text: are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Evergreen Corp


text: The Company's Cybersecurity System includes administrative, technical, and physical safeguards and is designed to provide an appropriate level of protection to maintain the confidentiality, integrity and availability of the Company's and its customers' information. This includes protecting against known and evolving threats to the security of the Company's systems and information, and against unauthorized access, compromise, or loss of data. The Cybersecurity System is managed centrally, so the same security controls, policies and procedures are implemented across the organization.

companyName: OneMeta Inc.

ticker: ONEI

secItem: Item 1C


text: The Company maintains cybersecurity policies including an Acceptable Use Policy that all system users sign to acknowledge that they understand their security responsibilities. All system users receive security awareness training which includes phishing attack simulation testing.


text: A key element of the Company's Cybersecurity System is to mature the system to align with the CIS18 Critical Security Controls security framework. The CIS controls are designed based on real-world data about cyber-attacks, to ensure that the measures are effective against current threats. The framework provides a prioritized set of actions, which enables the Company to focus its efforts on the most effective defensive measures first. This prioritization helps in optimizing the use of resources for maximum impact on security. This strategy provides a structured and effective approach to cybersecurity, helping the Company to protect its assets, comply with regulations, manage risks, and improve its overall security posture.


text: The Company has established controls and procedures to escalate enterprise-level issues, including cybersecurity matters, to the appropriate management levels within its organization and to its Board of Directors, or members or committees thereof, as appropriate. The Company's Board of Directors is responsible for enterprise risk management, including its approach to managing cybersecurity risk, and has delegated oversight responsibility of information security risks to its Audit Committee. Under the Company's framework, cybersecurity issues are analyzed by subject matter experts for potential financial, operational, and reputational risks, based on, among other factors, the nature of the matter and breadth of impact.


text: Matters determined to present potential material impacts to the Company's financial results, operations, and/or reputation are immediately reported by management to the Company's Board of Directors or its Audit Committee, as appropriate, in accordance with its escalation framework.


text: In addition, the Company has established procedures to ensure that management responsible for overseeing the effectiveness of disclosure controls is informed in a timely manner of known cybersecurity risks and incidents that may materially impact the Company's operations and that timely public disclosure is made as appropriate. The Company's Cybersecurity System is led by the Chief Executive Officer ("CEO") in collaboration with other third-party cybersecurity service providers which in turn assist in monitoring our exposure from significant information technology suppliers, significant software as a service providers and major vendors with access to our information technology systems. Further, team members who support our cybersecurity program have relevant educational and industry experience through various roles involving information technology, security, auditing, compliance, systems and programming. The Company does not maintain cyber insurance coverage at this time.


text: During the last three years, the Company has not experienced a material security breach and, as a result, the Company has no t incurred any material expenses from such a breach. Furthermore, during such time, the Company has not been penalized or paid any amount under any information security breach settlement.


text: are a blank check company with no business operations. Since our Initial Public Offering, our sole business activity has been to search for and select a prospective acquisition candidate. However, because we have investments in our Trust Account and bank deposits and we depend on the digital technologies of third-party service providers, we may be subject to attacks on or security breaches in our or such third parties' systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of such third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.

companyName: WinVest Acquisition Corp.

ticker: WINV


text: In the event of a cybersecurity incident, our management will report to the board of directors and provide updates on its plan for addressing and mitigating any risks associated with such incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have a material adverse effect on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering.


text: Management and Strategy our business information, intellectual property, customer and employee data, and technology systems is essential for the continuity of our business, meeting applicable regulatory requirements and maintaining the trust of our stockholders. Cybersecurity is an important and integral part of our enterprise risk management function that identifies, monitors and mitigates business, operational and legal help protect us from a major cybersecurity incident that could have a material impact on operations or our financial results, we have implemented policies, programs and controls, including technology investments that focus on cybersecurity incident prevention, identification and mitigation. The steps we take to reduce our vulnerability to cyberattacks and to mitigate impacts from cybersecurity incidents include, but are not limited to: annual penetration testing by a third party vendor, cloud and agent based security scanning that runs continuously, establishing information security policies and standards, implementing information protection processes and technologies, monitoring our information technology systems for cybersecurity threats, assessing cybersecurity risk profiles of key third-parties, and implementing cybersecurity training. In addition, we annually purchase a cybersecurity risk insurance policy that would help defray the costs associated with a covered cybersecurity incident if it occurred.

companyName: ACORN ENERGY, INC.

ticker: ACFN


text: we did not experience a material cybersecurity incident during the year ended December 31, 2024, the scope and impact of any future incident cannot be predicted. See "Item 1A. Risk Factors" for more information on our cybersecurity-related risks.


text: data privacy, and data protection are critical to our business. In the ordinary course of our business, we collect and store certain confidential information such as information about our employees, contractors, vendors, customers, suppliers, independent sales agents and distributors. We have processes in place for assessing, identifying, and managing material risks from cybersecurity threats, and we monitor the Company's overall security score to assess performance and identify areas for improvement. In recent years, we have installed a new firewall to better protect from network intrusions, hired a Network and Security Administrator, and engaged a third-party service provider to perform an internal penetration test in order to identify and address vulnerabilities. Additionally, we introduced always-on VPN in an effort to better restrict off-campus network access in light of the increase in the number of our employees working remotely in recent years, enhanced our monitoring and control capabilities, and hardened our cloud computing cyber security footprint.

companyName: Xtant Medical Holdings, Inc.

ticker: XTNT


text: Management continually re-assesses the Company's cybersecurity risk environment based on changing circumstances and new information identified by its monitoring, scanning and testing as well as third party resources. processes for assessing, identifying, and managing cybersecurity threats have been integrated into our overall risk management processes.


text: The information provided by these processes facilitates management's ongoing assessment of our cybersecurity risk environment and provides current and accurate information regarding cybersecurity risks to management, our Audit Committee and Board of Directors to allow appropriate management of such risks through remediation or other risk mitigation activities.


text: maintain a cybersecurity program that is designed to identify, protect from, detect, respond to, and recover from cybersecurity threats and risks, and protect the confidentiality, integrity, and availability of its information systems, including the information residing on such systems. The National Institute of Standards and Technology Cybersecurity Framework helps us inform our cybersecurity agenda and prioritize our cybersecurity activities. We take a risk-based approach to cybersecurity, which begins with the identification and evaluation of cybersecurity risks or threats that could affect our operations, finances, legal or regulatory compliance, or reputation.


text: The scope of our evaluation encompasses risks that may be associated with both our internally managed IT systems and key business functions and sensitive data operated or managed by third-party service providers. Once identified, cybersecurity risks and related mitigation efforts are prioritized based on their potential impact, likelihood, velocity, and vulnerability, considering both quantitative and qualitative factors. Risk mitigation strategies are developed and implemented based on the specific nature of each cybersecurity risk. These strategies include, among others, the application of cybersecurity policies and procedures, implementation of administrative, technical, and physical controls, and employee training, education, and awareness initiatives. has implemented risk management structures, policies and procedures and is responsible for our day-to-day cybersecurity risk management.


text: Our Director of Information Technology, Chris Dennis, is responsible for our day-to-day assessment and management of cybersecurity risks. Mr. Dennis has served as our Director of Information Technology since June 2019. Mr. Dennis additionally is the founder of a data privacy consulting company and has over 20 years of experience in the data management space. We have implemented a number of processes which allow Mr. Dennis and his team to be informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents. These processes include, among other things, system alerts of potential malicious cyber activity, access to real-time dashboards that monitor and assess our systems, status reports provided on a daily, weekly and monthly basis, and regular ongoing communications with service providers regarding potential new attack vectors and vulnerabilities. Mr. Dennis and his team share such information with our management team and reports information about such risks to our Audit Committee.


text: of Consultants and Advisors engage various third-party cybersecurity service providers to assess and enhance our cybersecurity practices and assist with protection and monitoring of our systems and information, including with respect to protection of our e-mail, system access, network monitoring, endpoint protection, vulnerability assessments and penetration testing. We engage cybersecurity consultants, auditors, and other third parties to assess and enhance our cybersecurity practices, such as a third-party consulting firm to perform tabletop exercises and evaluate our cyber processes including an assessment of our incident response procedures.


text: from Material Cybersecurity Threats we have taken steps to prevent and mitigate data security threats, there can be no assurance that our protective measures and those of our third-party service providers will prevent or detect security breaches that could have a significant impact on our business, reputation, operating results and financial condition. We maintain cyber liability insurance; however, this insurance may not be sufficient to cover the financial, legal, business or reputational losses that may result from an interruption or breach of our systems. As of the date of this filing, we have not identified any cybersecurity threats that have materially affected or are reasonably anticipated to have a material effect on our business strategy, results of operations or financial condition. Although we have not experienced cybersecurity incidents that are individually, or in the aggregate, material, we have experienced cyberattacks in the past, which we believe have thus far been mitigated by preventative, detective, and responsive measures we have put detail about the cybersecurity risks we face. Maintaining a robust information security system is an ongoing priority for us and we plan to continue to identify and evaluate new, emerging risks to data protection and cybersecurity both within our Company and through our engagement of third-party service providers.


text: Monitoring and detection processes and procedures have been implemented to help identify cybersecurity incidents. In the event of an incident, we intend to follow protocols associated with incident detection, mitigation, recovery and notification, including notifying senior leadership and the Board of Directors, as appropriate. awareness training has been implemented for all employees whereby training is conducted on a monthly basis.

companyName: Prairie Operating Co.

ticker: PROP


text: of Risks from Cybersecurity Threats of the date of this Annual Report, though the Company and our service providers have experienced certain cybersecurity incidents, we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition. However, we acknowledge that cybersecurity threats are continually evolving, and the possibility of future cybersecurity incidents remains. Despite the implementation of our cybersecurity processes, our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences to the business. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security.


text: No security measure is infallible. Refer to Risk Factors - Terrorist attacks, cyberattacks and threats could have a material adverse effect on our business, financial condition and results of operations. for additional information about the risks to our business associated with a breach or compromise to our information technology systems.


text: Board of Directors is ultimately responsible for overseeing cybersecurity, information security, and information technology risks, as well as management's actions to identify, assess, mitigate, and remediate those risks. As part of its program of regular risk oversight, the Audit Committee assists the Board of Directors in exercising oversight of the Company's cybersecurity, information security, and information technology risks. On an annual basis, the Audit Committee reviews and discusses with management the Company's policies, procedures and practices with respect to cybersecurity, information security and information and operational technology, including related risks. In addition, our Chief Financial Officer regularly briefs senior management, the Board of Directors and the Audit Committee on cybersecurity issues as part of our overall enterprise risk management program, which may include information regarding our exposure to privacy and cybersecurity risks deemed to have a moderate or higher business impact, even if immaterial to us.


text: IT networks and related systems are critical to the operation of our business and essential to our ability to successfully perform day-to-day operations. We have implemented security measures and controls to mitigate risks to our IT networks and related systems, including the risks of disruption, release of confidential information, and corruption of data. This includes a variety of technological tools and systems, including both company-owned IT and technology services provided by outside parties to support our critical functions, and in particular, the following: External port penetration testing; violation report reviewed routinely for any abnormalities; employee training and testing on cyber risks; assessment, procedural review and testing in connection with cyber insurance renewals; and Routine server back-up.

companyName: Omega Flex, Inc.

ticker: OFLX


text: terms of governance, the Company employs an IT director, with over 20 years of relevant experience, who supervises our other IT employees and is also responsible for our outside technology services. Our IT director reports directly to our President and reviews cybersecurity assessments with our President on at least a monthly basis. Our President is responsible for escalating any cybersecurity matters as appropriate, in consultation with our General Counsel. Our Board of Directors is ultimately responsible for oversight of cybersecurity risk management and receives regular reports from, and engages in regular dialogue with, Company management.


text: management and strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats. We assess risks from cybersecurity threats against our information systems that may result in adverse effects on our information systems or any information residing therein. We conduct periodic and ad-hoc assessments to identify cybersecurity threats.

companyName: Ainos, Inc.

ticker: AIMD


text: these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to mitigate identified risks and reasonably address any identified gaps in existing safeguards. IT leadership reports to our Chief Executive Officer (CEO) to manage the risk assessment and mitigation process. We monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management. We promote a company-wide culture of cybersecurity risk management.


text: from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing during the fiscal year ended December 31, 2024.


text: board of directors is responsible for monitoring and assessing strategic risk exposure. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the Audit Committee. Our executive management team inform the Audit Committee on cybersecurity risks on a regular basis, with a minimum frequency of once per year.


text: internal cybersecurity coordinator is responsible for assessing and managing our material risks from cybersecurity threats, in close collaboration with our IT team and report to our CEO. This ensures that the senior management are kept abreast of the cybersecurity posture and potential risks faced by the Company.


text: board of directors provides oversight of our cybersecurity program and helps guide our strategy for managing cybersecurity risks in the context of our overall risk management system. Our cybersecurity program is managed by our Executive Vice President of Finance and Regional Manager, our internal IT team and our external Chief Information Security Officer ("CISO") whose is responsible for leading enterprise-wide cybersecurity strategy, protocols, framework, standards and processes. The Executive Vice President of Finance and Regional Manager reports to our board of directors, as well as our Chief Executive Officer and Chief Financial Officer and other members of senior management as appropriate.

companyName: InspireMD, Inc.

ticker: NSPR


text: Role in Cybersecurity Risk Management part of our overall risk management process, our management engages at least annually in an enterprise risk management review and evaluation, during which management reviews the principal risks relating to our business and operations. Included in this process is a review and evaluation of our risks relating to our Cybersecurity Program. Additionally, as part of our Rule 38a-1 compliance program, we review at least annually the compliance policies and procedures of our key service providers, including documentation discussing each service providers' information security and privacy controls. Any failure in our or our key service providers' cybersecurity systems could have a material impact on our operating results. See "Item 1A. Risk Factors - General Risk Factors - The failure in cybersecurity systems, as well as the occurrence of events unanticipated in our disaster recovery systems and management continuity planning, could impair our ability to conduct business effectively. "

companyName: SURO CAPITAL CORP.

ticker: SSSS


text: Board of Directors as a whole has responsibility for the Company's risk oversight, with reviews of certain areas being conducted by the relevant Board committees that report on their deliberations to the full Board of Directors. The oversight responsibility of the Board of Directors and its committees is enabled by management reporting processes that are designed to provide visibility to the Board of Directors about the identification, assessment and management of critical risks and management's risk mitigation strategies.


text: Accordingly, our Board of Directors provides strategic oversight on cybersecurity matters, including material risks associated with cybersecurity threats. Our Board of Directors receives periodic updates from our Chief Compliance Officer (or more frequently, as needed) regarding the overall state of our Cybersecurity Program, information on the current threat landscape, and material risks from cybersecurity threats and cybersecurity incidents.


text: Management and Strategy have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We monitor cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that we use through third party providers that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Ernexa Therapeutics Inc.

ticker: ERNA


text: engage consultants in connection with our risk assessment processes. These service providers assist us in designing and implementing our cybersecurity policies and procedures, as well as monitoring and testing our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: of December 31, 2024 and through the date of the filing of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this report.


text: of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors administers its cybersecurity risk oversight function through its audit committee, which provides oversight of our cybersecurity program as part of its periodic review of enterprise risk management.


text: President and Chief Executive Officer and Senior Vice President of Finance are primarily responsible for assessing and managing our material risks from cybersecurity threats. In this regard, our President and Chief Executive Officer and Senior Vice President of Finance have assistance from consultants.


text: President and Chief Executive Officer and Senior Vice President of Finance oversee our cybersecurity policies and processes, including those described in "Risk Management and Strategy" above. Under such policies and processes, our President and Chief Executive Officer and Senior Vice President are responsible for reporting to our audit committee regarding any cybersecurity incidents.


text: audit committee, in turn, provides periodic reports to our board of directors regarding our cybersecurity processes, including the results of cybersecurity risk assessments.


text: through our third party service provider that manages our information technology systems and networks, have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Indaptus Therapeutics, Inc.

ticker: INDP


text: team members are responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: have not identified risks from known cybersecurity threats, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. See Item 1A. "Risk Factors – Our Risks Related to Our Business - Our business and operations may suffer in the event of information technology system failures, cyberattacks or deficiencies in our cybersecurity. "


text: Board considers cybersecurity risk as part of its risk oversight function and oversees our cybersecurity and other information technology risks and management's implementation of our cybersecurity risk management program.


text: Board receives periodic reports from management on our cybersecurity risks. In addition, management updates the Board and the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: management team, including our Chief Operating Officer, is responsible for assessing and managing our material risks from cybersecurity threats. Our Chief Operating Officer has primary responsibility for our overall cybersecurity risk management program and supervises our retained provider of IT services and external cybersecurity consultants. Our Chief Operating Officer has experience supervising and managing company security and privacy departments.


text: Company's cybersecurity program is managed by the Vice President ("VP") of Information Systems, who has been employed by the Company for 21 years and has over 36 years of total experience in information systems. The VP of Information Systems has an extensive career in software development and infrastructure management including working with Fortune 500 companies in his prior positions. The VP of information Systems is a participant in the overall Company strategic process and has aligned the program to best service the strategic objectives of the business.

companyName: PERMA FIX ENVIRONMENTAL SERVICES INC

ticker: PESI


text: Company's Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats. Our senior management is responsible for the day-to-day management of the material risks we face. Our VP Of Information System is scheduled to report to the CFO on a weekly basis and the Audit Committee on a quarterly basis on cybersecurity matters to include updates on cybersecurity threat management, strategy processes, system updates and cybersecurity risks activities, including but not limited to any recent cybersecurity incidents and related responses. Our Board is also engaged in discussion with senior management and the Audit Committee on at least a quarterly basis to discuss any updates to our cybersecurity risk management and strategy program. Each member of our Board has a working knowledge and/or experience with cybersecurity, IT strategy and IT risk assessment.


text: the past two years, the Company does not believe that it has experienced any material cybersecurity incidents, nor any material costs related to immaterial cyber incidents. Although we have a comprehensive process for the prevention of material cybersecurity incidents as discussed, we cannot provide assurance that our results of operations and financial condition and business strategy will not be materially impacted from cybersecurity risks in the future. For more information on our cybersecurity related risk and potential effects on the Company of a material cybersecurity breach, see under "General Risk Factors" in "Item 1A. Risk Factors"


text: Risk Management and Strategy have developed and maintained a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats, including by engaging a third-party cybersecurity service provider, which communicates directly with our management and compliance personnel. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations. Our risk management, legal, and compliance personnel oversee and identify, including through a third-party cybersecurity service provider, material risks from cybersecurity threats associated with our use of such entities.

companyName: ZEUUS, INC.

ticker: ZUUS


text: overall review of risk is inherent in our Board of Directors ongoing consideration of our long-term strategies, transactions and other matters presented to and discussed by the Board of Directors. This includes a discussion of the likelihood and potential magnitude of various risks, including cybersecurity risks, and any actions management has taken to limit, monitor or control those risks.


text: also maintain third party security procedures to identify, prioritize, assess, mitigate and remediate third party risks; however, we rely on the third parties we use to implement security programs commensurate with their risk, and we cannot ensure in all circumstances that their efforts will be successful.

companyName: Stereotaxis, Inc.

ticker: STXS


text: Board oversees our enterprise risk management processes, which includes cybersecurity risk, directly and through its audit committee. The audit committee of the Board assesses with management the Company's major risk exposures and the steps management has taken to monitor and control such exposures. The audit committee reviews management's risk assessment and risk management programs and reports on such matters to the full Board.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with our Chief Information Officer who reports to our Chief Executive Officer, to manage the risk assessment and mitigation process.

companyName: BullFrog AI Holdings, Inc.

ticker: BFRG


text: cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information technology team at the direction of our Chief Information Officer. Our executive team, including our Chief Executive Officer and Chief Financial Officer, are responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities to relevant personnel. This executive team is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including our Chief Executive Officer and Chief Financial Officer. In addition, the Company's incident response and vulnerability management policies include reporting to the audit committee of the board of directors for certain cybersecurity incidents including significant breaches to the Company's networks or systems. The audit committee receives regular reports from the information technology team concerning the Company's significant cybersecurity threats and risks and the processes the Company has implemented to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.


text: an exploration stage company, our business activity to date has been identifying, acquiring, and exploring mineral properties. We have not yet adopted formal cybersecurity risk management programs or formal processes for assessing cybersecurity risks. We understand the importance of managing material risks from cybersecurity threats and are committed, as part of our continuing growth, to implementing and maintaining an adequate information security program to manage such risks and safeguard our systems and data. We do not store in our systems any customer or similar data.

companyName: Atlas Lithium Corp

ticker: ATLX


text: currently manage our cybersecurity risk through practices that are applicable to all users of our information technology and information assets, including our employees and contractors. We notify these users of expectations regarding acceptable use of our information systems and alert them to potential sources of cybersecurity threats. We use a combination of technology and monitoring to prevent security incidents.


text: The technologies we utilize for cybersecurity monitoring across our information technology environment are designed to prevent, detect and minimize cybersecurity attacks, as well as alert management of such attacks.


text: During 2024, we implemented and adopted several technologies to increase our cybersecurity defenses, including an Enterprise Resource Planning solution, a data control and backup solution, security in data access control (single sign-on and multi factor authentication), and data encryption. We also have a firewall installed in all our facilities.


text: the last three years, we have not experienced a cybersecurity threat or incident that materially affected our business strategy, results of operations, or financial condition. However, there can be no guarantee that we will not experience such an incident in the future.


text: executive management team is responsible for the development of our policies and procedures relating to our risk management, including cybersecurity risks. Our board of directors has ultimate oversight of our risk management processes, including any cybersecurity-related risk and activities. In particular, the Audit Committee of our Board of Directors ("Audit Committee") is responsible for monitoring compliance with legal and regulatory requirements, in addition to considering and discussing guidelines and policies to govern the process by which risk assessment and mitigation is undertaken.


text: management recognizes the impact that cybersecurity threats could have on our business operations, our compliance with regulations and our reputation. We have identified cybersecurity as a critical business risk as part of our overall risk management strategy, which our board of directors oversees.

companyName: ORAGENICS INC

ticker: OGEN


text: have implemented an information security management system in accordance with our risk profile and business that is designed to protect us, our employees, and our shareholders from cybersecurity threats. We have also developed an incident response policy and procedure designed to facilitate the handling of cybersecurity incidents.


text: cybersecurity risk management program aims to identify risks from cybersecurity threats. Our cybersecurity risk management program includes a number of components, including informal self-assessments. Our managed security services provider helps us implement additional security controls, including malware protection and network security tools. We take a risk-based approach to the evaluation of third-party vendors.


text: have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, we and our third-party vendors have from time-to-time experienced threats and cybersecurity incidents that could affect our information or systems. For more information, see Item 1A. Risk Factors.


text: Board of Directors and Audit Committee oversee the management of risks by our management. The Audit Committee is responsible for reviewing our cybersecurity program and risks, as identified by our management, and the steps our management has taken to protect against threats to our assets, including information systems and data security. The Audit Committee provides updates to the Board approximately annually.


text: the ordinary course of our business, we collect, process, store, and transmit players' data, including confidential, sensitive, proprietary, and personal information. Maintaining the confidentiality, integrity and availability of our information technology systems and data, as well as appropriate limitations on access to such information, is important to our operations and business strategy. To this end, we have implemented various Information Security programs aligned to ISO and NIST cyber security frameworks with functions incorporating the "Identify", "Protect", "Detect", "Respond", and "Recover"

companyName: GAN Ltd


text: concepts. They are designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them.


text: CISO, who reports directly to the Chief Technology Officer, is a Certified Information Systems Security Professional with over 20 years of experience managing information technology and cybersecurity matters, including more than five years in gaming and three years at GAN Limited. Members of the information security team who support the security program hold relevant educational and professional credentials with experience in similar roles from other technology companies. The CISO and Information Security team, together with our Privacy and Data Protection Team, led by a dedicated Data Protection Officer are responsible for assessing and managing cybersecurity risks. We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. In the last fiscal year, we have not identified any prior cybersecurity incidents that have materially affected us, but we face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us. Additional information on cybersecurity risks we face is discussed in Part I, Item 1A, "Risk Factors".


text: Company employs several strategies for assessing, identifying, and managing material risks from cybersecurity threats. Components of this strategy include the use of industry standard traffic monitoring tools, and training users to detect, report, and prevent unusual behavior.

companyName: BLUE BIOFUELS, INC.

ticker: BIOF


text: our IT consulting firm, we employ continuous monitoring mechanisms to detect and respond to cybersecurity threats promptly. Regular reports are generated as needed for management and the board, providing insights into our cybersecurity posture, incidents, and remediation efforts.


text: We conduct regular assessments and testing to ensure the effectiveness of these controls, especially those related to the protection of financial information. The implementation and management of these processes are integrated with the Company's overall operational risk management processes that seeks to limit our exposure to unnecessary risks across our operations.


text: cybersecurity program is overseen by the Chief Financial Officer (CFO), who reports directly to the Chief Executive Officer (CEO) and updates the Board of Directors on cybersecurity matters.


text: employees receive regular training on cybersecurity best practices, emphasizing the protection of financial information. We foster a culture of cybersecurity awareness and responsibility throughout the organization.


text: maintain a comprehensive incident response plan that outlines the steps to be taken in the event of a cybersecurity incident. This plan includes procedures for promptly reporting material incidents to the SEC, as required, and for communicating with affected stakeholders.


text: Upon discovery of a cybersecurity incident, the identifying party immediately notifies the Company's CFO. The CFO activates the incident response plan to include the following: Gather preliminary information about the cybersecurity incident. notifies the CEO and the Board of Directors of the cybersecurity threat. CFO allocates resources for disclosure if determined to be a material cybersecurity event. CFO consults with cybersecurity consultants and other involved parties to identify the undesirable effects of the cybersecurity incident. CFO develops a recommendation for determination of materiality. disclosure is required, the material incident disclosure plan is executed by the CFO.


text: Risk Management and Strategy We regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities, and test those systems pursuant to our cybersecurity policies, processes, and practices, which are integrated into our overall risk management program. To protect our information systems from cybersecurity threats, we use various security tools that are designed to help identify, escalate, investigate, resolve, and recover from security incidents in a timely manner. Our board of directors assesses risks based on probability and potential impact to key business systems and processes as part of our overall risk management program overseen by the board of directors. Risks that are considered high are incorporated into our overall risk management program. We collaborate with third parties to assess the effectiveness of our cybersecurity prevention and response systems and processes and to assist in the identification, verification, and validation of cybersecurity risks, as well as to support associated mitigation plans when necessary. We have also developed a third-party cybersecurity risk management process to conduct due diligence on external entities, including those that perform cybersecurity services. Cybersecurity threats, including those resulting from any previous cybersecurity incidents, have no t materially affected our Company, including our business strategy, results of operations, or financial condition. Refer to the risk factor captioned "Cyber security risks and the failure to maintain the integrity of company, employee or guest data could expose us to data loss, litigation and liability, and our reputation could be significantly harmed." in Part I, Item 1A. "Risk Factors" for additional details regarding cybersecurity risks and potential impacts on our business.

companyName: Sintx Technologies, Inc.

ticker: SINT


text: Our board of directors oversees our risk management process, including as it pertains to cybersecurity risks, which focuses on the most significant risks we face in the short-, intermediate-, and long-term timeframe. Management is responsible for the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks. Meetings of our board of directors include discussions and presentations from management regarding specific risk areas throughout the year, including, among others, those relating to cybersecurity threats, and reports from management on our enterprise risk profile on an annual basis. The board of directors reviews our cybersecurity risk profile with management on a periodic basis using key performance and/or risk indicators. These key performance indicators are metrics and measurements designed to assess the effectiveness of our cybersecurity program in the prevention, detection, mitigation, and remediation of cybersecurity incidents. We take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and incidents.


text: face cybersecurity risks due primarily to our position in the industry and identity as a financial service company with potential for harm that could occur to us, our investors and our customers were we to suffer impacts of a material cybersecurity incident. We are committed to maintaining robust governance and oversight of these risks and to implementing mechanisms, controls, technologies, and processes designed to help us assess, identify, and manage these risks. While we have not, as of the date of this Annual Report, experienced a cybersecurity threat or incident that resulted in a material adverse impact or are reasonably likely to have material adverse impact on our business or operations, our business strategy, results of operations, or financial condition, there can be no guarantee that we will not experience such an incident in the future. In addition, the environment and threats are constantly evolving, thereby increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We only use industry leading third party software applications for our operations and we rely on their technology to assess potential cybersecurity threats. We seek to detect and investigate unauthorized attempts and attacks against our network and services which are also dependent on third parties (multiple law firms, banks, settlement and title entities) and their technology, and to prevent their occurrence and recurrence where practical through changes, updates and enhancements to our internal processes and tools. We have an internal process to consider the cybersecurity practices of our third-party service providers and we actively review their cybersecurity notices and alerts on an ongoing basis. Our assessment of risks associated with the use of third-party providers is part of our overall risk management framework. However, we remain potentially aim to incorporate industry best practices throughout our cybersecurity program. Our cybersecurity strategy focuses on implementing effective and efficient controls, technologies, and other processes to assess, identify, and manage material cybersecurity risks. Our cybersecurity program is designed to be aligned with applicable industry standards and is assessed periodically by independent subject matter expert third parties who hold industry leading certifications such as Certified Information Systems Security Professional (CISSP), GIAC Certified Intrusion Analyst (GCIA), and GIAC Certified Incident Handler (GCIH).

companyName: Shepherd's Finance, LLC


text: to our Audit Committee Charter, our Audit Committee is responsible for reviewing and assessing our risk assessment and risk management policies, including oversight of cybersecurity risk. Our risk assessment policy is utilized in making decisions with respect to company priorities, resource allocations, and oversight structures. Our Board of Managers, with the assistance of our Audit Committee and Technology Committee, regularly reviews our cybersecurity program with management and reports to the Board of Managers. Messrs. Wallach and Sheldon, both members of our Technology Committee and our Board of Managers, bring extensive experience in security governance, risk, and compliance, with prior leadership experience in public and private companies, where they closely worked with massive IT departments to handle with cybersecurity risks, information technology and data protection. Cybersecurity reviews generally occur at least annually, or more frequently as determined to be necessary or advisable. We have an escalation process in place to inform senior management and the Board of Managers of material issues.


text: are subject to various cyber and other security threats, including attempts to gain unauthorized access to sensitive information and networks; virtual and cyber threats to our directors, officers, and employees; and threats to the security of our infrastructure and assets. To mitigate the threats to our business, we take a comprehensive approach to cybersecurity risk management. Our Board and our management oversee our risk management program, including the management of cybersecurity risks. We have established policies, standards, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats, including those discussed in our Risk Factors, and have integrated these processes into our overall risk management systems and processes. We have devoted financial and personnel resources to implement and maintain security measures to meet regulatory requirements and stakeholder expectations, and we intend to continue to make investments as may be required to maintain the security of our data and cybersecurity infrastructure.

companyName: BTCS Inc.

ticker: BTCS


text: While we cannot guarantee complete effectiveness of our cybersecurity measures despite our best efforts and continuous monitoring, we believe that the Company's sustained investment in people and technologies has contributed to a culture of continuous improvement that has put the Company in a position to protect against potential compromises.


text: cybersecurity risk management program ("cybersecurity program") is designed and assessed by leveraging the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"), customized to align with our entity size, risk profile, and industry best practices. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. Our cybersecurity program is an integral part of our broader Enterprise Risk Management (ERM) framework and business continuity efforts. By incorporating cybersecurity into our overall risk assessment and management processes, we aim to address interconnected risks that could impact critical operations, systems, and assets. This alignment allows us to proactively evaluate and prioritize cybersecurity risks in the context of broader organizational objectives and resilience planning, ensuring a comprehensive approach to safeguarding the Company's infrastructure and stakeholders.


text: senior management team, led by our Chief Financial Officer and Chief Operating Officer, is responsible for assessing and managing our material risks from cybersecurity threats. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel;


text: Audit Committee considers cybersecurity risks and other information technology risks as part of its risk oversight function and evaluates our risk assessment and management policies, including periodic discussions with our senior officers. In addition, management updates the Board of Directors, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Our Audit Committee also meets at least quarterly with our independent registered accounting firm and communicates with them regarding any cybersecurity-related risks.


text: RISK MANAGEMENT AND STRATEGY. NeurAxis has developed and implemented a cybersecurity framework intended to assess, identify and manage risks from threats to the security of our information, systems, products and network using a risk-based approach. The framework is informed in part by the National Institute of Standards and Technology (NIST) Cybersecurity Framework and International Organization for Standardization 27001 (ISO 27001) Framework, although this does not imply that we meet all technical standards, specifications, or requirements under the NIST or ISO 27001.

companyName: Neuraxis, INC

ticker: NRXS


text: controls for information systems and information on NeurAxis' networks: We seek to maintain an information technology infrastructure that implements physical, administrative and technical controls that are calibrated based on risk and designed to protect the confidentiality, integrity and availability of our information systems and information stored on NeurAxis' networks, including customer information, personal information, PHI/PII, intellectual property and proprietary information. NeurAxis added physical safeguards in the form of biometric entry systems to access server rooms and 24/7 surveillance at both NeurAxis locations.


text: routinely reviews the Office of Civil Right (OCR) audit requirements to assess any gaps within our cybersecurity, privacy and security programs. We have not identified risks from known cybersecurity threats, that have materially affected us, including our operations, business strategy, results of operations, cash flows or financial condition. We face certain ongoing risks from cybersecurity threats, including active interactions with children's hospitals while assisting with insurance prior approvals, that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, cash flows or financial condition.


text: As of the fiscal year ended December 31, 2024, the Company had not experienced any material cybersecurity incidents that have had a significant impact on our operations, data integrity, results of operations, or financial performance.


text: GOVERNANCE. NeurAxis' Board of Directors is responsible for oversight of cybersecurity risk. The Board receives reporting about NeurAxis' practices, programs, notable threats or incidents and other developments related to cybersecurity throughout the year, including through periodic updates from NeurAxis' Chief Regulatory Officer/Privacy Officer and VP of IT/Security Officer.


text: Security Officer reports to NeurAxis' Chief Regulatory Officer and together, they lead the Company's overall cybersecurity function. The Security Officer has over 13 years of experience in managing and leading IT or cybersecurity teams and participates in various cyber security trainings frequently. The Security Officer collaborates with NeurAxis personnel and our outside IT vendors to identify and analyze cybersecurity risks to NeurAxis, considers industry trends, implement controls, as appropriate and feasible, to mitigate these risks and enables business leaders to make risk-based business decisions that impact cybersecurity considerations. The Security Officer meets with senior leadership to review and discuss NeurAxis' cybersecurity program, including emerging cyber risks, threats, and industry trends. The Security Officer also supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including by collaborating with external security personnel and business stakeholders, and incorporating threat intelligence and other information obtained from governmental, public, or private sources to strengthen our cybersecurity technologies and processes.


text: Management and Strategy recognize the critical importance of maintaining the safety and security of our systems and data and have implemented a holistic process for overseeing and managing cybersecurity and related risks. We depend on the accuracy, capacity, and security of our information technology systems and those used by our third-party service providers. To protect the confidentiality, integrity, and availability of our critical systems and information, we have developed and implemented a cybersecurity risk management program that includes a cybersecurity incident response plan. Our cybersecurity risk management program covers our business and was crafted following frameworks established by the National Institute of Standards and Technology. While using these frameworks guides our approach to identifying, assessing, and managing cybersecurity risks relevant to our business, it does not imply compliance with any specific technical standards, specifications or requirements. The program is integrated into our overall enterprise risk management program and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. In addition, our program emphasizes the maintenance of controls and procedures for the prompt escalation of certain cybersecurity incidents, conducting cybersecurity risk assessments, regularly assessing and deploying technical safeguards, establishing incident response and recovery plans, and providing relevant privacy and cybersecurity information to employees to enhance awareness and response to cybersecurity threats.

companyName: Motorsport Games Inc.

ticker: MSGM


text: of the date of this Report, we are not aware of any risks from cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.


text: Board of Directors, along with its Audit Committee, oversees the management of cybersecurity risks and receives quarterly reports from management on the detection and remediation of cybersecurity incidents, as well as on material security risks and vulnerabilities. Through our outsourced managed service provider, we are informed about, and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents through the management of, and participation in the monitoring systems and processes described above. The information about such incidents is reported to the Company's Chief Executive Officer and Chief Financial Officer, who then would report such information to the Company's Board of Directors, in some cases, earlier than the regular quarterly reports depending on the nature and severity of the incident.


text: elements of our cybersecurity risk management program include: assessments designed to help identify material cybersecurity risks to our critical systems, information, and our broader enterprise our external service providers, where appropriate, to assess, test, monitor or otherwise assist with aspects of our security controls; training and awareness programs for employees to drive adoption and awareness of cybersecurity processes and controls; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.

companyName: Biofrontera Inc.

ticker: BFRI


text: the last two fiscal years, the Company has not experienced any material cybersecurity incidents, and expenses incurred from cybersecurity incidents were immaterial. For a discussion of whether and how any risks from cybersecurity threats are reasonably likely to materially affect us, including our business, results of operations or financial condition, refer to Item 1A. Risk Factors - "Our business and operations would suffer in the event of system failures or, cyber-attacks or a deficiency in our cyber-security," which is incorporated by reference into this Item 1C. (Role of Management/Role of the Board)


text: cybersecurity program and function is overseen by the Director of Information Technology ("Director of IT"), who has over 15 years of experience leading information technology divisions in various industries. The Director of IT collaborates with all business units to identify and assess cybersecurity risks and compliance with company policy. The Director of IT stays aware of emerging threats and trends in cybersecurity through attendance at cyber security conferences, subscription to the CISA.gov mailing list, various tech focused news outlets, and other sources.


text: Audit Committee is responsible for the oversight of risks associated with cybersecurity threats. The Audit Committee charter provides that the Committee is responsible for considering the effectiveness of the Company's internal control system, including information technology security and control. The Director of IT reports significant cybersecurity events to our Chief Financial Officer, who then reports such events to our Audit Committee.


text: Risk Management and Strategy is committed to ensuring the highest standards of cybersecurity to protect our systems, networks, and data from cyber threats. We recognize the critical importance of safeguarding sensitive information and maintaining the trust of our customers, partners, and stakeholders. cybersecurity strategy is built on a foundation of proactive risk management, continuous monitoring, and adherence to industry best practices. We employ a multi-layered approach which leverages cutting-edge technologies to defend against evolving cyber threats.

companyName: Greenlane Holdings, Inc.

ticker: GNLN


text: have made significant investments in modernizing, streamlining, and simplifying our technology footprint to both enhance customer experience and strengthen our internal security controls.


text: time-to-time, we may engage third-party consultants, legal advisors, and audit firms to evaluate and test the Company's risk management systems and assess and remediate certain potential cybersecurity incidents, as appropriate. We prioritize the integrity of our data access controls to prevent unauthorized access, data breaches, and malicious activities. We regularly assess and enhance our cybersecurity posture through comprehensive risk assessments, security audits, and vulnerability assessments. is a shared responsibility requiring collaboration and cooperation across all levels of our organization.


text: recognizes that cybersecurity is not solely a technology issue but also a people and process issue. We invest in ongoing employee training and awareness programs to empower our staff to recognize and respond to potential security threats effectively. threats are monitored and acted upon by the Company's information technology security group within the Information Technology team.


text: The Vice President of Information Technology has over 25 years of IT experience including Fortune 100 public companies. The Vice President of Information Technology meets regularly with senior management to inform and advise them of the status on all cybersecurity initiatives as well as all cybersecurity incidents, if any.


text: the event of a cybersecurity incident, we have established incident response plans and protocols to minimize the impact and facilitate swift recovery. The Company's Audit Committee oversees cybersecurity risk. The Audit Committee is promptly notified by Information Technology leadership of any potentially serious incidents including details and recommendations on the detection, mitigation, and remediation of the same. During the calendar year 2024, there have been no known reported cybersecurity incidents that have materially affected our believe in transparency and open communication, promptly informing affected parties and relevant authorities as required by law. Together, we remain vigilant, adaptive, and resilient in the face of evolving cyber threats, safeguarding the trust and confidence of those we serve.


text: date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, interfere with the progress of our clinical trials, interfere with our efforts to pursue regulatory approvals for our product candidates, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We have attempted to preemptively mitigate the financial impact of any cybersecurity incident and currently maintain a cyber liability insurance policy. However, our cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all. In addition, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations. For further information regarding risks from cybersecurity threats, please refer to "Item 1A. RISK FACTORS—Risks Related to Our Business."

companyName: Pulmatrix, Inc.

ticker: PULM


text: We are continuously working to ensure that we satisfy generally applicable industry standards for the assessment, identification, and management of risks from cybersecurity threats that may pose a risk to our information technology systems, including from third parties with whom we work with.

companyName: Viewbix Inc.

ticker: VBIX


text: Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. As of the date of this Annual Report, the majority of the Company's IT systems are computed using leading secure cloud platforms.


text: routine conduct of penetration tests on our computer systems to evaluate the security of the systems and identify weaknesses or vulnerabilities;


text: employee training programs regarding cybersecurity risks and the usage of secure software or platforms designed to protect our IT systems against cybersecurity risks, such as two-factor authentication systems, anti-virus and ransomware programs or the usage of secure cloud platforms for computing our IT systems;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; and a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: We have no t identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function and oversees management's implementation of our cybersecurity risk management program.


text: The Board of Directors receives regular reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Our management team, including our Chief Executive Officer, the VP R&D and Data Protection Officer of Cortex, and our external advisors, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.


text: are a blank check company with no business operations. Since the IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. We depend on the digital technologies of third parties, and any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data and could have a material adverse effect on our business, financial condition or reputation. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

companyName: Aimei Health Technology Co., Ltd.

ticker: AFJK


text: board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. Our management will promptly report to the board of directors on incidents of material cybersecurity risks facing us and any third parties and the measures that may be taken to mitigate such risks. As of the date of this Annual Report, we have not encountered any cybersecurity incidents that have materially affected, or that we believe are reasonably likely to materially affect, us, including our business strategy, results of operations or financial condition. We do, however, face risks from cybersecurity threats.


text: believe that information security is a critical component of our business strategy. Therefore, we maintain and continuously assess and strengthen our cyber security program. Management is responsible for the day-to-day administration of the Company's risk exposures and has adopted a risk management framework including identification, analysis and response to risks affecting our business.

companyName: CXJ GROUP CO., Ltd

ticker: ECXJ


text: regularly engage third-party services to conduct evaluations of our security controls, which can include penetration testing, independent audits, or consulting on best practices to address new challenges. These evaluations include testing both the design and effectiveness of security controls.


text: rely on third-party service providers for a variety of services to run our information systems. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers. A cyber-attack at a third-party service provider could have a significant impact on our business, and we continuously monitor the risks associated with our service providers.


text: Chief Financial Officer is responsible to oversight of the Company's risk management program, including technology and cybersecurity risks facing the Company. The Chief Financial Officer receives briefings from management and the third-party service provider about cybersecurity risk management and the overall technology and cybersecurity environment.


text: believe that currently we have no t encountered a cybersecurity event that has had a material impact on our business. See Item 1A. "Risk Factors" for a discussion of our cybersecurity risk.


text: aid our cybersecurity risk management strategy, we contract with dedicated third-party firms and assessors to identify risks and threats to our organization. These assessments adhere to leading cybersecurity standards such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework aligning with industry best practices. To oversee incident response and mitigation we utilize our incident response plan and processes to standardize our processes for assessing, identifying, and managing cybersecurity incidents. This includes a comprehensive reporting structure and analysis processes to provide visibility and determine incident business impact. Were a cybersecurity incident to occur, we have also implemented a cross-functional business team to aid in the determination of incident impact, severity, and materiality, with the support of standing external counsel and third-party incident response advisors. Additional to our third-party incident response advisors and support contracts, we undergo regular penetration tests to bolster our readiness in the event of cybersecurity incidents. Furthermore, we have also obtained cybersecurity insurance coverage to enhance protection and minimize potential financial prioritize cybersecurity within our supply chain, both nationally and globally, by assessing our third-party cybersecurity posture to provide secure visibility with our partnerships. As part of our due diligence processes, we conduct security questionnaires and service provider reviews, to align our cybersecurity standards on the onset of our partnerships. Additionally, we collaborate closely with a third-party vendor to enhance supply chain resilience. This collaboration involves leveraging their expertise to inform decision-making and enhance risk oversight processes, ensuring greater robustness, and adaptability in managing supply chain challenges.

companyName: Flux Power Holdings, Inc.

ticker: FLUX


text: we maintain a strong cybersecurity posture, we continuously strive for improvement and vigilance to mitigate evolving threats within this dynamic environment and protect our stakeholders' interests. Our organization has not experienced any unauthorized access resulting from cybersecurity incidents with a materially adverse effect on our business, operations, or financial condition and we remain cognizant of the potential impact of insufficient cybersecurity measures on our operations. For further insights into additional risks relating to our business, please refer to "Risk Factors Relating to Our Business." in Item 1A – Risk Factors contained in Part I of this report.


text: our cybersecurity initiatives is our Director of Information Technology who provides invaluable expertise in managing cybersecurity risks and leading our cybersecurity operations. The Director of Information Technology possesses good knowledge in information technology and program management, with contract resources available to help and supplement our security profile. Furthermore, the executive leadership team is active in security operations, overseeing implementation of policies, procedures, and policies related to cybersecurity, technology, and vendors. Both the Audit Committee of the Board as well as executive leadership team will be notified and updated in the event of an incident, with incident updates, mitigation efforts, and impact, as deemed appropriate.


text: Company recognizes that cybersecurity threats may pose significant business risks and has developed processes for identifying, assessing, and managing these threats. The Company has implemented a plan for cybersecurity and cyber-related management across its varied business units. This plan allows each business unit to tailor solutions to identify, manage, and mitigate risks based on their own assessment of their unique cybersecurity risks in conjunction with each business unit's overall risk management process. Having each business unit implement its own plan helps enable appropriate compliance in reporting material cyber events and risks across the Company.

companyName: Marygold Companies, Inc.

ticker: MGLD


text: business unit's Chief Information Security Officer ("CISO") on at least an annual basis is to provide a report to the Company's senior management, regarding the state of their cybersecurity program and its material cyber risks. These reports are then shared with the Company's cybersecurity oversight committee to inform and augment the Company's risk management processes.


text: Additionally, each business unit is required to maintain an incident reporting process to report significant cybersecurity events to the Company. The Company and its business units discuss and partner with third parties to assess, mitigate, audit, educate, implement, operate, protect, and remediate various cybersecurity related elements.


text: This dependence exposes us, along with others who use these service providers, of a cyber breach on their service providers. It's possible that a cyber-attack at a third-party service provider may have a material financial, operational or reputational impact to the Company. The Company and its business units will continuously monitor these risks associated with its service providers.


text: the fiscal year ending June 30, 2025, the Company had no cyber events requiring disclosure on Form 8-K, Item 1.05 as required under the Securities Exchange Act, Regulation S-K, Item 106.


text: Company recognizes the importance of cybersecurity in safeguarding sensitive information, maintaining operational resilience, and protecting stakeholders' interests. The Company currently manages cybersecurity risks by utilizing basic security protocols, such as network monitoring and access controls. Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes to the best of their ability to ensure that such potential cybersecurity risk exposures are monitored, putting in place reasonably appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity program is under the direction of our CFO. Any significant Cyber incidents that they become aware of are reported to the board of directors.

companyName: Golden Star Resource Corp.

ticker: GLNS


text: The Board of Directors does not have a designated cybersecurity committee, but the Audit Committee receives periodic updates on cybersecurity matters. The Company has no t experienced any material cybersecurity incidents to date.


text: have not yet established or adopted policies and processes for assessing, identifying, and managing material risk from cybersecurity threats. During the year ended June 30, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: Blue Line Holdings, Inc.

ticker: BLNH


text: of the Company is responsible for overseeing our enterprise risk management. In that regard, management receives periodic updates, as appropriate (and no less frequently than annually), regarding the Company's cybersecurity risk management processes and the risk trends related to cybersecurity. Our Board of Directors, in coordination with the Audit Committee, shall review and discuss with management the Company's risks related to information security, including cybersecurity.

companyName: Legacy Education Inc.

ticker: LGCY


text: Management and Strategy relies heavily on information technology systems to operate our election registration, tabulation and online voting business. GES in administering elections manages proprietary and personal data list from its clients. Despite our ongoing investments in cybersecurity measures, we are subject to increasing risks associated with cyberattacks, ransomware, phishing, and other malicious activities.

companyName: Global Arena Holding, Inc.


text: account security or organizational security practices, including those of companies of third parties GES utilizes, may result in unauthorized access to our systems and data, and cause irrevocable damage to the Company.


text: in the election industry are constantly evolving and becoming increasingly difficult in detecting and successfully defending against them. Threat actors, including individual and groups of hackers and sophisticated organizations, including nation-states, state-sponsored organizations, or cybercriminal groups, can pose a threat to GES customers and GES election software infrastructure. Threat actors may also utilize emerging technologies, such as AI and machine learning. Our current capabilities may not detect certain vulnerabilities successful cyber intrusion could result in significant business disruption, reputational damage, regulatory penalties, and financial loss. GES maintains cybersecurity insurance, employs robust monitoring tools, and conducts employee training, but these safeguards may not prevent all incidents. Failure to effectively prevent or respond to such incidents could materially and adversely affect the Company and businesses operations and financial condition.


text: Board of Directors considers cybersecurity risk as part of its oversight function. Management is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for overall cybersecurity risk management and is responsible for updating the Board, as necessary regarding significant cybersecurity incidents.


text: Risk Management and Strategy face various cyber risks, including, but not limited to, risks related to unauthorized access, misuse, customer data theft, computer viruses, system disruptions, ransomware, malicious software and other intrusions. We utilize a multilayered, proactive approach to identify, evaluate, mitigate and prevent potential cyber and information security threats through our cybersecurity risk management program 24/7.

companyName: NETSOL TECHNOLOGIES INC

ticker: NTWK


text: Our cybersecurity risk management program is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our resilience and support the achievement of our strategic objectives. This integrated approach helps ensure that cyber risks are not viewed in isolation, but are assessed, prioritized and managed in alignment with the Company's operational, financial and strategic risks, assisting the Company in more effectively managing interdependencies among risks and enhancing risk mitigation strategies.


text: devote resources to protecting the security of our computer systems, software, networks and other technology assets. Our efforts are designed to adapt to the evolution of information security risks and appropriate best practices and include physical, administrative and technical safeguards. Our cybersecurity risk management program is designed to help coordinate the Company's identification of response to and recovery from cybersecurity incidents across all consolidated entities. This includes rapid identification, assessment, investigation and remediation of incidents, as well as complying with applicable legal obligations, communicated promptly and effectively. internal audit team assesses regularly the effectiveness of our internal controls relating to cybersecurity and updates as necessary.


text: Our management team also engages, at times when needed, certain outside advisors and consultants to assist in the identification, oversight, evaluation and management of cybersecurity risks, as well as to advise on specific topics. As part of our overall risk mitigation strategy, the Company also maintains cyber insurance coverage; however, such insurance may not be sufficient in type or amount to cover us against claims related to security breaches, cyberattacks and other related breaches.


text: have various processes and procedures in place to evaluate cybersecurity threats associated with third parties. We have not identified any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, performance, results of our operations, or financial condition.


text: Company's cybersecurity risk management program is supervised by our Senior Manager of Information Security (SMIS), who reports directly to the Company's Chief Operating Officer ("COO") in Pakistan. The SMIS and his team are responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture and processes. Our current SMIS received his bachelor's in computer sciences and has over 20 years of cybersecurity experience, including relevant prior senior leadership experience at our Company. Furthermore, he has also achieved globally recognized information security certifications, including CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), CompTIA Security+, ISO 27001 Lead Auditor, CEH (Certified Ethical Hacker), CHFI (Computer Hacking Forensic Investigator), among others.


text: Board of Directors receives regular reports from the SMIS and Cybersecurity Committee on, among other things, the Company's cyber risks and threats, the status of projects to strengths of the Company's information security systems, assessments of the Company's security program, insurance, and the emerging threat landscape. In accordance with our cyber incident response plan, the Cybersecurity committee s promptly informed by SMIS's team of cybersecurity incidents that could adversely affect the Company or its information systems and is also regularly updated about incidents with less impact potential. The Board of Directors and Audit committee are informed of any incidents that could adversely affect the Company by the Cybersecurity committee and SMIS's team.


text: an effort to detect and defend against cyber threats, the Company annually, and, periodically as needed, provides its employees with various cybersecurity and data protection training programs. These programs cover timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educate employees on the importance of reporting all incidents promptly to the Company's centrally managed cyber defense and security operations.


text: Management Strategy are a clinical-stage pharmaceutical company developing treatments for cannabis-induced toxicity, such as acute cannabis-induced toxicity in children, acute cannabinoid intoxication ("ACI") in adults, and the broader landscape of acute cannabis-induced conditions.

companyName: Anebulo Pharmaceuticals, Inc.

ticker: ANEB


text: We and our third-party service providers, such as contract research organizations ("CROs"), collect, process, transmit, and store sensitive data on our systems, including intellectual property, proprietary or confidential business information, and a variety rely on third parties, including cloud vendors, for various business functions. We select key third-party service providers based on several factors, including the type of data processed and the nature of services offered, and we oversee such key third-party service providers by conducting vendor diligence upon onboarding and ongoing monitoring, including a review of SOC-1 reports on an annual basis. Anebulo's management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include response to and an assessment of internal and external threats to the security, confidentiality, integrity and availability of our data and information systems, along with other material risks to our operations. In addition, we have implemented procedures over certain areas such as access on/offboarding and account management to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities.


text: of the date of this Annual Report, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition. For more information, see "Risk factors - If our internal information technology systems or sensitive information, or those of our third-party CROs or other contractors or consultants, are or were compromised, we could experience adverse consequences from such compromise, including but not limited to, a material disruption of the development of our product candidates, regulatory investigations or actions, litigation, fines and penalties, reputational harm, loss of revenue or profits, and other adverse consequences."


text: board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer, is actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM").

companyName: Propanc Biopharma, Inc.

ticker: PPCB


text: Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.


text: Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-virus and anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: have not engaged third-party service providers to conduct evaluations of our security controls, independent audits or consulting on best practices to address new challenges.


text: we have not experienced any cybersecurity threats in the past in the normal course of business, in the future, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: cybersecurity risk management program is intended to protect the confidentiality, integrity, and availability of our critical IT systems, information and IP. Cybersecurity risks are among the risks evaluated and considered by, our broader enterprise risk management program, which is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our resilience and support the achievement of our strategic objectives.

companyName: Glimpse Group, Inc.

ticker: GGRP


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment. team principally responsible for managing (i) our cybersecurity risk assessment processes, (ii) our security controls, and (iii) our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls. awareness training of our employees, incident response personnel, and senior management. incident response plan that includes procedures for responding to cybersecurity incidents. risk management process for service providers, suppliers, and vendors.


text: also have a cybersecurity incident response plan for the CIRT to assess and manage cybersecurity incidents, which includes escalation procedures based on the nature and severity of the incident including, where appropriate, escalation to our board of directors.


text: part of our overall risk mitigation strategy, we maintain insurance coverage that is intended to address certain aspects of cybersecurity risks; however, such insurance may not be sufficient in type or amount to cover us against claims related to cybersecurity breaches, of the date of this Report, we do no t believe that any risks from cybersecurity threats, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. Despite our security measures, however, there can be no assurance that we, or third parties with which we interact, will not experience a cybersecurity incident in the future that will materially affect us.


text: board of directors has primary responsibility for oversight of our cybersecurity and other information technology risks, including our plans to mitigate cybersecurity risks and to respond to data breaches.


text: board of directors receives reports from our Director of Information Technology on cybersecurity matters on as needed basis. These reports can include a range of topics, including our cybersecurity risk profile, the current cybersecurity and emerging threat landscape, the status of ongoing cybersecurity initiatives, incident reports, and the results of internal and external assessments of our information systems. The Audit Committee of our board of directors (the "Audit Committee") also annually reviews the adequacy and effectiveness of our information and technology security policies and the internal controls regarding information and technology security and cybersecurity, and periodically receives updates. The Chair of the Audit Committee reports to the full board of directors on these discussions as appropriate.


text: the management level, our Director of Information Technology who is experienced in cybersecurity matters, leads our enterprise-wide cybersecurity program, and is responsible for assessing and managing our materials risks from cybersecurity threats. In performing his role, our Director of Information Technology is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through the management of, and participation in, the cybersecurity risk management program and other processes described above, including the maintenance and execution of our cyber incident response plan. Our Director of Information Technology reports to our Chief Financial Officer/Chief Operating Officer and to our Chief Executive Officer.


text: management and strategy engage and implement risk management strategies to identify, assess, and manage material risks arising from cybersecurity threats and alerts. Our method involves a systematic evaluation of all potential threats, vulnerabilities, and their possible impacts on the Company's operations, data, and system integrity. Our cybersecurity risk management strategy includes: Identify cybersecurity risks to our environment; teams and third-party providers to investigate, contain, and resolve identified threats; cybersecurity awareness training to our staff; and and periodic testing of a cybersecurity incident response plan.

companyName: PORTSMOUTH SQUARE INC

ticker: PRSI


text: also engage external cybersecurity consultants and use industry-standard tools to help monitor our networks, review vulnerability scans, and conduct penetration testing on a periodic basis. Our risk management practices and integrated into our overall enterprise risk management framework, as discussed in Item 1A – Risk Factors.