text: We face risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows or reputation. We acknowledge that the risk of cyber incident is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. T o date, we have not had a cybersecurity incident. We proactively seek to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery;


text: however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. In response to such risks, we have implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. See Item 1A. "Risk Factors" for more information on cybersecurity risks.

companyName: RenX Enterprises Corp.

ticker: RENX

secItem: Item 1C


text: the implementation of a comprehensive cybersecurity policy that encompasses but is not limited to social media, acceptable use (devices, wireless, remote access, internet use), information governance, monitoring, authentication, encryption, vulnerability management, third-party management, and recovery; required annual cybersecurity training for all employees with additional supplemental cybersecurity training required based on role; random employee phish testing and follow-up; procedural and automated cyber controls in conjunction with robust detection, mitigation, and recovery capabilities; the formation of a multidisciplinary cybersecurity incident response team; the integration of multiple threat intelligence sources into our cybersecurity tools and processes; the retention of external cybersecurity threat response resources;

companyName: Healthcare Triangle, Inc.

ticker: HCTI


text: the formation of a multidisciplinary cybersecurity incident response team; and multiple cyber event simulation and tabletop exercises per year to hone the cybersecurity incident response team preparedness.


text: The HCTI board of directors provides enterprise-level oversight of risks associated with cybersecurity threats through the Audit Committee, which assists the Board in fulfilling its oversight responsibilities regarding the Company's policies and processes with respect to risk assessment and risk management, including any significant non-financial risk exposures; reviewing and discussing the Company's information security policies and internal controls regarding information security; and reviewing the Company's annual disclosures concerning the role of the Board in the risk oversight of the Company. The Audit Committee performs an annual review of the Company's cybersecurity program and receives quarterly updates on key cybersecurity risks, the cybersecurity risk management plan, and cyber incident event trends.


text: HCTI faces a number of cybersecurity risks in connection with its business. Although such risks have not materially affected us, including our business strategy, results of operations, and financial conditions, to date, we have, from time to time, experienced threats to and breaches of our data systems, including malware, phishing and computer virus attacks. See "Item 1A. Risk Factors" for additional information regarding our organization's cybersecurity risks, which should be read together with this "Item 1C. Cybersecurity".


text: These measures are to be seamlessly integrated into our broader operational risk management framework aimed at minimizing exposure to unnecessary risks across our operations.

companyName: INSPIRE VETERINARY PARTNERS, INC.

ticker: IVPR


text: For cybersecurity, we collaborate with expert consultants and third-party service providers to implement industry-standard strategies aimed at identifying and mitigating potential threats or vulnerabilities within our systems. Additionally, the policy strategy will have a comprehensive cyber crisis response plan to manage high severity security incidents, ensuring efficient coordination across the organization.


text: Our board of directors has the ultimate oversight responsibility for the risk management process and regularly reviews issues that present particular risk to us, including those involving cybersecurity. Our board is responsible for ensuring that management has processes in place designed to identify and assess cybersecurity risks to which we are exposed and implement processes and programs designed to manage cybersecurity risks and mitigate and remediate cybersecurity threats and incidents.

companyName: OS Therapies Inc

ticker: OSTX


text: Our management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures and maintaining cybersecurity programs.


text: In managing cybersecurity risks, we adhere to a structured framework that outlines the roles and responsibilities of management positions and committees.


text: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and trade secrets, data we may collect about trial participants in connection with clinical trials, sensitive third-party data, business plans, transactions, and financial information ("Information Systems and Data"). Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, the cybersecurity program works with management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.


text: The cybersecurity program within our company helps identify, assess and manage our cybersecurity threats and risks. Our cybersecurity program identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example manual tools, internal or external audits, automated tools, subscribing to and analyzing reports and services that identify cybersecurity threats and threat actors, conducting vulnerability assessments to identify vulnerabilities, conducting scans of the threat environment, and evaluating threats reported to us. Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data.


text: We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example cybersecurity software providers, managed cybersecurity service providers, and penetration testing firms. We also use third-party service providers to perform a variety of functions throughout our business, such as application providers and hosting companies. We manage cybersecurity risks associated with our use of these providers by reviewing their security assessments and applicable reports.


text: We are not aware of any risks from cybersecurity threats, including because of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.


text: We face risks from cybersecurity threats that, if realized are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For a description of the risks from cybersecurity threats that may materially affect us and how we may do so, see our risk factors under "Item 1A. Risk Factors ".


text: We evaluate the risks associated with technology and cybersecurity threats and monitor our information systems for potential weaknesses. We review and test our information technology system on an as-needed basis and also utilize internal team personnel to evaluate and assess the efficacy of our information technology system and enhance our controls and procedures. The results of these assessments are reported to our [Audit Committee] and, from time to time, our Board of Directors.

companyName: Thunder Power Holdings, Inc.

ticker: AIEV


text: We depend on software applications, information technology systems, computing infrastructure and cloud service providers to operate our business. Certain of these systems are managed, hosted, provided or used by third parties, to assist in conducting our business and which have their own cyber security measures in place. We implement generally applicable industry standards and best practices processes for the assessment, identification, and management of material risks from cybersecurity threats to our information technology systems.

companyName: Synergy CHC Corp.

ticker: SNYR


text: We have an Information Technology "IT" professional who oversees our information security policies and procedures. Our IT department maintains a cyber incident reporting and response process and provides management notifications based on the seriousness of any incident. Our information security policies and procedures are required to be reviewed on a regular basis.


text: We have not experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations; however, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect our Company and how they may do so, please see "Risk Factors" included in Part I, Item 1A of this Annual Report on Form 10-K.


text: Cybersecurity Governance. Our Audit Committee has primary responsibility for overseeing our risk-management program relating to cybersecurity, although our Board of Directors participates in periodic reviews and discussion dedicated to cyber risks, threats, and protections.


text: We believe cybersecurity is critical to advancing our technological developments. We face a multitude of cybersecurity threats that range from attacks common to most industries, such as ransomware and denial-of service. Our customers, suppliers, subcontractors, and business partners face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our business strategy, performance, and results of operations. These cybersecurity threats and related risks make it imperative that we expend resources on cybersecurity.

companyName: Aditxt, Inc.

ticker: ADTX


text: In the event of an incident, we intend to follow our cybersecurity incident response plan, which outlines the steps to be followed from incident detection to mitigation, and notification. We contract with external firms that have extensive information technology and program management experience. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risks. We must comply with extensive regulations, including requirements imposed by the Federal Drug Administration related to adequately safeguarding patient information and reporting cybersecurity incidents to the SEC. We believe we are positioned to meet the requirements of the SEC. Assessing, identifying, and managing cybersecurity related risks are factored into our overall business approach. We rely heavily on our supply chain to deliver our products and services, and a cybersecurity incident at a clinical site, subcontractor, or business partner could materially adversely impact us. We require that our subcontractors report cybersecurity incidents to us so that we can assess the direct impact of the incident.


text: The Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full board of directors for consideration. Responsible personnel regularly discusses cyber risks and trends and, should they arise, any material incidents with the Audit Committee.


text: In the event of an incident, we intend to follow our cybersecurity incident response plan, which outlines the steps to be followed from incident detection to mitigation, and notification. We contract with external firms that have extensive information technology and program management experience. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risks. We must comply with extensive regulations, including requirements imposed by the Federal Drug Administration related to adequately safeguarding patient information and reporting cybersecurity incidents to the SEC. We believe we are positioned to meet the requirements of the SEC. In addition to following SEC guidance and implementing pre-existing third party frameworks, we have developed our own practices and frameworks, which we believe enhance our ability to identify and manage cybersecurity risks. Assessing, identifying, and managing cybersecurity related risks are factored into our overall business approach. We rely heavily on our supply chain to deliver our products and services, and a cybersecurity incident at a clinical site, subcontractor, or business partner could materially adversely impact us. We require that our subcontractors report cybersecurity incidents to us so that we can assess the direct impact of the incident.


text: The Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full board of directors for consideration. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with the Audit Committee.


text: Our cybersecurity risk management program incorporates multiple components, including, but not limited to, ongoing monitoring of critical risks from cybersecurity threats using automated tools. Additionally, we have implemented an employee education and training program, which we provide on an annual basis, that is designed to raise awareness of cybersecurity threats. To support our cybersecurity risk management program, we leverage managed service providers and other third-party information technology and cybersecurity providers and consultants, including to perform regular system scans and threat intelligence analysis. Additionally, we require certain third-party providers and consultants to adhere to contractual requirements relating to privacy and cybersecurity standards. We do not have a board of directors committee or subcommittee responsible for the oversight of risks from cybersecurity threats.

companyName: HealthLynked Corp

ticker: HLYK


text: The Company understands the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Consultants specializing in cybersecurity risk were engaged to assess, identify and manage risks from cybersecurity threats separately from the Company's other risk assessment processes. The cybersecurity risks assessed include operational risks, fraud, disaster recovery, and violation of data privacy or security laws. The assessment includes cybersecurity threats associated with the use of third-party service providers.

companyName: FORUM MARKETS Inc

ticker: FRMM


text: As a result of the cybersecurity risk assessment performed, the Company has implemented certain enhancements to cybersecurity processes and controls. This includes formal monitoring of capital equipment, verifying data encryption and security updates are in place, and enhancing the security of data sharing and transmission. Additional recommendations were made by the consultants, but due to budget constraints they are being considered for future enhancement.


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading "Failure of our information technology systems, including cybersecurity attacks or other data security incidents, could significantly disrupt the operation of our business", included as part of our risk factor disclosures at Item 1A of this Annual


text: Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management. Our CFO is responsible for the oversight of risks from cybersecurity threats, having prior experience managing business risks including those related to cybersecurity. The Board receives information and updates periodically with respect to the effectiveness of our cybersecurity and information security framework, data privacy and risk management. The Board will also be provided updates on any material incidents relating to information systems security and cybersecurity incidents. Although management and the Board will be made aware of cybersecurity incidents that could materially impact the Company, formal monitoring of all cybersecurity incidents is planned for future implementation.


text: As of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.


text: President and Chief Executive Officer is responsible for overseeing our cybersecurity processes and works directly with third party service providers, as applicable, to identify, assess and manage the Company's cybersecurity threats and risks. In doing so, he seeks to identify and assess risks from cybersecurity threats in a manner appropriate for a company of comparable size and resources.

companyName: Bluejay Diagnostics, Inc.

ticker: BJDX


text: assessment and management of material risks from cybersecurity threats are integrated into the Company's overall risk management processes. For example, our IT Consulting Firm works with management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.


text: Board of Directors addresses the Company's cybersecurity risk management as part of its general oversight function. The Board is responsible for overseeing Company's cybersecurity risk management processes. Our cybersecurity risk assessment and management processes are implemented and maintained by our President and Chief Executive Officer.


text: cybersecurity incident response and vulnerability management processes are designed to escalate certain cybersecurity incidents to members of management and/or the Board of Directors depending on the circumstances. The Board receives periodic reports and updates from our senior management concerning cybersecurity threats and risks, and the processes that the Company has implemented to address them. are not aware of any instances of material cybersecurity incidents that impacted the Company.


text: Risk Management and Strategy We have an information security program designed to identify, protect, detect and respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our information systems from cybersecurity threats, we utilize various security tools that help prevent, identify, escalate, investigate, resolve, and recover from identified vulnerabilities and security incidents in a reasonably timely manner. These include, but are not limited to, internal reporting and tools for monitoring and detecting cybersecurity threats.

companyName: Reborn Coffee, Inc.

ticker: REBN


text: Cybersecurity Risk Management We, like other companies in our industry, face several cybersecurity risks in connection with our business. Our business strategy, results of operations, and financial condition have not, to date, been affected by risks from cybersecurity threats. During the reporting period, we have not experienced any material cyber incidents, nor have we experienced a series of immaterial incidents, which would require disclosure.

companyName: Avalon GloboCare Corp.

ticker: ALBT


text: In the ordinary course of our business, we use, store and process a bare minimum of data. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management program, which is comprised of data segregation, penetration testing, and training. The cyber risk management program falls under the responsibility of a third party IT consultant, who has cross-functional expertise in IT management, cybersecurity, and engineering with more than 30 years of experience (the "IT Consultant"), who reports directly to our Chief Financial Officer. Under the guidance of the IT Consultant, we have minimized our data footprint to keep our cyber risk low.


text: We have implemented a cybersecurity risk management program that is designed to limit and mitigate risks from cybersecurity threats. Our cybersecurity risk management program incorporates several components, including employee training, periodic penetration tests, and multifactor authentications.


text: Under the ultimate direction of our CFO, with oversight from the Board, we maintain a security governance structure to evaluate and address cyber risk.


text: Our Board is responsible for the oversight of cybersecurity risk management. The Board delegates oversight of the cybersecurity risk management program to the Audit Committee. On a quarterly and as-needed basis, the CFO reports to the Audit Committee on our cybersecurity risk management program, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards.


text: The CFO also provides updates to the Audit Committee of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.


text: Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk.

companyName: byNordic Acquisition Corp

ticker: BYNO


text: Company operates in the biotechnology sector and is subject to various cybersecurity risks that could adversely affect the Company's business, financial condition or results of operations, including intellectual property theft, fraud, extortion, harm to employees, collaborators or vendors, violation of privacy laws and other litigations, legal and reputational risk.

companyName: Actinium Pharmaceuticals, Inc.

ticker: ATNM


text: Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard its information systems and protect the confidentiality, integrity, and availability of its data. With that objective, the Company undertook a focused cybersecurity assessment conducted by an independent cybersecurity advisory firm to better understand the current cybersecurity threats and risks necessary to establish the foundation of a cybersecurity risk assessment framework appropriate for its current business operations and needs. The Company has also engaged well-known and established technology suppliers to support its key technology processes and operating technical security management activities including threat, vulnerability, and network security management.


text: Company has established an Incident Response Policy and recovery plans to address its response to a cybersecurity incident, and such plans are tested and evaluated on a regular basis. This includes continuous security operation centers monitoring of the Company's systems and accounts.


text: Company proactively mitigates its financial exposure to cybersecurity incidents by maintaining a cyber liability insurance policy. However, the Company's cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all.


text: In addition, the Company's cyber liability insurance policy may not cover all claims made against the Company. Defending a suit, regardless of its merit, could be costly and divert management's attention from the Company's business and operations. date, Actinium has not experienced any material cybersecurity incident that affected the Company's operations or financial condition.


text: rely on a multidisciplinary team including third-party service providers to assess how identified cybersecurity threats could impact our business. The Company's cybersecurity function is managed by the Company's Chief Financial Officer, who assumes the overall responsibility and accountability of the function and with select members of the Company's management is collectively responsible for the day–to–day assessment and management of cybersecurity risks, their prevention, mitigation, detection, and remediation.


text: Our Chief Financial Officer and other members of management have undergone various briefings from our cybersecurity advisory firm to prepare them to effectively assess and manage material risks from cybersecurity threats. Additionally, members of the third-party service providers have cybersecurity experience and/or certifications.


text: Company's Board is involved in overseeing our risk management processes and policies that may be implemented from time to time.


text: The Audit Committee will coordinate these activities through regular interactions with the Company's management including but not limited to: presentations regarding recent developments, potential risks associated with third parties, emerging trends, any relevant findings or any incident that rises to the level of established thresholds.


text: risk factors discussed in this document should be considered together with information included elsewhere in the Annual Report on Form 10–K and should not be considered as the only risks to which the Company is exposed.


text: of the date of this Annual Report on Form 10-K, we have not experienced any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For more information regarding the risks the Company faces from cybersecurity threats, see " Item 1A. Risk Factors––Risks Related to Our Business and Operations––We are increasingly dependent on information technology, and our systems and infrastructure face certain risks, including cybersecurity and data leakage risks."

companyName: LQR House Inc.

ticker: YHC


text: The mission of our information security organization is to design, implement, and maintain an information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. The information security organization is comprised of internal and external security and technology professionals. We continue to make investments in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.

companyName: American Bitcoin Corp.

ticker: ABTC


text: Cybersecurity risk management is one component of our information security program that guides continuous improvement to, and evaluates the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: Our approach to controls and risk management is based on guidance from the National Institute of Standards and Technology ("NIST") and the Crypto Currency Security Standard ("CCSS"). This does not mean that we meet any particular technical standards, specifications, or requirements, but rather that we use the NIST and CCSS as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Identifying cybersecurity risks that could impact our facilities, third-party vendors/partners, operations, critical systems, information, and broader enterprise IT environment. Risks are informed by threat intelligence, current and historical adversarial activity, and industry specify threats;


text: Performing a cybersecurity risk assessment to evaluate our readiness if the risks were to materialize; and Ensuring risk is addressed and tracking any necessary remediation through an action plan.


text: While we face a number of ongoing cybersecurity risks in connection with our business, such risks have not materially affected us to date, including our business strategy, results of operations, or financial condition.


text: Our Board considers cybersecurity risk as part of its risk oversight function and has delegated the oversight of cybersecurity and other information technology risks to the Board's Audit Committee as well as hiring a third party vendor that specializes in cybersecurity to oversee and provide an assessment on the Company's IT controls. The Audit Committee meets at least quarterly to discuss matters involving cybersecurity risks.


text: The Audit Committee ultimately provides information to our board members regarding its activities, including those related to cybersecurity risks. The Audit Committee also receives a briefing and continuing education from a member of the third party vendor relating to our cyber risk management program at least annually. The third party vendor is responsible for notifying the Audit Committee of material cybersecurity incidents.


text: In 2023, a threat actor representing to be the Sphere 3D Corp. ("Sphere 3D") CFO inserted themselves into an email exchange between the Sphere 3D CFO and the Company's former CEO, which also included Sphere 3D's CEO, regarding the transfer of Sphere 3D's BTC from the Company's wallet to Sphere 3D's wallet. The threat actor requested that the BTC be transferred to an alternate wallet. As a result, 26 BTC, with a value of approximately $560,000 at the time, was transferred to a wallet controlled by the threat actor. Via counsel, Gryphon engaged with US Federal law enforcement to recover the BTC. Despite these attempts by law enforcement to recover the BTC, recovery was not possible.


text: Gryphon subsequently wired the commensurate amount in USD to Sphere 3D to make them whole for the stolen BTC. Gryphon also engaged a nationally recognized third-party firm to perform a forensic analysis. The analysis revealed that the threat actor did not enter the email exchange via Gryphon's IT systems. The Company has also subsequently modified its control systems to protect against any future attempted incursions. During the quarter ended June 30, 2023, the Company made a payment to Sphere 3D for $560,000, which was classified as a general and administrative expense on Gryphon's consolidated statement of operations.


text: Risk Management and Strategy The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We maintain cybersecurity insurance coverage that provides protection against potential losses arising from certain cybersecurity incidents. In addition, we have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: Strive, Inc.

ticker: ASST


text: We have integrated cybersecurity risk management into our risk management processes. This integration is intended to ensure that cybersecurity considerations are part of our decision-making processes. We continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. We have adopted the standard 2FA (two factor authentication)


text: Recognizing the complexity and evolving nature of cybersecurity threats, we use risk management systems developed and tested by external experts, including cybersecurity assessors, consultants, and auditors. These risk management systems enable us to leverage specialized knowledge and insights as part of our cybersecurity strategies and processes. These systems are assessed and maintained with the assistance of third-party service providers, including a Technology Consultant engaged by the Company.


text: Overseeing Third-Party Risk Because we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes regular assessments by our Chief Technology Officer. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: The Company's Chief Technology Officer, Chief Operating Officer, and Technology Consultant are primarily responsible for assessing, monitoring and managing our cybersecurity risks. Our Chief Technology Officer must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. The Chief Technology Officer provides briefings on cybersecurity threats and related risks to our Chief Executive Officer on a regular basis. Our Chief Technology Officer has nine years of experience in the field of information technology. The Chief Technology Officer oversees and tests our compliance with standards, remediates known risks, and leads our employee training program. The Company's Chief Technology Officer and Technology Consultant have extensive experience in cybersecurity and possess the necessary knowledge, skills, background, and experience.


text: Monitoring Cybersecurity Incidents The Company's Chief Technology Officer and Technology Consultant are continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. The Chief Technology Officer and Technical Consultant implement and oversee processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the Chief Technology Officer and Technical Consultant will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Risk Management and Strategy Identifying, assessing and managing material cybersecurity threats is important to our operations and business strategy. We have established policies and procedures that are designed to prioritize the safeguard of our information systems. These procedures help identify potential vulnerabilities and manage risks from unauthorized incidents within our information systems that may result in adverse effects on data residing within. We conduct periodic and ad-hoc assessments that are managed by third party information technology providers, to identify potential cybersecurity threats.

companyName: Capstone Holding Corp.

ticker: CAPS


text: Upon completion of these risk assessments, the third-party information technology providers help the company assess how to reconfigure or implement additional procedures to mitigate any potential cybersecurity threats.


text: Risks from Cybersecurity Threats We do not currently believe there are any cybersecurity threats or vulnerabilities that would have materially impaired our operations or financial conditions during the fiscal year ended December 31, 2024.


text: Cybersecurity Governance It is the responsibility of our board of directors to monitor and assess potential strategic risk exposure. Our board of directors administers its oversight function as a whole, as well as through the Audit Committee. Our executive management team informs the Audit Committee on cybersecurity risks periodically, with a minimum frequency of once per year.


text: Risk management and strategy We rely on our technology network infrastructure and information systems to operate our business, interact with vendors and customers, and collect and make payments, among other functions.

companyName: USA Rare Earth, Inc.

ticker: USAR


text: Our internally developed infrastructure and systems, as well as those systems and processes provided by third-party vendors, may be susceptible to damage or interruption from cybersecurity threats and incidents, which include any unauthorized access to our information systems that may result in adverse effects on the confidentiality, integrity or availability of such systems or related information.


text: Such attacks have become more sophisticated over time, especially as threat actors have become increasingly well-funded by or themselves include governmental actors with significant means. We expect that the sophistication of cyber-threats will continue to evolve as threat actors increase their use of AI and machine-learning technologies. The Company experiences cyber threats in the normal course of its business, and computer viruses, hackers, employee misconduct and other external hazards could expose our information systems to security breaches, cybersecurity incidents or other disruptions, any of which could materially and adversely affect our business. Refer to Item 1A. Risk Factors, for additional details on cybersecurity risks that could potentially materially affect the Company.


text: We manage our risks from cybersecurity threats through our overall enterprise risk management process, which is overseen by the Board. Our cybersecurity risks are considered individually as part of our enterprise risk management process alongside other risks, and priorities and discussed with our Board. The Company seeks to prioritize the management of cybersecurity risk and the protection of confidential information and systems. Under the supervision of the Chief Executive Officer (" CEO ") and VP of Business Operations and Strategy, we work to identify all computing assets including hardware, software, and network infrastructure in order to conduct a risk assessment. We consider threats that may originate from both internal and external sources and maintain technical security controls internally. We are putting in place plans for our employees to receive mandatory recurring cybersecurity training and phishing exercises.


text: The Company's VP of Business Operations and Strategy reports directly to the CEO and leads the Information Technology team (collectively, the " IT Security Team ").


text: The IT Security Team is responsible for the strategic oversight of cybersecurity risk management and strategy including the identification and assessment of cybersecurity threats and incidents. Periodically, the Company's VP of Business Operations and Strategy is also responsible, alongside the Chief Financial Officer (" CFO ") and senior management, to keep the Audit Committee of the Board of Directors informed and briefed with respect to cybersecurity risks and risks. Our VP of Business Operations and Strategy has extensive experience of over 20 years in various IT roles across a range of cyber technologies, processes and strategies and is supported by the IT Security Team and the wider IT team, to support the Company's cyber risk management processes, including the prevention, detection and mitigation of cybersecurity threats and incidents, and any required response to and remediation of such cybersecurity threats or incidents.


text: The Audit Committee is responsible for providing governance and oversight over the Company's operational cybersecurity program, risk management and incident response on behalf of the Board. On a periodic basis, management will report the results of any risk assessments, including the evaluation of any cybersecurity risks, and the actions that the Company has taken to mitigate these risks. This includes assessing the measures and controls in place to mitigate cybersecurity risks and providing oversight of the response of any significant cybersecurity threats and incidents.


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified through review by our internal information technology governance, risk and compliance policies. To defend, detect and respond to cybersecurity incidents, we, among other things: may conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes.

companyName: Innovative Payment Solutions, Inc.

ticker: IPSI


text: We are a special purpose acquisition company with no business operations. Since our Initial Public Offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there are any. In fiscal year 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: Ribbon Acquisition Corp.

ticker: RIBB


text: Company's Management, including the Company's CCO, manages the Company's cybersecurity program, under the supervision of the Company's Audit Committee. The CCO of the Company oversees the Company's risk management function generally and relies on the Investment Adviser to assist with assessing and managing material risks from cybersecurity threats. The Company's CCO has been responsible for this oversight function as CCO to the Company for over 7 years and has worked in the financial services industry for over 25 years, during which time the CCO has gained expertise in assessing and managing risks applicable to the Company.

companyName: PRINCETON CAPITAL CORP

ticker: PIAC


text: potential impact of risks from cybersecurity threats on the Company are assessed on an ongoing basis, and how such risks could materially affect the Company's business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, the Company has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Company believes have materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, operational results, and financial condition.


text: We acknowledge the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. While we are in the process of enhancing our cybersecurity practices, we are committed to continually improving and adapting to evolving threats to maintain a high standard of protection.

companyName: reAlpha Tech Corp.

ticker: AIRE


text: We have developed and implemented a cybersecurity program that seeks to ensure the confidentiality, integrity, and availability of our information assets, including its critical systems. We use information security management standards like ISO 27001 as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.


text: We are actively integrating cybersecurity risk management into our broader enterprise risk management framework. This integration is designed to promote a company-wide culture of cybersecurity awareness and risk management. Our risk management team, in collaboration with external consultants, is assessing and addressing cybersecurity risks in alignment with our operational and business needs. This ongoing integration ensures that cybersecurity considerations are increasingly embedded in our decision-making processes at every level.


text: Our cybersecurity framework draws upon the National Institute of Standards and Technology ("NIST") cybersecurity framework, which provides guidance for identifying, assessing, and managing cybersecurity risks. While we are in the early stages of fully implementing this framework, we are committed to following its principles as we strengthen our cybersecurity measures to protect both our digital and physical assets.


text: Recognizing the evolving nature of cybersecurity threats, we have been engaging with external experts, including cybersecurity assessors, consultants, and auditors, to assess and enhance our risk management systems. These third parties are assisting us with evaluating our cybersecurity posture, recommending improvements, and advising on the implementation of best practices. As we progress, we will continue leveraging these external insights to enhance our cybersecurity strategies and ensure alignment with industry standards.


text: We understand the potential risks associated with third-party service providers, and we are working on implementing stronger oversight processes. While we have initiated security assessments for our third-party providers, we are in the process of enhancing these efforts to include more frequent evaluations and ongoing monitoring. This will help mitigate the risk of security incidents originating from third parties.


text: To date, we have not encountered cybersecurity incidents that have materially impaired our operations or financial position. However, we are proactively preparing for the possibility of cybersecurity risks, ensuring that our systems are protected against potential threats in the future.


text: Our board of directors understands the critical nature of cybersecurity and is closely involved in overseeing our efforts to mitigate cybersecurity risks. We are in the process of formalizing governance structures and oversight mechanisms to ensure that these risks are managed effectively, with the aim of strengthening our operational integrity and enhancing stockholder confidence.


text: The Chief Executive Officer ("CEO"), Chief Operating Officer ("COO"), and Chief Financial Officer ("CFO") are actively involved in managing cybersecurity risks. They receive regular updates, which include an overview of the current cybersecurity landscape, the status of ongoing initiatives, and compliance with regulatory requirements. We are establishing structured processes for ongoing communication among the executive team to ensure they remain informed and involved in key cybersecurity decisions.


text: We are committed to monitoring cybersecurity risks and are in the process of implementing enhanced monitoring systems. With the assistance of cybersecurity consultants, we are refining our cybersecurity policies and controls, including regular audits and the deployment of advanced security measures such as Multi-Factor Authentication ("MFA") and stronger email filtering protocols. In addition, we are continuing to develop incident response plans, communication protocols, and disaster recovery plans to be prepared for any potential cybersecurity incidents.


text: We are providing cybersecurity training to our employees and plan to continue enhancing this program on an ongoing basis. Regular updates and internal campaigns will ensure that our employees are well-prepared to identify and respond to cybersecurity threats in an effective manner.


text: The COO regularly informs the CEO and CFO on cybersecurity risks and initiatives. Significant cybersecurity matters will be escalated to the audit committee for review, where management will provide detailed updates on risk assessments, incident response, and the effectiveness of our cybersecurity strategies. The audit committee will continue to evaluate the progress of our cybersecurity initiatives and offer guidance to help strengthen our efforts.


text: Cybersecurity Governance and Oversight Our board of directors oversees our cybersecurity risk management as part of its general oversight function. We maintain security controls that are continuously reviewed to protect against emerging cyber threats. At the Company level, we employ third party consultants to lead our efforts developing, implementing and maintaining these security controls and monitoring and minimizing the risks related to cybersecurity threats. These consultants regularly report to senior management, who is responsible for keeping our board of directors apprised of all material developments. Our Vice President of Engineering is primarily responsible for the cybersecurity controls and risk mitigation with respect to the products and services we offer our customers and those in development, including satisfying the rigorous requirements needed to achieve FDA clearance when applicable. Our Vice President of Engineering reports directly to our CEO and provides senior management with periodic updates regarding cybersecurity matters concerning our products and services.

companyName: Corvex, Inc.

ticker: MOVE


text: To manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we undertake the below listed activities: Implement third party cybersecurity testing (including penetration testing) of any new product feature developed prior to release; Maintain firewall and virus protection software; and Maintain a cybersecurity insurance policy.


text: Our cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to designated employees depending on the circumstances, including in some cases to our executive team. The board of directors receives periodic reports from management concerning our cybersecurity risk management program.


text: We have integrated cybersecurity risk management into our risk management processes. This integration is intended to ensure that cybersecurity considerations are part of our decision-making processes. We continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.

companyName: Signing Day Sports, Inc.

ticker: SGN


text: Engaging Third Parties on Risk Management Recognizing the complexity and evolving nature of cybersecurity threats, we plan to engage external experts, including consultants and auditors, in evaluating and testing our risk management systems. These services will enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third parties is expected to include annual audits, ongoing threat assessments, and regular consultations on security enhancements.


text: Risk management and strategy We are committed to continuously assessing cybersecurity risks, including the prevention, detection, and response to unauthorized actions within our information systems that may compromise the confidentiality, integrity, or availability of our data or systems. We are using Layer 7 firewall solutions which monitor web traffic and data leaks which may occur as well as a centralized automatic antivirus/antimalware/patch system in order to make sure that all servers and clients hold the latest patches in order to avoid security breaches. We have developed our own internal cloud system to avoid dependence on external parties and its email server is hosted on this cloud system; consequently, we do not rely on third party solutions that may have a negative impact on security and reliability of data. Our data is stored daily on high quality magnetic tapes to ensure recovery in case of a serious malfunction. On a monthly basis, all the tapes are being transferred to a fireproof safe location and are replaced with new tapes.

companyName: Elvictor Group, Inc.

ticker: ELVG


text: As we grow, we plan to refine our cybersecurity strategy in line with global best practices and standards. Importantly, our Board receives regular updates from our Chief Operating & Technology Officer, Christodoulos Tzoutzakis, of potential cybersecurity risks and monitors these risks closely. All potential incidents, regardless of their materiality, are required to be reported immediately to the Board. To date, our proactive risk management has allowed us to navigate cybersecurity challenges without material impairment to our operations or financial condition.


text: Engaging Third Parties on Risk Management Recognizing the complexity and evolving nature of cybersecurity threats, we leverage the expertise of a managed service provider, and when warranted will engage with independent third parties in evaluating and testing our risk management systems. These service providers enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies meet generally accepted industry best practices. Our Chief Information Officer also performs ongoing review of current practices to further ensure cybersecurity.

companyName: Stran & Company, Inc.

ticker: SWAG


text: Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations. Our risk management, legal, and compliance personnel oversee and identify, including through a third-party cybersecurity service provider, material risks from cybersecurity threats associated with our use of such entities.

companyName: RemSleep Holdings Inc.

ticker: RMSL


text: At this time, the Company does not have formal processes in place for assessing, identifying, and managing material risks from cybersecurity threats. Our approach to cybersecurity is currently informal and primarily reactive, involving basic security measures such as: Basic Security Software: We use standard antivirus and anti-malware software for protection against common threats. Password Policies: Simple password policies are in place to protect access to our systems.

companyName: T3 Defense Inc.

ticker: DFNS


text: However, we recognize the importance of cybersecurity and are in the process of developing more robust strategies. We plan to: Develop a Cybersecurity Framework: Establish a formal risk assessment process to identify vulnerabilities. Engage Cybersecurity Expertise: Consider hiring or consulting with cybersecurity professionals to guide our strategy. Implement Training: Begin employee training on cybersecurity awareness to prevent common threats like phishing.


text: We acknowledge that the absence of comprehensive cybersecurity processes could potentially expose the company to risks, which might materially affect our operations, financial condition, or strategic decisions in the future. We are committed to improving our cybersecurity posture as our resources allow.


text: Board Oversight: Currently, our sole director does not have a formal structure for overseeing cybersecurity risks. We plan to review this oversight in the near future to ensure appropriate governance is established.


text: Management's Role: Day-to-day management of cybersecurity is handled by our IT staff, who do not have specialized training in cybersecurity. We are considering enhancing this role or outsourcing to professionals with specific cybersecurity expertise.


text: Material Effect from Cybersecurity Threats To date, no known cybersecurity incidents have materially affected our business strategy, results of operations, or financial condition. However, due to our limited cybersecurity measures, we acknowledge that our company could be at higher risk of material impact from cybersecurity threats. We are actively working to mitigate these risks.


text: Our cybersecurity program is primarily overseen by our Head-Server and Network Administrator, who works closely with our information technology team and our senior management to develop and advance our cybersecurity strategy, as well as to respond to cybersecurity incidents. Our Head-Server and Network Administrator reports to our Chief Operating Officer on cybersecurity matters and collaborates with stakeholders to assess risks and implement strategies.

companyName: SS Innovations International, Inc.

ticker: SSII


text: We have engaged a specialized consulting firm from India to enhance and develop the cybersecurity framework for our products with the aim of protecting sensitive patient data and proprietary device information from cyber threats and ensuring compliance with the latest cybersecurity standards including, HIPPA, FDA regulations, IEC 62443, and NIST guidelines for medical devices.


text: We have not experienced a cybersecurity incident that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. We continue to monitor potential cybersecurity threats and incorporate findings into our risk management strategies.


text: The Company has a cybersecurity strategy designed to protect our information systems and data from an evolving cyber-threat landscape. Our cybersecurity program, administered by our Chief Financial Officer and overseen by the Audit Committee, has the support of executive leadership and the Board of Directors, and the Company continues to invest in cybersecurity to protect the Company's systems.

companyName: ADAPTIN BIO, INC.


text: As of the date of this Report, we have not encountered any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: We regularly review our cybersecurity defenses to assess our vulnerability to cybersecurity attacks from viruses, malware and more sophisticated and targeted cyber-related attacks such as hackers looking to demand ransomware or access our systems to obtain information and data, as well as our vulnerability to cybersecurity failures resulting from human error and technological errors. We rely upon internal information technology ("IT") personnel working in conjunction with specialized outside security consultants on a day-to-day basis to conduct reviews and upgrade our systems when determined to be necessary.

companyName: AIR INDUSTRIES GROUP

ticker: AIRI


text: Our overall strategy in combatting cybersecurity risks includes a variety of measures, including: use of antivirus software, virtual private networks, email security, as well as other software and system-wide measures such as multi-factor of updates and patches as they become available from our software suppliers and consultants and maintaining the current versions of major software to reduce the exposure to vulnerabilities;


text: deployment of third-party cybersecurity experts to perform penetration testing on our internal and external networks and systems in an of the cybersecurity risks posed by interacting with current and potential third-party service providers, suppliers and customers.


text: We are not aware of any vulnerability inherent in our systems or malware embedded in our systems that are likely to would materially affect, or are reasonably likely to materially affect, our operations. The Company is in the process of implementing additional training and is in the process of engaging third parties to perform various testing as indicated above.


text: Day-to day management of cybersecurity threats is conducted by our IT department in conjunction with outside service providers, which is charged with identifying and reporting threats to senior management. On a quarterly basis, cybersecurity is reviewed by our Chief Executive Officer and Chief Financial Officer, who are expected to report to the Audit Committee.


text: The Audit Committee of our Board of Directors, which is composed of all non-employee directors, is responsible for oversight of our efforts to eliminate cybersecurity risks. The Audit Committee meets regularly with our Chief Executive Officer and Chief Financial Officer and, in turn, reports its finding to the Board of Directors.


text: are in the process of developing a cybersecurity risk management program, consisting of cybersecurity policies, procedures, compliance and awareness programs to mitigate risk and to ensure compliance with security, availability and confidentiality trust principles. Following the completion of the development of our cybersecurity risk management program, the cybersecurity process will be integrated into our overall risk management system and process, and, initially, will be solely internally managed. Management is responsible for identifying risks that threaten achievement of the control activities stated in the management's description of the services organizations systems.

companyName: Charging Robotics Inc.

ticker: CHEV


text: Management has started to implement a process for identifying relevant risks that could affect the organization's ability to provide secure and reliable service to its users. The risk assessment will occur annually, or as business needs change, and covers identification of risks that could act against the company's objectives as well as specific risks related to a compromise to the security of data.


text: Most of the information generated and collected by us is stored and maintained by third-party vendors and service providers. We believe that each of these providers has its own cybersecurity protocols to which our management believes to be adequate for protecting our files in their possession. For more information about these risks, please see "Item 1.A – Risk Factors – Risks Related to Our Business and Industry – Significant disruptions of our information technology systems or breaches of our data security could adversely affect our business." in this annual report.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function and oversees cybersecurity risk strategy and governance and other information technology risks. Our Chief Executive Officer and Chief Financial Officer are responsible for assessing and managing cybersecurity risk, and providing briefings regarding the assessment and management of such risk to the Board of Directors. Although our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with a third party information technology expert referred to below, enables them to effectively assess and manage material risks from cybersecurity threats.


text: The Company retained an information technology expert third party company to assist in managing relevant risks. In particular, the Company outsources its information technology function and monitoring to a third party provider whereby it benefits from a professionally managed network monitoring, management, maintenance, detection and response system and a 24/7 security operations center with both onsite and remote support services. Any cybersecurity incident would be reported to the Company promptly by our third party consultant and material and potentially material incidents would be assessed by management and the Board of Directors for remediation and future prevention and detection.


text: As of the date of this report, we are not aware of any material risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.


text: We plan to establish an appropriate confidentiality framework and adhere to relevant document management regulations. The Company and its employees are also required to sign confidentiality agreements for purposes including ensuring cybersecurity. As of the date of this report, we are not aware of any material risks from cybersecurity threats, that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition.

companyName: ABVC BIOPHARMA, INC.

ticker: ABVC


text: We have implemented risk management procedures, which include cybersecurity risk management, that are designed to define our corporate risk tolerance and align assumed risks to that tolerance through risk identification, prioritization, assessment, mitigation and planned responses if risk is realized. These elements are applied to cybersecurity as well as other origins of risk.

companyName: CERO THERAPEUTICS HOLDINGS, INC.

ticker: CERO


text: of assets at risk from cybersecurity threats of potential sources of cybersecurity threats of the status of protections in place to prevent or mitigate cybersecurity threats that landscape, how to manage cybersecurity risks


text: Our risk assessment and mitigation procedures are centered on three key components: identification of risks, which involved input from different groups across our company;


text: of the likelihood of the risks manifesting, the severity of the potential consequences and prioritization of different risk items based on, among other things, importance to the business and cost/benefit analysis to fully address; and execution - establishment of a program to address.


text: Before purchasing third-party technology or other solutions that involve exposure to our assets and electronic information, our Information Technology Team performs a review on vendors (evaluating suitability, risk, and impact) before they are approved to work with us.


text: We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition; however, like other companies in our industry, we and our third-party vendors have, from time to time, experienced threats and security incidents relating to our and our third-party vendors' information systems.


text: Our board of directors has delegated oversight of our enterprise risk management processes, including those relating to cybersecurity risks, to the Audit Committee.


text: Our Chief Financial Officer meets on a periodic basis with the Audit Committee to discuss management's ongoing cybersecurity risk management procedures. Such discussions address, among other things, the sources and nature of cyber-security risks we face, how management assesses likelihood and severity of the impact of such risks, and progress on any active projects as well any current developments in the cybersecurity landscape. At the Audit Committee's discretion, material findings may be escalated to the entire board of directors.


text: The chair of the Audit Committee is a Chief Financial Officer with existing cyber-security and risk management responsibilities at a similar public company.


text: Risk Management and Strategy The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. Therefore, we have established a cybersecurity and risk management framework, which includes regular cybersecurity risk assessments to identify and evaluate potential cyber-attack threats and information security weakness that may affect our business. The data we collect during our operations primarily includes publicly available operational information from port websites. Additionally, we utilize a third-party software vendor to handle any personally identifiable information directly uploaded by truck drivers via a secure portal. We implement two-factor authentication for accessing emails and software, and enforce user role-based security with periodic password updates and login activity tracking. We plan to implement additional preventive measures, including firewalls, cyber-attack detection systems, and data encryption, to safeguard confidential information and data. We will regularly conduct cybersecurity awareness training for employees to enhance their awareness of potential cybersecurity threats and ensure they take appropriate preventive measures.

companyName: Toppoint Holdings Inc.

ticker: TOPP


text: We have not identified risks from known cybersecurity threats, or experienced any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. In the event of any significant cybersecurity incidents, we will publicly disclose the nature, scope, and impact of the incident, as well as the remediation measures we implement. of directors oversees the management of risks associated with cybersecurity threats.


text: The Company's Chief Financial Officer is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program.


text: management is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement the cybersecurity crisis management plan.


text: to Board of Directors Significant cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.


text: Our board of directors is ultimately responsible for overseeing the our risk management activities in general and, as deemed necessary by our management team, will be informed of any cybersecurity threats or risks that may arise. In fiscal year 2024, we did not identify any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy and results of operations.

companyName: Slam Corp.

ticker: SLAMF


text: Cyber Risk Management and Strategy As a part of the overall risk management system for the Company, we employ processes to assess, identify and manage material risks from cybersecurity threats. These items are designed to help protect our information assets from internal and external threats and protect the integrity and confidentiality of our data.

companyName: Lomond Therapeutics Holdings, Inc.


text: Our system includes procedural and technical safeguards, response plans, and reviews of our policies. We engage various external entities, including consultants, to improve and enhance our cybersecurity oversight. We provide all employees and consultants with cybersecurity and prevention training including timely and relevant topics covering social engineering, phishing, mobile security, and data protection and the need for reporting incidents and suspicious events immediately.


text: Our senior management team conducts the regular assessment and management of material risks from cybersecurity threats, including review with our IT team and third-party service providers, while our board of directors has responsibility for the strategic oversight of risk management, including oversight of material risks associated with cybersecurity threats.


text: Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats are assessed on an ongoing basis, and how such risks could materially affect the Company's business strategy, operational results, and financial condition are evaluated. Despite these efforts, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change, and efforts to overcome security measures become increasingly sophisticated. We cannot eliminate all cybersecurity risks or provide assurance that we have not had occurrences of undetected cybersecurity incidents. During the reporting period covered by this Annual Report, the Company did not identify any risks from cybersecurity threats that the Company believes materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, operational results, and financial condition.


text: In addition, our Board of Directors (the "Board") will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.

companyName: Western Uranium & Vanadium Corp.

ticker: WSTRF


text: We are a blank check company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable target businesses for an initial business combination. Therefore, we do not believe that we face significant cybersecurity risks and have not adopted any cybersecurity risk management programs or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. In fiscal year 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: Relativity Acquisition Corp

ticker: ACQC


text: Once we are operational and have available funding, we will be committed to maintaining the confidentiality, integrity, and availability of our information systems and data. As part of this commitment, we plan to implement a comprehensive cybersecurity program to protect against unauthorized access, use, disclosure, modification, or destruction of our information assets.


text: We routinely assess material cybersecurity risks, including potential unauthorized occurrences on, or conducted through, our information systems that may compromise the confidentiality, integrity or availability of those systems or information maintained in them. Our Chief Technology Officer, reporting to the Chief Executive Officer, is primarily responsible for addressing these risks. We devote appropriate resources and designate members of our management to address the risk assessment and mitigation process.

companyName: La Rosa Holdings Corp.

ticker: LRHC


text: As a smaller reporting company, we are proactively leveraging AI and other resources to enhance our cybersecurity measures. While we do not yet have a dedicated cybersecurity team or fully formalized protocols, we are actively developing new practices, incorporating advanced technologies to identify and mitigate risks. Our efforts include ongoing assessments and the exploration of strategic partnerships to strengthen our security posture.


text: Given our current stage of cybersecurity development, we have not experienced any cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches, and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs, and negatively impact our reputation among customers and partners.


text: We also have a cybersecurity insurance policy in place and fully utilize its tools, guidance, and policies to ensure compliance and enhance our overall security posture.


text: This coverage supports our risk management efforts by providing additional resources and expertise to help us identify, mitigate, and respond to potential threats effectively.


text: For a discussion of potential cybersecurity risks affecting the Company, please refer to Part I, Item 1A - "Risk Factors".


text: manage cybersecurity and data protection through a continuously evolving framework, as described in further detail below. The framework allows us to identify, assess and mitigate the risks we face, and assists us in establishing policies and safeguards to protect our systems and the information of those we serve.

companyName: VEEA INC.

ticker: VEEA


text: Governance: Our Audit Committee of our Board of Directors has oversight of our cybersecurity program and is in the process of implementing procedures to obtain regular updates on our cybersecurity program, including recent developments, key initiatives to strengthen our systems, applicable industry standards, vulnerability assessments, third-party and independent reviews, and other information security considerations. Our cybersecurity program is led by Mohan Gundu, our Senior Vice President of Engineering and Cloud Platform. Mr. Gundu holds an MBA in Business Administration from Babson College, a Master of Science in Computer Science from Worcester Polytechnic Institute and a Bachelor of Technology in Electronics and Communication from Jawaharlal Nehru Technological University. Mr. Gundu has over 20 years of development experience focused on architecture and security. Mr. Gundu has led transformative projects, cultivated cybersecurity awareness and promoted holistic cybersecurity practices that were aligned with policies defined and approved by management. Mr. Gundu and his team are dedicated to integrating security into development, ensuring robust cloud security, enforcing security policies, and driving shift-left practices with operational excellence at the Company.


text: We use a cross-functional approach to identifying, preventing, assessing, and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that are designed to provide for the prompt escalation of cybersecurity incidents and support appropriate public disclosure and reporting of incidents as required in a timely manner.


text: Our cybersecurity efforts include the use of risk-based administrative, technical, and physical controls. Veea has implemented policies, procedures, systems and tools designed to help safeguard our systems and data, including firewalls, intrusion detection systems, access controls including multi-factor authentication, vulnerability scanning, penetration testing, independent third-party control audits, and other systems and processes.


text: Response Planning: We maintain a breach reporting and resolution plan that includes defined processes, roles, communications, responsibilities and procedures for responding to cybersecurity incidents and other events that impact our operations. Our incident response plans are tested and evaluated on a regular basis.


text: Third-Party Risk Management: Our business relies on various services from third party service providers that could adversely impact the security of our systems and business. We have implemented processes designed to identify and assess cybersecurity risks associated with our use of third-party service providers.


text: Education and Awareness: We provide various training programs and tools to employees so they can avoid risky practices and help us promptly identify potential or actual issues. We also have global incident response procedures, global service tools to log incidents and issues for investigation, and an ethics line to report concerns and follow up on matters already reported. The Compliance team, led by our Chief Technology Officer, develops and implements our strategy, as well regularly review and update our policies, procedures, processes and practices to address changes in the threat landscape and as a result of lessons learned from suspected, actual or simulated incidents. We also conduct tabletop exercises and engage third party services to conduct evaluations of our security controls through penetration testing and independent audits. We also review industry best practices to assist in evaluating responses to new challenges and risks. These evaluations include testing both the design and operational effectiveness of security controls.


text: While we dedicate resources and efforts to our cybersecurity program, we may be unable to successfully identify threats, prevent attacks, satisfactorily resolve cybersecurity incidents, or implement adequate mitigating controls. Any breach of our network security and information systems or other cybersecurity-related incidents that results in, or may result in, the loss, theft or unauthorized disclosure of data, or any delay in determining the full extent of a potential breach, could have a material adverse impact on our business, results of operations, and financial condition, including harm to our reputation and brand, reduced demand for our solutions, time-consuming and expensive litigation, fines, penalties, and other damages. To date and except as otherwise may be noted in this Annual Report, we do not believe that any cybersecurity threats, including as a result of any previous cybersecurity incidents have materially affected, or are reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition. For more information relating to cybersecurity risks and uncertainties, please see the risk factor entitled "Cybersecurity incidents may have a material adverse effect on Veea's business, operations, financial performance, customer and vendor relationships, reputation and brand." in Part I, Item 1A, and other risk factors in this 10-K.


text: Risk Management and Strategy We are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.

companyName: Nature's Miracle Holding Inc.

ticker: NMHI


text: In addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board, or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.


text: In recent years, cyberattacks, including denial-of-service attacks, ransomware attacks, business email compromises, computer malware, viruses, social engineering (including phishing) and other tactics designed to gain access to and exploit sensitive information by breaching mission critical systems of large organizations have increased in volume and sophistication. RWT's information technology systems and automated machinery, which it will rely on to operate its business, could be exposed to such tactics. RWT may also experience unavailable systems, unauthorized access or disclosure due to employee theft or misuse, sophisticated nation-state and nation-state supported actors and advanced persistent threat intrusions.

companyName: Rain Enhancement Technologies Holdco, Inc.

ticker: RAIN


text: RWT may be unable to implement adequate preventative measures or stop security breaches while they are occurring, and attackers may sabotage or to obtain unauthorized access to RWT's systems, networks, or physical facilities. Actual or perceived breaches of RWT's security measures or the accidental loss, inadvertent disclosure or unapproved dissemination of proprietary information or sensitive or confidential data about RWT, its partners, its clients or third parties could expose us and the parties affected to a risk of loss or misuse of this information, resulting in litigation and potential liability, paying damages, regulatory inquiries or actions, damage to the RWT brand and reputation or other harm to the RWT business. Additionally, cyberattacks that impacts RWT's ability to operate its platform could result in production errors, processing inefficiencies and unscheduled downtime/degradation of operations, in turn causing the loss of sales and clients, and decreased revenue and increased overhead costs, which could have a material adverse effect on our results of operations.


text: Our board of directors has oversight of our strategic and business risk management and oversees management's execution of our cybersecurity risk management program. Management is responsible for identifying, assessing, and managing cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, maintaining cybersecurity policies and procedures, and providing regular reports to our board of directors. In the event of an incident, we intend to follow our incident response plan, which outlines the steps to be followed from incident detection to mitigation, recovery and notification, including notifying functional areas (e.g. legal), as well as senior leadership and the board, as appropriate.


text: Our approach to cybersecurity is in the developmental stage, and we have only begun to conduct comprehensive risk assessments, establish an incident response plan, and engage with external cybersecurity consultants for assessments or services. As of the date of this report, we have adopted an incident response plan which governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors. Our Vice President of Finance and Administration has been designated as the lead for implanting our incident response plan. In addition, in 2024, we have acquired a cybersecurity insurance policy.

companyName: EON Resources Inc.

ticker: EONR


text: Our management oversees the assessment and management of cybersecurity threats and regularly considers cybersecurity risks in the context of other material risks to the Company. In the event of any reportable cybersecurity incident, our management shall promptly notify our board of directors, including determining the necessary actions such as disclosure, mitigation, or other appropriate responses. We obtain input, as appropriate, for our cybersecurity risk management program on the security industry and threat trends from external experts. During the reporting period, we have not experienced any material cybersecurity incidents, which would require disclosure.

companyName: Solidion Technology Inc.

ticker: STI


text: In the course of our business operations, we collect, store, and process data, including information related to our employees, partners, collaborators, and vendors. To effectively manage cybersecurity risks, we have established a range of policies and procedures designed to prevent, detect, and respond to potential threats. Our Chief Executive Officer manages our external IT and cybersecurity experts. Under the CEO's direction, we work with trusted third-party information technology "IT" professionals who employ a variety of software tools to ensure the security of our systems. Additionally, we rely on reputable cybersecurity software vendors to further enhance our protection.


text: The Company takes steps to manage cybersecurity risks by identifying, assessing, and addressing potential threats to our data and systems, ensuring our security measures are effective. We continuously monitor for cybersecurity risks using automated tools, test for potential threats, and maintain standards, policies, and procedures to guide our security practices. We use a variety of security tools across our systems, require multifactor authentication for access to critical systems, and enforce access control policies to help protect the data within those systems.


text: We consult with outside counsel as appropriate, including on materiality analysis and disclosure matters, and our senior management makes the final materiality determinations and disclosure and other compliance decisions. Our management apprises our independent public accounting firm of matters and any relevant developments.


text: Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information on our cybersecurity related risks, see Item Governance


text: The Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full Board for consideration.


text: of any cybersecurity incidents that have had a materially adverse effect on our operations, business, results of operations, or financial condition.

companyName: VPR Brands, LP.

ticker: VPRB


text: The Board receives periodic reports from management on potential cybersecurity risks and threats and receives presentations on cybersecurity topics from our information systems manager. The Board also receives briefings from management on the cybersecurity risk management program as needed.


text: Management is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for our overall cybersecurity risk management program and supervises both the internal cybersecurity personnel and external cybersecurity consultants. Our information systems manager has many years of experience leading cybersecurity oversight and has extensive experience with information technology, including security, auditing, compliance, systems, and programming.


text: We have an information security program designed to identify, protect, detect and respond to, and manage reasonably foreseeable cybersecurity risks and threats.

companyName: Global Interactive Technologies, Inc.

ticker: GITS


text: To protect our information systems from cybersecurity threats, we utilize various security tools that help prevent, identify, escalate, investigate, resolve, and recover from identified vulnerabilities and security incidents in a reasonably timely manner. These include, but are not limited to, internal reporting and tools for monitoring and detecting cybersecurity threats.


text: As of the date of this report, we are not aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, for more information on risks posed by cybersecurity threats to the Company.


text: The Audit Committee is responsible for oversight of cybersecurity risk. Our Chief Executive Officer is the member of management responsible for managing and assessing our cybersecurity practices. Our Chief Executive Officer has over 20 years' experience as a C-Level technology executive for private and public companies. The plan for the future is that our Chief Executive Officer will report to the Audit Committee on cybersecurity on a quarterly basis. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Audit Committee and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken.

companyName: Vocodia Holdings Corp

ticker: VHAI


text: We believe we are appropriately staffed (as supported by our outsourced IT provider) to support a healthy cybersecurity posture given our size and scope.


text: Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any.

companyName: Four Leaf Acquisition Corp

ticker: FORL


text: Our Chief Information Officer, Chief Legal Officer, Chief Executive Officer, Chief Financial Officer and Chief Administrative Officer help identify, assess and manage the Company's cybersecurity threats and risks. They will identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example manual and automated tools, subscribing to reports and services that identify cybersecurity threats, conducting scans of the threat environment, evaluating threats reported to us, internal and external audits, conducting threat assessments for internal and external threats, third-party threat assessments and conducting vulnerability assessments to identify vulnerabilities.

companyName: SunPower Inc.

ticker: SPWR


text: Our assessment and management of material risks from cybersecurity threats will be integrated into the Company's overall risk management processes. For example, our Information Security Management committee will evaluate material risks from cybersecurity threats against our overall business objectives and report to the audit committee of the board of directors, which evaluates our overall enterprise risk.


text: We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example, professional services firms, including legal counsel, cybersecurity consultants, cybersecurity software providers and penetration testing firms.


text: The Audit Committee assists our board of directors in addressing the Company's cybersecurity risk management as part of its general oversight function. The board of directors' Audit Committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats. The Audit Committee regularly reviews and discusses the Company's cybersecurity risks with management, including the Company's Chief Information Officer, General Counsel, Vice President of Human Resources and Vice President of Operations.


text: The Company's Chief Executive Officer and Chief Information Officer work to help the Company mitigate and remediate cybersecurity incidents of which they are notified. In addition, the Company's incident response policy will include reporting certain cybersecurity incidents to the Audit Committee of the board of directors.


text: Our day-to-day operations are managed by our management team under the oversight of our Board. As such, we rely on it's cybersecurity program, as discussed herein, for assessing, identifying, and managing material risks to our business from cybersecurity threats. With oversight from our Board, our management team has implemented an enterprise-wide information security program designed to identify, protect against, detect, assess, respond to, and manage reasonably foreseeable cybersecurity risks and threats to our systems, some of which are supported by third parties. These processes are integrated into our overall risk management systems. To protect our systems from cybersecurity threats, the management team uses various security tools that help prevent, identify, escalate, investigate, resolve and recover from identified vulnerabilities and security incidents in a timely manner. These include, but are not limited to, internal reporting and monitoring and detection tools. Our risk management processes extend into the oversight and identification of threats associated with our use of third-party service providers, including through due diligence of such providers' cybersecurity practices, contractual obligations to operate their IT systems in accordance with cybersecurity standards and ongoing monitoring.

companyName: Hi-Great Group Holding Co

ticker: HIGR