have established policies and processes for assessing, identifying and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity or availability of our information systems or any information residing therein.


text: engage third parties in connection with our risk assessment processes. These service providers assist us to monitor, enhance and test our safeguards. We oversee and identify risks from cybersecurity threats associated with the use of a third party service provider in the same way as any other situation with regard to potential cybersecurity threats.


text: We have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among investors, shareholders, customers and partners.

companyName: Western Uranium & Vanadium Corp.

ticker: WSTRF


text: Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats.


text: The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats.


text: Since our initial public offering, our sole business activities have been identifying and evaluating suitable initial business combination candidates, including with respect to the Proposed Business Combination, and completing an extension of the period of time in which we must consummate an initial business combination. Therefore, we do not believe that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. To our knowledge, we have not encountered any cybersecurity incidents since our initial public offering. However, see "Item 1A. Risk Factors — Cybersecurity incidents or attacks directed at us could result in information theft, data corruption, operational disruption and/or financial loss" for more information regarding the potential impact of cybersecurity incidents on our business.

companyName: Project Energy Reimagined Acquisition Corp.


text: We are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. We do not operate any enterprise information technology systems of our own and have only a limited number of personnel. Therefore, we do not consider that we face significant cybersecurity risk.

companyName: ShoulderUP Technology Acquisition Corp.


text: We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our management is generally responsible for assessing and managing any cybersecurity threats, who limit the persons who have authorized access to our online accounts and limit the vendors whose services we utilize to a small number of reputable service providers. If and when any reportable cybersecurity incident arises, our management shall promptly report such matters to our board of directors for further actions, including regarding the appropriate disclosure, mitigation, or other response or actions that the board deems appropriate to take. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. As of the date of this report, we have not encountered any cybersecurity incidents since our IPO.


text: Our cybersecurity risk management program is integrated into our overall enterprise risk management program and shares common methodologies, reporting channels, and governance processes that apply across the enterprise risk management program, including legal, compliance, strategic, operational, and financial risk areas. The cybersecurity risk management program includes: assessments designed to help identify material cybersecurity risks to our critical systems, team principally responsible for managing (i) cybersecurity risk assessment processes, (ii) security controls, and (iii) response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of security controls;

companyName: VPR Brands, LP.

ticker: VPRB


text: awareness training for users and senior management, including through the use of third-party cybersecurity incident response plan that includes procedures for responding to cybersecurity risk management process for third-party service providers, suppliers and vendors, including a rigorous vetting process and ongoing monitoring mechanisms designed to ensure compliance with cybersecurity standards.


text: not aware of any cybersecurity incidents that have had a materially adverse effect on our operations, business, results of operations, or financial condition.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function. The Board oversees the implementation of the cybersecurity risk management program.


text: The Board receives periodic reports from management on potential cybersecurity risks and threats and receives presentations on cybersecurity topics from the Company's information systems manager. The Board also receives briefings from management on the cybersecurity risk management program as needed.


text: Our company has stringent processes and management that is used to assess, identify, and manage risks from unauthorized access through our information systems that may affect confidentiality, integrity, or availability of our information systems. We utilize the appropriate National Institute of Standards and Technology (NIST) controls for our sector and undergo yearly SOC II audits. These audits as well as our routine senior management level reviews ensure that our processes are designed to prevent, detect, or mitigate data loss, theft, misuse, unauthorized access, or other security incidents that may affect our data. We require coordinated IT security guidelines with our partners and vendors to mitigate risk associated with the distribution and holding of data sensitive to our company. A core portion of our business is as a channel partner for cybersecurity services through our Overwatch solution. This solution includes robust detection and response capabilities managed by a 24x7 US-based security operations center with dedicated senior leadership to the process and programs included in Overwatch. We utilize the same program that we offer as a service as our internal solution. In addition, we have hardware, site, and network protections around our physical devices that are located both onsite at High Wire Networks as well as a fully managed offsite data center.

companyName: HIGH WIRE NETWORKS, INC.

ticker: HWNI


text: We support the security systems by the usage of penetration testing, security audits, and ongoing risk assessments. We have a well-established incident response process that includes a rapid escalation of critical events to all senior leadership stakeholders. Our leadership team is led by our Chief Technology Officer (who is also a seasoned Chief Information Security Officer) who is responsible for implementing and maintaining a team of trained cybersecurity professionals. Senior leadership holds as needed, monthly, and quarterly governance meetings strictly focused on the management of our cybersecurity program and data practices. Our governance program includes a working team which encompasses several highly trained and experienced cybersecurity professionals as well as a steering committee including our CEO, CFO, and COO. In both the working and steering committee meetings, related and relevant risks are identified, tracked, mitigated, and reported to appropriate leaders, including the Board of Directors.


text: We provide and maintain data protection and cybersecurity training to limit the exposure of our business to security events based on soft attacks against our employees.


text: We are also a strong proponent of defense in depth. By utilizing Enterprise Risk Management strategies ingrained in our protection, detection and response planning we are able to provide multiple layers of security to identify and mitigate protection points within our company.


text: The Company maintains a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. This program is integrated within the Company's enterprise risk management system and disclosure committee. The program addresses the corporate information technology environment, third-party service providers and customer-facing products and applications.

companyName: Perception Capital Corp. IV


text: The Company's Chief Financial Officer is responsible for developing and implementing our information security program and reporting on cybersecurity matters to the Board and the audit committee. Our Chief Financial Officer works with our broader IT security team, including our specialty IT advisor. Our specialty IT advisor has over 25 years of experience leading technology oversight, and others on its IT security team have cybersecurity experience or certifications.


text: Our cybersecurity incident response process involves a multi-functional approach for investigating, containing, and mitigating incidents, including reporting findings to senior management and other key stakeholders, including if appropriate the audit committee and the board, and keeping them informed and involved as appropriate. While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that has had a material impact on our business or operations, we have experienced incidents that did not have a material impact on our business or operations, and there can be no guarantee that we will not experience an incident that results in a material impact to our business or operations in the future. In addition, cybersecurity threats are constantly evolving and increasing in sophistication, which increases the difficulty of successfully defending against them or implementing adequate preventative measures.


text: Our board of directors has ultimate responsibility for oversight of our risk management, and delegates cybersecurity risk management oversight to the audit committee. The audit committee, which is responsible for ensuring that management has processes in place designed to identify, evaluate and manage cybersecurity risks and incidents, regularly reviews our cybersecurity program with management and reports to the board of directors. Cybersecurity reviews by the audit committee generally occur at least quarterly. A number of our directors have experience in assessing and managing cybersecurity risk, including by serving on other public company audit committees having responsibility for cybersecurity oversight.


text: Our cybersecurity program is run by our Chief Financial Officer, who reports to our Board, with support from our specialty IT advisor. Our specialty IT advisor has extensive experience leading and managing cybersecurity programs and in cybersecurity risk management. Our specialty advisor has served in this position since 2023 and is supported by its information security team, many of whom hold cybersecurity certifications and who collectively possess relevant experience in different areas of cybersecurity.


text: Our Chief Financial Officer is informed about and monitors prevention, detection, mitigation, and remediation efforts through regular communication and reporting from our information security team, internal governance processes, and by reviewing the results of internal and third-party assessments and audits. Our Chief Financial Officer regularly reports directly to the audit committee on our cybersecurity program and our efforts to prevent, detect, mitigate, and remediate cybersecurity risks.


text: On July 26, 2023, the SEC adopted rules requiring registrants to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy and governance. The final rules became effective 30 days following publication of the adopting release in the Federal Register. The Form 10-K disclosures are due beginning with annual reports for fiscal years ending on or after December 15, 2023.

companyName: Breeze Holdings Acquisition Corp.


text: Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. Breeze maintains a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats as appropriate for a Special Purpose Acquisition Company ("SPAC").


text: Breeze's cybersecurity risk profile will significantly change upon completion of the pending Business Combination transaction with TV Ammo, Inc. described in Item 1. Business within this Report. The cyber risk management program will be re-evaluated upon the close of the Business Combination.


text: Breeze has an annual assessment of the Company's cyber risk management program performed by a third-party specialist. The cyber risk management assessment incorporates recognized best practices and standards for cybersecurity and information technology of the National Institute of Standards and Technology Cybersecurity Framework. The annual risk assessment identifies, quantifies, and categorizes material cyber risks. In addition, the Company, in conjunction with the third-party cyber risk management specialists, develops a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the annual assessment process.


text: Breeze employs additional measures within the cybersecurity risk management program including identity access management controls such as restricted access of privileged accounts, periodic reviews of user access, and segregation of duties and anti-malware/anti-virus tools.


text: Cybersecurity partners to the Company, including consultants are a key part of the Company's cybersecurity risk management strategy and infrastructure and provide services including, cyber risk advisory. Breeze partners with industry recognized cybersecurity providers leveraging third-party technology and expertise.


text: Breeze currently does not have significant operations. The Company is focused on effecting an initial business combination with one or more businesses. Upon completion of the pending Business Combination with TV Ammo, Breeze will face risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows or reputation. Breeze acknowledges that the risk of a cyber incident is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. No prior cybersecurity incidents have been identified by the Company. The Company proactively seeks to detect and investigate unauthorized attempts and attacks against Company IT assets and data, and to prevent their occurrence and recurrence where practicable, however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm.


text: In response to such risks, the Company plans to implement initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. See Item 1A. "Risk Factors" for more information on cybersecurity risks.


text: Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: 1847 Holdings LLC

ticker: LBRA


text: Management's Role Managing Risk Management is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program.


text: Monitoring Cybersecurity Incidents Management is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: As a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have only begun to conduct comprehensive risk assessments, establish an incident response plan, and engage with external cybersecurity consultants for assessments or services. As of the date of this report, we have adopted an incident response plan which governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors. Our Vice President of Finance and Administration has been designated as the lead for implanting our incident response plan. In addition, in 2024, we have acquired a cybersecurity insurance policy.

companyName: EON Resources Inc.

ticker: EONR


text: In addition, our board of directors will oversee any cybersecurity risk management framework and a dedicated committee of our board of directors will review and approve any cybersecurity policies, strategies and risk management practices.


text: Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats. For a discussion of potential cybersecurity risks affecting us, please refer to the " Risk Factors " section.


text: Cybersecurity risk management is part of the Company's overall risk management. Our cybersecurity risk management is designed to provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers. We rely on the cybersecurity protections of many of our third party service providers. Our primary third party service providers, utilize two (2) factor authorization as well as login and password protections with email verifications.

companyName: ECD Automotive Design, Inc.

ticker: ECDA


text: Our Board has overall oversight responsibility for our risk management, including our cybersecurity risk management. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored. Any significant cybersecurity incidents are reported to the audit committee of the Board, which consists of only independent directors. We have not experienced any cybersecurity incidents in fiscal years 2023 or 2022.


text: Despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.


text: We are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Aquaron Acquisition Corp.

ticker: AQUC


text: Company's cybersecurity program is designed to identify, assess, and manage material risks from cybersecurity threats. The Company relies on Saratoga Investment Advisors to implement the cybersecurity program. The cyber risk management program involves risk assessments relating to the information systems of Saratoga Investment Advisors, incident response training and testing, implementation of security measures, identification of sensitive information assets ("Critical Information") and ongoing monitoring of systems and networks and assessment of the associated risks on an annual basis, including networks on which the Company relies on. The Chief Compliance Officer, along with the Company's external information technology consultant (the "IT Consultant"), actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats. The Company and Saratoga Investment Advisors have engaged external experts, including consultants, such as the IT Consultant, to evaluate cybersecurity measures and risk management processes, and depends on and engages various third parties, including suppliers, vendors, and service providers.

companyName: SARATOGA INVESTMENT CORP.

ticker: SAR


text: The compliance team of the Company and Saratoga Investment Advisors will conduct ongoing due diligence of its significant service providers to determine whether the cybersecurity programs of service providers include, among other things, procedures and safeguards designed to ensure the protection of Critical Information and the information of the Company's stockholders and portfolio companies, as well as adequate responses in the case of a cybersecurity incident.


text: Board has the primary responsibility for overseeing and reviewing the guidelines and policies with respect to the Company's risk management, including risks associated with cybersecurity threats. The Chief Compliance Officer will periodically report to the Board on cybersecurity matters, such as the overall state of the Company's cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and material cybersecurity incidents.


text: Company's management is responsible for assessing and managing material risks from cybersecurity threats, in consultations with cybersecurity consultants. The compliance team of the Company will maintain effective disclosure controls and procedures to ensure timely identification, consideration, and disclosure of material cybersecurity incidents, including through timely reporting to management and the Board. The Chief Compliance Officer, in consultation with the IT Consultant, will periodically determine whether the Company requires additional information technology or cybersecurity support.


text: We believe cybersecurity is critical to advancing our business securely. We face a multitude of cybersecurity threats, and may experience, cyber incidents in the normal course of business. Such cybersecurity threats could have a material adverse effect on our business, financial condition, operations, results of operations, performance, cash flows or reputation. Our service providers (including the transfer agent), and other business contacts may face similar cybersecurity threats, and a cybersecurity incident impacting these persons or entities could materially adversely affect our operations, performance and results of operations.

companyName: Arogo Capital Acquisition Corp.


text: These cybersecurity threats and related risks make it imperative that we expend resources on cybersecurity. The Board and/or our Audit Committee oversee our cybersecurity risk exposures and the steps taken by management to identify, monitor and mitigate cybersecurity risks to align our risk exposure with our strategic objectives. With respect to such cybersecurity risk oversight, our Board and/or our Audit Committee receive periodic reports and/or updates from management on the primary cybersecurity risks facing us and the measures we are taking to mitigate such risks. In addition to such reports and updates, our Board and/or our Audit Committee receive updates from management as to changes to our cybersecurity risk profile or certain newly identified risks. In the event of an incident, we intend to follow our incident response plan, which outlines the steps to be followed from incident identification, mitigation, recovery and notification to legal counsel, senior leadership and the Board or Audit Committee, as appropriate.


text: While cybersecurity incidents have not had a material adverse effect on our business, financial condition, results of operations, or cash flows, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: We maintain a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. Maintenance of IT assets, including daily security patch management. Periodic vulnerability scanning, identity access management controls including restricted access of privileged accounts (Multi-factor authentication enforced). Network integrity is safeguarded by employing web-based software, including endpoint protection, endpoint detection and response, spam gateway filtering, data loss prevention policies, SaaS monitoring, and remote monitoring on all devices. Industry-standard encryption protocols on workstations and email, critical data backups, and infrastructure maintenance. Incident response, cybersecurity strategy, and cyber risk advisory, assessment and remediation are maintained and supplied by a 3rd part SOC (Solutions Granted) that is NIST 800-171 compliant.

companyName: OLENOX INDUSTRIES INC.

ticker: OLOX


text: In addition, our cybersecurity framework is meticulously crafted to anticipate and address threats before they can cause harm. We are vigilant in monitoring the ever-changing threat landscape, drawing on intelligence from a multitude of sources to remain at the forefront of potential vulnerabilities. Our Security Operations Center (SOC) is operational 24/7, utilizing cutting-edge threat detection tools that meet SOCII requirements, guaranteeing an immediate response capability. We implement stringent access control policies to ensure that only authorized individuals can interact with sensitive client data. Our Identity and Access Management (IAM) systems conform to ISO/IEC 27001 standards, offering secure authentication processes that encompass multi-factor authentication (MFA) and role-based access controls (RBAC). These safeguards are essential in preserving the integrity and confidentiality of client information. By employing Randtronics remote encryption technology, we provide top-tier security for client data, whether it's in use or at rest. This leading-edge encryption solution surpasses industry benchmarks, delivering robust protection without compromising system performance. We regularly evaluate and refine our encryption protocols to thwart new cryptographic challenges. A third party-organization conducts frequent security audits to maintain unwavering compliance with legal and regulatory mandates such as GDPR, HIPAA, and CCPA. These audits are a cornerstone of our cyber risk management program, embracing established best practices and standards in cybersecurity and information technology. Our comprehensive policies cover various aspects including information security, access on/offboarding, and account management, directing the protective measures our management team implements to shield IT assets, data, and services from threats and vulnerabilities.


text: The Audit Committee of the Board of Directors oversees our cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services brief the Audit Committee on cyber vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, and the emerging threat landscape and new cyber risks on at least an annual basis. This includes updates on our processes to prevent, detect, and mitigate cybersecurity incidents. The Audit Committee and management have engaged a third-party firm to oversee the complete audit of our cybersecurity and risk management systems to ensure the integrity of the systems that are in place.


text: We face risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows or reputation. We acknowledge that the risk of cyber incident is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. However, prior cybersecurity incidents have not had a material adverse effect on our business, financial condition, results of operations, or cash flows. We proactively seek to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery; however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. In response to such risks, we have implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. See Item 1A. "Risk Factors" for more information on cybersecurity risks.


text: a cross-departmental approach to addressing cybersecurity risk, including input from employees and our Board of Directors (the "Board"). The Board and senior management are devoting resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape to respond to emerging threats in a timely and effective manner. Our cybersecurity risk management program will leverage the National Institute of Standards and Technology (NIST) framework, which organizes cybersecurity risks into five categories: identify, protect, detect, respond and recover. Our IT security reviews such as policies related to encryption standards, antivirus protection, remote access, multifactor authentication, confidential information and the use of the internet, social media, email and wireless devices go through an internal review process and are approved by appropriate members of management. In addition to assessing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of third-party service providers. The internal business owners of hosted applications are required to document user access reviews at least annually and provide from the vendor a System and Organization Controls (SOC) 1 or SOC 2 report. If a third-party vendor is not able to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis. Our assessment of risks associated with the use of third-party providers is part of our overall cybersecurity risk management framework. We face a number of cybersecurity risks in connection with our business. Although such risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we have, from time to time, experienced threats to our data and systems, including malware and computer virus attacks.

companyName: US NUCLEAR CORP.

ticker: UCLE


text: We are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. We have not encountered any cybersecurity incidents since our IPO.

companyName: ALPHA MODUS HOLDINGS, INC.

ticker: AMOD


text: Risk Management and Governance response to the increasing threat of continuously evolving cybersecurity risks, we continue to invest in our information technology and operational technology cybersecurity processes. W e maintain a data protection and cybersecurity risk management program based upon the National Institute of Standards and Technology ("NIST") Cybersecurity framework to assess, identify and manage cybersecurity risks. As part of this program, we maintain defensive network perimeter safeguards, internal mitigation and control features, continuous system and network monitoring, and contingency data protection. The Company ensures regular data and system backups through planned schedules. We utilize local backups for quick recovery and off-site, off-line and physical backups to safeguard against disasters. Our cybersecurity program includes steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat including whether the cybersecurity threat is associated with a third-party service provider, implementing cybersecurity testing, detection, response, prevention and mitigation strategies. We also have a notification process for real-time escalation of material cyber incidents by members of our internal cybersecurity team to senior management, including our Chief Executive Officer, Chief Operating Officer, Chief Financial Officer, Corporate Controller, General Counsel and the Audit Committee of the Board of Directors. The Company's information security team also engages third-party security consultants for penetration testing, training and system enhancements. Our Director of Information Technology is responsible for leading global cybersecurity risk reduction efforts and compliance.

companyName: RBC Bearings INC

ticker: RBC


text: Audit Committee is responsible for oversight of our risk management with respect to information technology operations and cybersecurity and oversees risk management in the area of data privacy. As part of this process, the Audit Committee oversees the data protection and cybersecurity risk management program, which includes reviewing management's risk assessments and the steps management has taken to monitor or mitigate our cybersecurity risk exposure. Management regularly provides data protection and cybersecurity reports to the Audit Committee, which include updates on cybersecurity initiatives, cybersecurity metrics and threat landscape.


text: our efforts with respect to information technology operations, cybersecurity and data privacy, we have been, and may continue to be, impacted by breaches in data security and lapses in data privacy, which occur from time to time. During fiscal year 2024, the Company did not experience any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition.


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and as noted in Item 1A. Risk Factors of this Annual Report, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in Item 1A. Risk Factors of this Annual Report.

companyName: Pyrophyte Acquisition Corp.


text: The Company's policies and practices are based on frameworks and standards that address risks through a comprehensive, cross-functional approach that assess, identify, monitor, and mitigate material risks from cybersecurity threats as part of the overall enterprise risk management ("ERM") process. This includes the collection and storage of data, and being responsive to incidents as they occur. Further, the Company's processes and technology are utilized to develop, implement, and maintain appropriate measures to safeguard information systems in protecting the integrity, availability, and confidentiality of data. Additionally, the Company engages certain third parties to assist in network monitoring and control testing, among other functions of similar capacity.

companyName: AURA SYSTEMS INC

ticker: AUSI


text: safeguards that are designed to protect the Company's information systems from cybersecurity threats, including the prevention and detection of systems, access controls, and firewalls, which the Company assesses the vulnerability and cybersecurity threat and makes necessary improvements. of third parties as part of the Company's risk-based approach in identifying and overseeing cybersecurity risks.


text: Company maintains an incident plan that addresses the Company's response to a cybersecurity event, which is periodically reviewed and updated.


text: While the Company is working to adopt the National Institute of Standards and Technology ("NIST") cybersecurity framework, the Company's on-going investment in information systems and utilization of external 3rd parties represents the best means for extensively testing both the design and operational effectiveness of cybersecurity controls, and to ensure continuity and functionality of the Company's operating systems.


text: As of the date of this report, the Company has not experienced any material cybersecurity events. However, the presence of new or more advanced forms of cybersecurity threats could have a material and adverse impact on the business, results of operations, and financial position.


text: For further discussion relating to this topic, see Item 1A. Risk Factors "The Company's information technology systems may be negatively affected by cybersecurity threats."


text: The Audit Committee of the Board of Director's has the responsibility of overseeing the Company's cybersecurity risks. The Chief Financial Officer provides periodic updates to the Board of Director's regarding actions taken to mitigate the Company's exposure and protection to cybersecurity risks. Management routinely evaluates the Company's security processes, procedures, and systems to determine if enhancements are needed to reduce the possibility of a future cybersecurity event. This includes safeguards implemented by the Company, such as a multi-factor authentication process for remote access to systems; restricted firewall settings; network monitoring, email phishing tests, and enhancing the Company's backup recovery strategy, among others. The IT Director is responsible for assessing, monitoring, and managing the Company's cybersecurity risks.


text: The IT Director, along with members of management, inform the Audit Committee on cybersecurity risks by providing periodic updates regarding (i) Status of ongoing cybersecurity initiatives and strategies, (ii) The overall state of the Company's security program and potential exposure to risks, and (iii) Incident reports and learning from any cybersecurity events. Further, the IT Director maintains an open dialog regarding any significant developments in cybersecurity risks, ensuring the Audit Committee's oversight is proactive and responsive. In addition to periodic updates to the Audit Committee, the IT Director, in his capacity, regularly informs the Chief Executive Officer ("CEO") and the Chief Financial Officer ("CFO") regarding matters related to cybersecurity risks and incidents. This ensures the highest level of management are informed of potential risks associated with cybersecurity that could have a material and adverse effect on the Company.


text: Privacy and Security We are entrusted with highly personal data and are committed to protecting the privacy and security of our customers and organization. Protection and access to company data is the keystone of the cybersecurity strategy and is considered the utmost of business requirements. We use the GDPR as our guidepost for data protection practices and continue to monitor emerging U.S. laws.

companyName: FOXO TECHNOLOGIES INC.

ticker: FOXO


text: Our security program is built on the following key success factors: tightly controlled access management based on least-privilege authorization, layered defenses, continuous monitoring, vulnerability testing, rapid response, internal and supply chain risk management, strong executive support, and regular development of a security culture. Integration of our compliance command center tool enables continuous monitoring of policy and practices covering service organization control 2 (" SOC 2 ") compliance.


text: Protecting data privacy and security is an organizational-wide responsibility. We protect customer data with a variety of processes and monitoring tools, such as:


text: Access control is tightly managed with single sign-on, multi-factor authentication, and sensitive data access limited by least-privilege authorization appropriate for job duties and reviewed quarterly. Internal Risk Assessments are performed quarterly to identify areas of risk to mitigate or eliminate to improve security.


text: Supply chain risk is being evaluated in an ongoing manner with our comprehensive Third-Party Risk Management program. We use a variety of tools to monitor key Software as a Service provider's security positions as well as regular Risk Assessment questionnaires and evaluations.


text: Our internal security team is augmented with a 24/7 Security Operations Center with analysts available to respond to alerts and protect data based on continuous monitoring for indicators of compromise including elevation of privilege, suspicious access, and data exfiltration.


text: Recognizing employees are heavily targeted for compromise, security prioritizes social engineering and phishing awareness with weekly organization-wide updates, quarterly and annual training. Additionally, we manage client systems with end-point protection tools and monitoring agents to prevent malware and ransomware attacks. Samples are uniquely identified with a code number only, and de-identified to minimize potential exposure during processing. All data is encrypted at rest and in transit with industry standards. Regular network and application penetration testing is performed to identify potential vulnerabilities.


text: Security is an ongoing focus with continuous improvement to strengthen our security posture, strengthen data protection, eliminate gaps, and expand our security-as-a-culture. We are completing our control compliance development in preparation for our initial SOC 2 Type II audit. Having a SOC 2 Report will improve our ability to sell to large organizations and attest to our use of best practices for protecting sensitive data. SOC 2 compliant policies, procedures, and controls will make it easier to achieve other security certifications, further increasing customer confidence in our security.


text: Cybersecurity incident" means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through our information systems that jeopardizes the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: Cybersecurity threat" means any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: Information systems" means electronic information resources, owned or used by us, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of our information to maintain or support our operations.


text: Risk Management and Strategy We monitor our websites and online accounts frequently to manage risks associated with cyber-security risks. Our website is monitored by a third party to check if the website or email server is secure. Our webmaster informs us of any issues that may arise in the cyber sector. We are prepared to inform all parties necessary if any breach of cyber-security were to happen. We have never had this problem and so we have never had to inform consultants, auditors, or other third parties.


text: We have never had a breach of cyber-security at any point in our past. The risk to us of cybersecurity threats is in data storage of customer questions and emails. A breach of customers data could negatively materially affect our public trust and could result in loss of customers and revenue.


text: Our board of directors has no specific processes for monitoring cybersecurity within the company. There is no subcommittee specifically for monitoring cybersecurity in the company.


text: Our management monitors our websites and online accounts frequently to manage risks associated with cyber-security risks. Our management has more than 20 years of experience working in the technology industry, which enables it to identify cybersecurity risks associated with the Company. Our management communicates with our board on matters of cybersecurity but, has not had to inform them of any breaches thus far.


text: Risk management and strategy The Company recognizes the critical importance of maintaining the trust and confidence of business partners and employees toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. The Company uses third-party vendors to manage its information technology systems, including but not limited to services in cloud security, email filtering, endpoint security, darkweb reporting, antivirus/antimalware, employee security awareness training, and asset management and support. Cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence. Management reviews the security policies, procedures, and certifications of all third-party service providers prior to engagement.

companyName: Cryomass Technologies, Inc.


text: Cybersecurity is an important part of our risk management processes and an area of focus for our board of directors and management. Our board of directors will discuss with management our cybersecurity threat risk management and processes surrounding material cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to such risks. Management has engaged a reputable third-party to assist in monitoring the Company's cybersecurity risks which will be communicated to the Chief Financial Officer. The board will receive prompt and timely information from the Chief Financial Officer regarding any cybersecurity incident, as well as ongoing updates regarding any such incident until it has been addressed. Members of the board of directors are also encouraged to regularly engage in conversations with management on cybersecurity-related news events.