text: As a blank check company, we do not have any operations and our sole business activity has been to search for and consummate an initial business combination. However, because we have investments in our trust account and bank deposits and we depend on the digital technologies of third parties, we and third parties may be subject to attacks on or security breaches in our or their systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.

companyName: Catcha Investment Corp


text: In the event of a cybersecurity incident impacting us, our management team will report to the Company's board of directors and provide updates on our management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences.

secItem: Item 1C


text: We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. For more information about the cybersecurity risks we face, see the risk factor entitled " General Risk Factors - Cyber incidents or attacks directed at us could result in information theft, data corruption, operational disruption, and/or financial loss" in Item 1A. Risk Factors. As of the date of this Annual Report, we have not encountered any cybersecurity incidents since our initial public offering.


text: We believe a robust and proactive approach to cybersecurity risks and threats is essential to achieving our strategic business objectives and protecting our business. We may face a wide range of cybersecurity threats, such as ransomware and denial-of-service attacks. Our customers, suppliers and other business partners may also face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these third parties could have a material adverse effect on our business and results of operations. Due to the risks that cybersecurity threats can pose to our business, we intend to continually evaluate best practices and methods, including cyber defense systems and training programs, to protect our business from a wide range of potential threats.

companyName: Modular Medical, Inc.

ticker: MODD


text: We continue to evaluate our cybersecurity control processes and procedures to address the evolving cybersecurity risks that we may face in an increasingly technically capable environment. We are implementing policies to educate and provide guidance to our personnel, including awareness programs and other related cybersecurity best practices. We plan to conduct technical risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We also plan to conduct programmatic risk assessments, including identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Following these risk assessments, we will evaluate: i) whether and how to implement, and maintain reasonable safeguards to minimize identified risks, ii) how to reasonably address any identified gaps in existing safeguards; and how to regularly monitor the effectiveness of our safeguards. As we are a small pre-revenue company, we currently outsource our information technology (IT) functions to a third party. Working with the outsourced IT firm, our president will manage the risk assessment and mitigation process. Third parties will play an important role in our cybersecurity program. We intend to engage third-party service providers to conduct evaluations of our security controls, including penetration testing and consulting on best practices.


text: The third-party services include testing both the design and operational effectiveness of security controls. This dependence exposes us, along with others who use such service providers, to the impact of a cyber-attack on their service providers. It is possible for a cyber-attack at a third-party service provider to have a significant financial, operational, or reputational impact to us. To reduce the effective impact to us of a cyber-attack on a third-party service provider, we intend to monitor the risks associated with our service providers through periodic review of these providers' cybersecurity programs.


text: board of directors, through its audit committee, oversees our processes for identifying and mitigating risks, including cybersecurity risks. Management will periodically brief the audit committee and/or the board of directors on our cybersecurity and information security policies and plans. Our board of directors will be apprised of cybersecurity incidents deemed to have a moderate or higher business impact, and we will provide updates on management's incident response plan for addressing and mitigating any impacts and risks associated with such an incident. We intend to develop a formal incident response plan, which sets forth the steps to be followed from incident detection and assessment to mitigation, recovery and notification and reporting within our organization and to our board of directors.


text: For additional information regarding whether any risks from cybersecurity threats have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, please refer to Item 1A, "Risk Factors," in this Report, including the risk factor entitled "Third parties might attempt to gain unauthorized access to our network or seek to compromise our insulin pump product."


text: Company faces risks associated with cybersecurity threats in carrying out its business operations. For more details regarding the risks related to PRC's cybersecurity regulation, see " Item 1A. Risk Factors—Compliance with China's new Data Security Law, Measures on Cybersecurity Review, Personal Information Protection Law, regulations and guidelines relating to the multi-level protection scheme and any other future laws and regulations may entail significant expenses and could materially affect our business. "; and "I tem 1A. Risk Factors—Recent greater oversight by the CAC over data security, particularly for companies seeking to list on a foreign exchange, could adversely impact our business and our offering. "

companyName: Senmiao Technology Ltd

ticker: AIHS


text: the year ended March 31, 2024, the Company was not subject to material fines or penalties in connection with cybersecurity, and there were no material cybersecurity incidents arising from cybersecurity or personal data protection.


text: board of directors does not have a standing risk management committee, but rather administers this oversight function directly through our board of directors as a whole, as well as through various standing committees of our board of directors that address risks inherent in their respective areas of oversight. While our board of directors has a fiduciary duty to monitor and assess strategic risk exposure, our audit committee is responsible for overseeing our major financial risk exposures and the steps our management has taken to monitor and control these exposures, overseeing cybersecurity risks and assisting the board of directors in its oversight over enterprise risk management. The audit committee also approves or disapproves any related person transactions. Our nominating and corporate governance committee monitors the effectiveness of our corporate governance guidelines and manages risks associated with the independence of the board of directors. Our compensation and leadership development committee assesses and monitors whether any of our compensation policies and programs has the potential to encourage excessive risk-taking.


text: of Third-Party Service Providers have in place certain infrastructure, systems, policies, and procedures that are designed to proactively and reactively address circumstances that arise when unexpected events such as a cybersecurity incident occur. These include processes for assessing, identifying, and managing material risks from cybersecurity threats. Identifying, assessing, and managing cybersecurity risk is integrated into our overall risk management systems and processes, and we have in place cybersecurity and data privacy training and policies designed to (a) respond to new requirements in privacy laws and (b) prevent, detect, respond to, mitigate and recover from identified and significant cybersecurity threats.


text: We have relied on the third-party security assessment procedures and data outflow control procedures to manage risks from cybersecurity threats associated with our use of third-party service providers. For example, the servers of the system of XXTX are housed at third-party data centers, and its operations depend on the service providers' ability to protect such systems in their facilities as well as their own systems. The qualified third-party performs security assessment by timely assessing their cybersecurity policies, data encryption and privacy policies and relevant certificates, establishing procedures in granting such third parties access to our database and requiring them to conduct regular inspections. Since in cooperation with third-party service providers may involve data outbound, we desensitize sensitive information before transferring such data.


text: Chinese subsidiaries and affiliates have incurred, and will continue to incur, significant expenses in an effort to comply with cybersecurity and information security standards and protocols imposed by law, regulation, industry standards or contractual obligations to the date of this Report in all material respects.


text: The Fund has processes in place to assess, identify, and manage material and immaterial risks from cybersecurity threats. The Fund's business is dependent on the communications and information systems of the Investment Adviser and other third-party service providers. The Investment Adviser manages the Fund's day-to-day operations and has implemented a cybersecurity program that applies to the Fund and its operations. To that end, the Investment Adviser has provided training to its employees, independent contractors and the Trustees of the Fund about its cybersecurity risk management program. The Fund's Trustees have been charged with oversight of the program and will be informed about any data incident and how it is being handled, including any regulatory reporting implications.

companyName: Wellings Real Estate Income Fund


text: Cybersecurity Program Overview The Fund relies on management of the Investment Adviser to provide oversight and take responsibility for the administration of the cyber risk management program and for informing senior management and other relevant persons regarding the prevention, detection, mitigation, and remediation of cyber incidents. The Fund's management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes directly or via selection of strategic third-party partners.


text: The Fund relies on management of the Investment Adviser to implement third-party risk management processes to manage the risks associated with reliance on vendors, critical service providers, and other third-parties that may lead to a service disruption or an adverse cybersecurity incident. This includes assessment of vendors during the selection/onboarding process, internal controls, compliance with service level agreements, and more.


text: A critical component of the Fund's cybersecurity program is its incident response plan. This plan includes a requirement to evaluate the materiality of any data incident. Should the evaluation conclude that the data incident rises to the level of materiality it will be incumbent for the Fund, working with the Investment Adviser and legal and cybersercurity professionals, to describe the data incident within four business days of determining that an incident is material. The Fund shall also be responsible to provide ongoing reporting about the status of the material data incident until such time that the material data incident is no longer a factor with respect the Fund's operations.


text: As the Fund evaluates the materiality level of a data incident it will consider a variety of factors including the operational impact, the type of data impacted, how the data has been impacted, the business continuity and recovery procedurs affected, the impact of the incident on the Fund's finances and any length of service interruption. Additional factors may also be considered given the nature of the event.


text: The Fund engages various third parties, including vendors and service providers, to assist with operating its business. The Fund relies on the expertise of cybersecurity risk management, legal, information technology, and compliance personnel that have been engaged by the Investment Adviser when identifying and overseeing risks from cybersecurity threats associated with the Fund's use of such entities.


text: Risk Management and Strategy Cybersecurity is a vital aspect of maintaining the trust of our customers and employees. We have instituted a comprehensive cybersecurity risk management program that employs various methods to monitor and assess our threat environment and risk profile. These methods include the use of manual and automated tools, conducting scans of the threat environment, evaluating our and our industry's risk profile, evaluating threats reported to us and conducting vulnerabilities assessments. We have company-wide policies and procedures in place that further enhance our ability to identify and manage cybersecurity risks. Our employees receive ongoing training under our security policies.

companyName: Jerash Holdings (US), Inc.

ticker: JRSH


text: Annual risk assessments and penetration testing are primarily performed by our internal staff, and we have not engaged any third parties in connection with such processes except that we have an external Management Information Systems consultant, or MIS consultant, who provides advices to our CEO in the review of test results. We believe these tests are useful tools for maintaining a robust cybersecurity program to protect our investors, customers, employees, vendors, and intellectual property. The results of these tests are presented annually to the CEO, with support provided by our external MIS consultant, for review to ensure compliance with cybersecurity standards.


text: During the fiscal year ended March 31, 2024, we have not identified any risks from cybersecurity threats that have materially affected our business operations or financial conditions.


text: Our CEO, MIS consultant, and MIS supervisor oversee risk management to ensure that the Company's policies and procedures are functioning as intended to protect the Company's information systems from cybersecurity threats.


text: More specifically, MIS supervisor is responsible for identifying and assessing cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation and remediation measures, and maintaining cybersecurity programs.


text: Our cybersecurity programs are managed under the direction of CEO and MIS consultant, and MIS supervisor monitors the prevention, detection, mitigation, and remediation of cybersecurity risks. MIS supervisor regularly updates the CEO on the Company's cybersecurity programs, material cybersecurity risks and mitigation strategies and provides regular cybersecurity updates.


text: We may face significant and persistent cybersecurity risks due to the need to protect our business, our confidential information and information concerning our personnel and others with whom we conduct business. As with other insurance brokerage companies, we occasionally face threats from actors who seek to disrupt our business as well as others who are engaging in malicious activities for profit, to make a political point or for no particular reason other than creating disruption. Disclosure of certain information as a result of a cybersecurity breach may result in a breach of privacy laws. The substantial level of harm that could occur to us and our business partners and customers were we to suffer impacts of a material cybersecurity incident; and our use of third-party products, services and components requires us to maintain robust governance and oversight of these risks and to implement mechanisms, technologies and processes designed to help us assess, identify, and eliminate these risks.

companyName: QDM International Inc.

ticker: QDMI


text: While we have not, as of the date of this Report, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, we cannot assure you that we will not experience such an incident in the future. Any cybersecurity incidents, whether or not successful, could result in our incurring additional costs related to, for example, rebuilding our internal systems, implementing additional threat protection measures, responding to regulatory inquiries or actions, paying damages or making payments to obtain access to our computer systems, or taking other remedial steps with respect to third parties, as well as incurring significant reputational harm. We seek to detect and investigate unauthorized attempts and attacks against our network, products, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to our internal processes and tools and changes or updates to our products and services; however, we remain potentially vulnerable to known or unknown threats. In some instances, we, our business partners and our customers can be unaware of a threat or incident or its magnitude and effects. Further, there are increasing regulation requirements regarding responses to cybersecurity incidents, including reporting to regulators, which could subject us to additional liability and reputational harm.


text: Following these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to mitigate identified risks and reasonably address any identified gaps in existing safeguards. Our responsible offer is directly supervising our employees' compliance of our internal safeguards and she reports to our Chief Executive Officer periodically and on an as-needed basis to manage our risk assessment and mitigation process. We monitor and test our safeguards and regularly conduct training for our employees on these safeguards, in collaboration with human resources, IT, and management. We are committed to promoting a company-wide culture of cybersecurity risk management.


text: We have not encountered cybersecurity risks, threats or incidents that have materially affected or are reasonably likely to materially affect the Company, our business strategy, results of operations, or financial condition during the fiscal year ended March 31, 2024.


text: We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Collective Audience, Inc.


text: We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, physical controls, and safeguards in place to manage such risks.


text: Following these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to minimize identified risks and reasonably address any identified gaps in existing safeguards. We also monitor the effectiveness of our safeguards. We devote significant resources and designate high-level personnel to manage the risk assessment and mitigation processes.


text: As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.


text: We have not previously been materially impacted by any previous cybersecurity incidents. For additional information regarding whether any risks from cybersecurity threats are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial Governance Management


text: is responsible for the Company's day-to-day risk management and the Board serves in an oversight role. The Board has empowered the Audit Committee with formal oversight of enterprise risk matters, including with respect to cybersecurity. The Audit Committee and management periodically review the Company's policies with respect to risk identification, assessment, and management, including cybersecurity risk exposures and the internal controls and procedures in place to manage such risks, as well as the steps that management takes to monitor and control such exposures. In addition, the Audit Committee and the Board consider risk-related matters on an ongoing basis in connection with deliberations regarding specific transactions and issues.


text: Our cybersecurity risk management and strategy processes are overseen by management. Management is informed about, and monitors the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above and report to the Audit Committee on any appropriate items.


text: the size of our company and the nature of our operations, we do not believe that we face significant cybersecurity risk.

companyName: FORMATION MINERALS, INC.


text: have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. We utilize standard commercial software for business operations, which includes basic security features such as password protection and data encryption. Our management is generally responsible for assessing and managing any cybersecurity threats.


text: date, we have not experienced any material cybersecurity incidents, and there has been no known unauthorized access to our systems. Should any reportable cybersecurity incident arise, our management shall promptly report such matters to our Board for further actions, including regarding the appropriate disclosure in accordance with SEC regulations, mitigation, and other response or actions that the Board deems appropriate to take.


text: We rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident. We seek to mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We plan to engage a third-party consultant to assist us with designing controls and our cybersecurity risk management framework. We have not encountered cybersecurity threats or incidents that have had a material impact on our business.

companyName: Maison Solutions Inc.

ticker: MSS


text: Our Board of Directors has specific oversight responsibility for cybersecurity, which also oversees our general risk management. The Board of Directors reviews and discusses with management our policies, practices and risks related to information security and cybersecurity. Our chief financial officer has primary responsibility for assessing, monitoring and managing cybersecurity risks. Our chief financial officer provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.


text: We operate in the biotechnology field, which is subject to various cybersecurity risks that could adversely affect our business. We engage in the periodic assessment and testing of our policies, standards, processes and practices that are designed to address cybersecurity risks. These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing, and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. We regularly engage third parties to perform assessments on our cybersecurity measures, including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness. The results of such assessments, audits and reviews are reported to the Audit Committee and we adjust our cybersecurity policies, standards, processes and practices as necessary based on the information provided by these assessments, audits and reviews.

companyName: Pluri Inc.

ticker: PLUR


text: Our Chief Information Officer, or CIO, is responsible for day-to-day assessment, management of risks from cybersecurity threats our cybersecurity policies, standards, processes and practices which are based on applicable industry standards. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.


text: While we have experienced a cybersecurity incident in the past (see Risk Factors - "A cybersecurity incident, other technology disruptions or failure to comply with laws and regulations relating to privacy and the protection of data relating to individuals could negatively impact our business and our reputation.") and cybersecurity threats in the past in the normal course of business and expect to continue to experience such threats from time to time, to date, none have had a material adverse effect on our business, financial condition, results of operations or cash flows. Even with the approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: As part of our overall risk management, our cybersecurity program is focused on a comprehensive approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: The Company deploys technical safeguards that are designed to protect the Company's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: The Company has established and maintains comprehensive incident response and recovery plans that fully address the Company's response to a cybersecurity incident, and such plans are tested and evaluated on a regular basis.


text: The Company maintains a comprehensive, risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, CROs, service providers and other external users of the Company's systems, as well as the systems of third parties that could adversely impact our business in the event of a cybersecurity incident affecting those third-party systems.


text: The Audit Committee oversees our risk management process, including the management of risks arising from cybersecurity threats. Our CIO is tasked with reporting any and all matters relating to cybersecurity to the Audit Committee. The Audit Committee receives regular presentations and reports on cybersecurity risks, which including recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to our peers and third parties. The Audit Committee receives prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed.


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: CleanCore Solutions, Inc.

ticker: ZONE


text: Material Risks & Integrated Overall Risk Management have integrated cybersecurity risk management into our risk management processes. This integration is intended to ensure that cybersecurity considerations are part of our decision-making processes. We continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-parties on Risk Management the complexity and evolving nature of cybersecurity threats, we plan to engage external experts, including consultants and auditors, in evaluating and testing our risk management systems. These services will enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties is expected to include annual audits, ongoing threat assessments, and regular consultations on security enhancements.


text: Third-Party Risk we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: from Cybersecurity Threats have not encountered cybersecurity challenges that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. board of directors oversees the management of risks associated with cybersecurity threats.


text: is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program. is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques.


text: Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents. to Board of Directors cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.


text: Risk Management and Strategy We promote a company-wide culture of cybersecurity risk management to ensure that cybersecurity risk considerations are an integral part of decision-making at every level. We have implemented cyber defenses to safeguard our information systems and protect the confidentiality, integrity and availability of our data. We continuously evaluate and refine our cybersecurity risk management practices to ensure they align with our business objectives and operational needs. Our cybersecurity risk management program is comprehensive in scope and covers the systems supporting our business.

companyName: Armlogi Holding Corp.

ticker: BTOC


text: Identification: We maintain an updated inventory of critical digital assets and leverage internal assessments and external threat intelligence to monitor and protect against emerging threats. We conduct periodic scans and audits identify vulnerabilities in our systems.


text: Assessments: We evaluate cyber threats such as data breaches, ransomware, and insider threats through threat modeling and business impact analysis. Prioritizing risks based on potential operational disruption ensures timely mitigation of critical threats.


text: Mitigation: We implement layered security controls, including firewalls, encryption, multi-factor authentication, and network segmentation. Patch management, access controls, and a robust incident response plan ensure proactive risk reduction and rapid recovery from incidents.


text: Monitoring and Review: We implement tools to continuously monitor network traffic, system logs, and user activities to detect threats in real-time. Regular audits and metrics help identify gaps, track performance, and strengthen our cybersecurity posture.


text: of the date of this annual report, we are not aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, results of operations, or financial condition. Our board of directors (the "Board")


text: oversees cybersecurity risk as part of its broader risk management responsibilities. The Board considers cybersecurity a critical component of our organization's risk management framework. The Board is responsible for approving the cybersecurity strategy, ensuring that sufficient resources are allocated to cybersecurity initiatives, and monitoring compliance with relevant regulations and industry standards.


text: The Board also receives regular updates from management on cybersecurity risks, incidents, and the overall effectiveness of our cybersecurity programs, ensuring alignment between cybersecurity objectives and business goals.


text: Management, along with our Chief Information Security Officer, Larry Chen is responsible for developing the cybersecurity strategy and supervising our cybersecurity risk management program, leading the cybersecurity team and coordinating responses to incidents and breaches, and managing relationships with regulators, auditors, and third-party vendors regarding cybersecurity matters. Our IT and security teams support these efforts by managing day-to-day operations, including threat detection, incident response, patch management, and system monitoring, ensuring that cybersecurity risks are actively managed and mitigated across our Company.


text: The management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal IT and security teams; threat intelligence and other information obtained from governmental, public or private sources; and alerts and reports produced by security tools deployed in the IT environment. Our cybersecurity incident response plan governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors.


text: Our cybersecurity measure is primarily focused on ensuring the security and protection of computer systems and networks. All pertinent domestic operating entities of the Company shall adhere to a standardized Company Confidentiality System, which shall be centrally overseen and enforced by Shuhai Beijing, subject to oversight by our management and Board of Directors. This Company Confidentiality System shall include specific provisions for information pertaining to network security, data security, and information that, if disclosed, could have detrimental effects on the public interest and the Company. We plan to establish an appropriate confidentiality framework and adhere to relevant document management regulations. The Company and its employees are also required to sign confidentiality agreements for purposes including ensuring cybersecurity.

companyName: DATASEA INC.

ticker: DTSS


text: As of the date of this report, we are not aware of any material risks from cybersecurity threats, that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition.


text: Management and Strategy has adopted cybersecurity principles modeled after its parent company, Eureka, which outsources its IT support to a third-party provider.

companyName: Estrella Immunopharma, Inc.

ticker: ESLA


text: Estrella's IT infrastructure is limited due to its size and scope, and it has not conducted a formal standalone IT risk assessment.


text: Because it has not conducted a formal standalone IT risk assessment, Estrella's process for assessing, identifying, and managing material risks from cybersecurity threats has not been fully integrated into its overall risk management system or process. Estrella does not have a formal process established to oversee and identify cybersecurity threats and risks associated with its reliance on the third-party IT support provider of Eureka. However, it has implemented several key cybersecurity measures, focusing heavily on cloud-based solutions to protect its financial data and communications.


text: Backup and Recovery: Estrella stores all critical data in the cloud and does not maintain on-premise servers. Daily backups are conducted and monitored to protect financial and operational data from loss or breach. Periodic restore tests are also performed to verify the integrity of the data.


text: Authentication: Access to Estrella's data and email, hosted on Office 365, is protected by two-factor authentication, providing an additional layer of security against unauthorized access.


text: Access Control: Financial data is stored on a dedicated SharePoint site, with access restricted to relevant personnel only, ensuring tight control over sensitive information.


text: Protection: Estrella employs Exchange Online Protection (EOP) for email filtering, Data Loss Prevention (DLP) to prevent accidental sharing of sensitive information, and basic email encryption to secure communications.


text: Cybersecurity oversight at Estrella is integrated into Eureka's IT governance framework. Eureka's IT Governance Committee, which consists of the CEO from the third-party IT provider and Eureka's operations team, oversees cybersecurity risk assessments and controls. The third-party IT provider has more than three decades of experience in providing strategic planning and IT outsourcing to companies, with cybersecurity professionals on staff that specialize in NIST compliance.


text: CEO is responsible for ensuring that cybersecurity measures relevant to Estrella are in place and effective. Estrella's management works closely with Eureka's IT Governance Committee to ensure that Estrella benefits from Eureka's comprehensive cybersecurity practices. Although Estrella does not have a dedicated cybersecurity officer, Eureka's IT Governance Committee, oversees the IT support provided by the third-party IT provider to Estrella. Any critical cybersecurity incidents or risks identified are communicated to Estrella's board for review and action. In the event of a cybersecurity incident, the board is promptly informed, and measures are taken in coordination with Eureka's IT Governance Committee and third-party IT provider to address and mitigate any risks. Estrella's board is committed to ensuring that cybersecurity remains a priority and that all necessary steps are taken to protect the company's data and operations.


text: the year ended June 30, 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.


text: Cyberattacks are a growing geopolitical risk, becoming larger, more frequent, more intricate and more relentless. These attacks represent a significant threat to individual organizations and their ability to conduct daily operations. We rely on accounting, financial, and operational management information systems to conduct our operations. Any disruption in these systems could adversely affect our ability to conduct our business. Furthermore, as part of our normal business activities, we collect and store common confidential information about customers, employees, vendors, and suppliers. This information is entitled to protection under a number of regulatory regimes.

companyName: Ispire Technology Inc.

ticker: ISPR


text: Any failure to maintain the security of the data, including the penetration of our network security and the misappropriation of confidential and personal information, could result in business disruption, damage to our reputation, financial obligations to third parties, fines, penalties, regulatory proceedings and private litigation with potentially large costs. This scenario may also result in a deterioration of customer confidence in us and potentially other competitive disadvantages. As such, a cyberattack could have a material adverse impact on our financial condition and results of operations.


text: While we devote resources to implement and maintain security measures to protect our systems and data, these measures cannot provide absolute security against a cyberattack. In such an event, the insurance coverage we maintain may be inadequate to cover claims, costs, and liabilities relating to cybersecurity incidents.


text: While we have not been subject to cyberattacks and other cyber incidents, we take cybersecurity preparedness seriously. Our risk management framework considers cybersecurity risk alongside other company risks as part of our overall risk assessment process. We have plans to implement cybersecurity training for all employees upon onboarding, and then annual follow-up training courses to ensure that all employees understand the risk and implications of a cyber event.


text: We plan to implement a Cybersecurity Committee which will be responsible for the day-to-day management of cybersecurity risks, and which will meet bi-monthly to review our practices related to cyber events and risk management. The Committee will be composed of the Chief Financial Officer, Chief Legal Officer, Controller, and Head of Human Resources.


text: The Committee will develop and implement cybersecurity risk mitigation strategies and activities, including the management of comprehensive incident response plans, oversee the cybersecurity risks posed by third-party vendors, ensure policies and procedures are current and followed, and receive regular updates on cybersecurity-related matters. Further, the Committee will engage subject matter experts such as consultants and auditors to assist us in establishing processes to assess, identify, and manage potential and actual cybersecurity threats, to actively monitor our systems internally using widely accepted digital applications, processes, and controls, and to provide forensic assistance to facilitate system recovery in the case of an incident.


text: The Audit Committee of our Board of Directors oversees our policies and practices with respect to risk assessment and risk management, including the review, in coordination with our management, of our management of cybersecurity. The Audit Committee will receive regular updates from the Cybersecurity Committee on the state of cybersecurity risks we face. This will include briefings on any significant cyber incidents and ongoing risk management efforts. These updates will enable the Audit Committee to provide informed reports on cybersecurity matters to the full Board.


text: we are not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: The Sponsor recognizes the importance of managing cybersecurity risks to protect its business operations, clients, and stakeholders. The Sponsor has implemented a comprehensive Cybersecurity Policies and Procedures Plan applicable to the Funds, which outlines the Sponsor's approach to identifying, assessing, and mitigating cybersecurity threats and vulnerabilities in alignment with industry standards and best practices.

companyName: Amplify Commodity Trust

ticker: BDRY


text: The Sponsor has established a risk-based cybersecurity framework for the Funds to manage cybersecurity risks. This framework includes regular assessments of its information systems, physical and virtual infrastructure, and the data therein, to identify potential cybersecurity threats and vulnerabilities. This cybersecurity strategy is integrated into the Funds' overall risk management processes, with specific consideration given to the confidentiality, integrity, and availability of our information systems.


text: Third-Party Service Providers: The Sponsor engages with various third-party service providers for critical operations and services. The Sponsor conducts cybersecurity risk assessments of all vendors and business partners with access to our networks or sensitive information. These assessments ensure that third-party cybersecurity policies align with our cybersecurity standards.


text: To date, there have been no known material cybersecurity incidents that have significantly impacted the Funds' business strategies, results of operations, or financial condition. The Sponsor continues to monitor systems and processes to mitigate potential cybersecurity risks actively.


text: Sponsor Oversight: The Sponsor has a fundamental role in overseeing the Funds' cybersecurity risk management. The Sponsor receives regular updates on cybersecurity matters from management and third-party service providers, ensuring that cybersecurity risks are managed proactively at the highest level of the organization.


text: Management's Role: The Sponsor's Chief Compliance Officer is responsible for overseeing the development, implementation, and ongoing management of the Fund's Cybersecurity Policies and Procedures including the monitoring of our systems for potential cybersecurity events and the implementation of preventive and mitigative measures.


text: We depend on digital technologies, including information systems, infrastructure and cloud applications and services, including those of third parties with which we may deal. Sophisticated and deliberate attacks on, or security breaches in, our systems or infrastructure, or the systems or infrastructure of third parties or the cloud, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. As a company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We may not have sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have adverse consequences on our business and lead to financial loss. However, risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition.

companyName: Aeluma, Inc.

ticker: ALMU


text: We regularly assess, identify, and manage material risks from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: InMed Pharmaceuticals Inc.

ticker: INM


text: We conduct risk assessments at least annually to identify cybersecurity threats. These risk assessments include identifying reasonably foreseeable potential internal and external risks, the likelihood of occurrence and any potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, controls and other safeguards we have put in place to manage such risks. Our risk management process also encompasses cybersecurity risks associated with the use of our major third-party vendors and service providers. Additionally, we maintain cyber coverage through our insurance carrier to mitigate risks associated with cybersecurity incidents, subject to customary terms and exclusions.


text: Following these risk assessments, we design, implement, and maintain reasonable safeguards to minimize the identified risks; reasonably address any identified gaps in existing safeguards; update existing safeguards as necessary; and monitor the effectiveness of our safeguards. Moreover, we remain committed to investing in the development and improvement of our security processes and controls, as well as maintaining our technology infrastructure. These processes include a plan for notifying, informing, consulting, analyzing, and communicating any risks or incidents to a range of internal stakeholders, including executive management and the Board of Directors, as well as external stakeholders, as deemed necessary and appropriate based on the circumstances. We believe we have allocated adequate resources related to our cybersecurity risk management processes and have designated our Chief Financial Officer with the responsibility of managing the cybersecurity risk assessment and mitigation process.


text: As part of our overall risk management program, we provide required training to employees in high risk areas on cybersecurity and will distribute standard operating procedures to all employees. For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition, please refer to Item 1A, "Risk Factors," in this Annual Report.


text: One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks arising from cybersecurity threats. Our Chief Financial Officer and Chief Operating Officer are primarily responsible for assessing and managing material risks from cybersecurity threats on a day to day basis. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our management team is additionally responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole. The Company additionally utilizes the assistance of a third-party service provider, an information technology solutions service provider located in Richmond, BC, for purposes of broadly managing its cybersecurity risks.


text: Risk Management and strategy As part of our broader risk management system and processes, we maintain procedures for identifying, assessing, and managing material risks from cybersecurity threats that is designed to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: Lakeside Holding Ltd

ticker: LSH


text: We track and log security incidents across our company and our customers to remediate and resolve any such incidents. Significant incidents, if any, shall be reviewed by chief executive officer and chief operating officer, with the assistance from our information technology department, to assess and determine its materiality or potentiality of becoming material. Our senior management makes the final materiality determinations and disclosure and other compliance decisions.


text: As of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Our board of directors does not have a standing risk management committee, but rather directly administers its oversight function as a whole. Our board of directors will (i) lead in a direction that minimizes the risk of unauthorized and malicious use, disclosure, potential theft, alteration or damaging effects of our operations while concurrently enabling the sharing of information in cyberspace, and (ii) ensure that risks to the confidentiality, integrity or availability of Company-owned information assets are managed appropriately, and (iii) review disclosure concerning cybersecurity matters in our annual report on 10-K presented by our chief executive officer, chief financial officer, and other personnel in charge of cybersecurity matters.


text: The Company's Information Security Officer ("ISO") is responsible for completing additional mandatory training to understand the processes, procedures, and technical requirements for securing information assets across the Company.

companyName: Kentucky First Federal Bancorp

ticker: KFFB


text: The Company sets forth enterprise-wide coordinated responses to identified threats, ensuring timely mitigation and remediation, and facilitating awareness and communication. Tabletop exercises are held regularly at the senior and executive management levels to validate roles and responsibilities, and response protocols respective to cybersecurity threats.


text: Material Cybersecurity Threat Risks The Company has not experienced any material losses relating to cybersecurity threats or incidents for the year ended June 30, 2024. We are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition. Although we have a robust cybersecurity program that is designed to assess, identify, and manage material risks from cybersecurity threats, we cannot provide absolute surety that we have properly identified or mitigated all vulnerabilities or risks of incidents. The Company, and the third parties that the Company engages, are subject to constant and evolving threats of attack and cybersecurity incidents may be more difficult to detect for periods of time.


text: A cybersecurity incident could harm our business strategy, results of operations, financial condition, reputation, and/or subject us to regulatory actions or litigation which may result in fines, judgments or indictments.


text: Management's Role in Managing Risk The ISO plays a pivotal role in informing the Board of Directors on cybersecurity risks. The ISO, other information security staff, and members of senior management meet regularly as the Technology Steering Committee. Reports of their meetings are shared with the boards of our subsidiary banks. Committee reports provide comprehensive briefings to both the Board and the Audit Committee as part of managements reporting. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies;


text: Incident reports and issues identified from any cybersecurity events; and standards. In addition to our regularly scheduled Board meetings, the ISO regularly communicates with senior staff regarding emerging or potential cybersecurity risks. They discuss any significant developments in the cybersecurity domain, which when reported to the Board, ensures the Board's oversight is proactive and responsive. The Board actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated into the broader strategic objectives of the Company. The Board closely reviews these reports of the Bank's cybersecurity posture and the effectiveness of its risk management strategies prior to approval. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: Cyber Risk Management Personnel The ISO directly reports to the CEO. The ISO regularly meets with the CEO to update and discuss any cybersecurity risks and incidents affecting the Company. This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing the Company. Furthermore, all significant cybersecurity matters and strategic risk management decisions are promptly escalated to the Board of Directors, ensuring that they have an up-to-date, comprehensive understanding of and can provide guidance on critical cybersecurity issues.


text: Primary responsibility for assessing and providing strategic direction to our cybersecurity program resides with our ISO. The ISO's experience includes prior leadership roles within the Company, where they developed an expert level of understanding of the intersection between financial regulations and cloud-based technologies.


text: The ISO and other information systems staff possess in-depth knowledge and experience which are instrumental in developing and executing our cybersecurity strategies. The ISO and the Tech Steering Committee oversee our governance programs, work with our technology-focused leaders and partners to align security and compliance, and have developed our employee security awareness training program.


text: Monitoring Cybersecurity Incidents The ISO and other information security staff utilizes vendor relationships and various other internet based daily updates for the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This knowledge is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The ISO provides structure for clear processes to ensure the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, we believe we are equipped with a well-defined Incident Response Plan that is adequately resourced. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevent future incidents.


text: We use, store and process data for and about our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2024.

companyName: bowmo, Inc.


text: Under the oversight of the Board of Directors (since we do not currently have an Audit Committee), we intend to implement and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes would be integrated into our overall risk management processes. We intend to implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify and address cybersecurity risks. In support of this approach, it is expected that we would have a third-party security consultant implement processes to assess, identify and manage security risks to our company, including in the pillar areas of security and compliance, application security, infrastructure security and data privacy. This process, once implemented, would include regular compliance and critical system access reviews. In addition, we intend to conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office, and Google enterprise to provide protection against cybersecurity threats.


text: Further, we intend to put processes in place that would evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that would have access to our data, including a review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: Part of our intended program would be ongoing evaluation and enhancement of our systems, controls and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: We rely upon internally and externally managed information technology systems and networks for the collection and storage of sensitive data and business information. We approach cybersecurity risks with a comprehensive risk management and governance strategy designed to assess, identify, and manage cybersecurity risks to our business.

companyName: ATECH (PARENT) RESOLUTION CORP.


text: Risk Management and Strategy Our cybersecurity program is designed to detect cybersecurity threats and vulnerabilities, protect our information systems from such threats, and ensure the confidentiality, integrity, and availability of systems and information used, owned, or managed by us. Our focus is on protecting sensitive information, such as the personal information of our customers and employees, and confidential business information that a competitor or a malicious actor could leverage.


text: Our cybersecurity program has several components, including the adoption of information security protocols, standards, and guidelines consistent with industry best practices; engaging third-party service providers to conduct security assessments; performing periodic internal audits of our cybersecurity protocols. We adhere to the National Institute for Standards and Technology (NIST) SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) 2.0 frameworks, which provide a set of standards, guidelines, and best practices to manage cybersecurity-related risks.


text: We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and have integrated these processes into our overall risk management systems and processes. We conduct regular risk assessments to identify cybersecurity threats and assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats.


text: These risk assessments include identifying reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: Following these risk assessments, we implement and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards.


text: We have implemented technical solutions designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, antimalware and endpoint protection functionality, and access and identity controls. We regularly evaluate, monitor, and improve these solutions.


text: As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, information technology, legal, compliance and ethics, and management. Personnel at all levels and departments are made aware of our cybersecurity policies through periodic training. Further training is performed on a scheduled basis, covering cybersecurity topics and overall security hygiene, which reflect current techniques and tactics employees may encounter.


text: We have experienced incidents in the past and may experience them in the future. However, we have not experienced any cybersecurity incidents that have been determined to affect us materially, our business strategy, results of operations, or financial condition. As external events evolve, we will continue to evaluate and address these conditions as needed in our Business Continuity and Incident Response programs. For additional information regarding risks from cybersecurity threats, please refer to " Item 1A. Risk Factors – General Risks – Security breaches and other disruptions could compromise our proprietary information and expose us to liability, which would cause our business and reputation to suffer. "


text: One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, as well as through the IT Governance Committee.


text: Our Vice President of Information Technology regularly reports to our IT Governance Committee, which oversees our IT strategy, programs and risks, including the cybersecurity practices, procedures and controls management used to identify, assess and manage our key cybersecurity programs and risks, ensure the protection of the confidential intellectual property, information and data of the Company and its customers and ensure compliance with applicable data protection laws and regulations. Our Vice President of Information Technology has relevant experience of more than 25 years in information technology and cyber and information security, and he oversees our cybersecurity policies and processes, including those described in "Risk Management and Strategy" above. He also holds multiple certifications including Computer Information Systems Security Professional (CISSP), Certified in Information Systems Management (CISM), Certified in Information Systems Audit (CISA), Certified in Risk and Information Systems Control (CRISC), and CompTIA Advanced Security Practitioner (CASP+). Our Vice President of Information Technology monitors and stays informed about prevention, detection, mitigation, and remediation efforts through regular communication and reporting from our IT department, and through the use of technological tools and software and results from third party assessments.


text: Our Vice President of Information Technology provides quarterly briefings to the IT Governance Committee regarding our company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, and activities of third parties. Our IT Governance Committee provides regular updates to the Board of Directors on such reports.


text: Management and Strategy have established cybersecurity risk assessment procedures to ensure effectiveness in cybersecurity management, strategy and governance and reporting cybersecurity risks. The process is in alignment with our strategic objectives and risk appetite.

companyName: Singularity Future Technology Ltd.

ticker: SGLY


text: strive to manage cybersecurity risks and protect sensitive information through various means, such as technical safeguards, procedural requirements, close monitoring on our corporate network. We may engage assessors, consultants, auditors, or other third parties to enhance our cyber security risk management processes. Any cybersecurity incidents are closely monitored for their potential impact on our business of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Board oversees the Company's cybersecurity risks management and reviews management reports on material cybersecurity risks and issues on an as-needed basis. The chief executive officer (the "CEO") and the chief financial officer (the "CFO")


text: are responsible for discussing material cybersecurity incidents or threats with specific constituencies before sign-off, ensuring thorough review of information and disclosures. The CEO and CFO are also responsible for assessing, identifying and managing material risks from cybersecurity threats to our company and monitoring the prevention, detection, mitigation and remediation of material cybersecurity incident, maintaining oversight of the disclosure in the periodic reports (including our annual reports on Form 10-K) of the Company.


text: As of June 30, 2024, we did not establish policies and processes for assessing, identifying, and managing material risk from cybersecurity threats.

companyName: Foxx Development Holdings Inc.

ticker: FOXX


text: In connection with the Closing, on September 24, 2024, our Board of Directors approved our Cybersecurity Incident Response Policy (the "Cybersecurity Policy"), We have integrated the processes as described in the Cybersecurity Policy into our overall risk management systems and processes According to the Cybersecurity Policy, we routinely assess material risks from cybersecurity threats that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. Pursuant to the Cybersecurity Policy, we conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: Following these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate high-level personnel, including our Chief Technology Officer ("CTO"), James Liao, to manage the risk assessment and mitigation process.


text: We may engage consultants and other third parties as needed in connection with our risk assessment policies and processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.


text: We require third-party service providers to certify their ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of their security measures that may affect the Company.


text: As part of our overall risk management strategies, we also conduct cybersecurity trainings for personnel at all levels and in all departments.


text: Our CIO provides periodic briefings to the Audit Committee regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity policies and procedures, activities of third parties, and the like.


text: Our CTO, James Liao, and senior vice president of the Operating Subsidiary, Ruobing Yu, constitute our cybersecurity incident management team and are primarily responsible to assess and manage our material risks from cybersecurity threats. Our CTO has over 25 years in consumer electronics and telecommunication sectors and has a professional background in computer science and engineering, which enables him to oversee our IT systems efficiently.


text: As part of the executive team reporting to the Board, our CTO oversees our cybersecurity policies and processes, including those described in "Risk Management" above. The processes by which our CTO is informed of and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents include log review from IT and operations teams or reports received from network systems and applications if any unusual activity occurs, such as email system notification of items opened that could be malicious.


text: Risk Management and Strategy We have implemented and maintain various information security processes and technologies designed to identify, assess and manage material risks from cybersecurity threats to our computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property and confidential information that is proprietary, strategic, or competitive in nature ("Information Systems and Data").

companyName: ENZO BIOCHEM INC


text: Our Senior VP of Global IT and System Operations, IT Security Officer and the information security team, in conjunction with our legal team and third-party service providers, help identify, assess and manage our cybersecurity threats and risks. Our Senior VP of Global IT and System Operations, IT Security Officer and the information security team identify and assess risks from cybersecurity threats by continuously monitoring and evaluating our threat environment using various methods, including, for example: conducting vulnerability assessments to identify vulnerabilities, conducting scans of corporate devices and network infrastructure, analyzing reports of potential, known and identified threats and actors, using automated and manual tools to monitor for, identify, or evaluate threats and risks, conducting audits and threat assessments, and utilize third party managed detection and response (MDR) 24/7/365 cybersecurity vendor services that help identify cybersecurity threats, using third party threat assessments and external intelligence feeds, and evaluating our company's and our industry's risk profile.


text: We implement and maintain technical, physical, and organizational measures, processes, and policies that are designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: dedicated cybersecurity staff, an incident response plan and policy, a vulnerability management policy, risk assessment process, processes and policies to address access to systems and networks, physical security protocols, processes for asset management, encryption of certain Company data, systems and networks, penetration testing, IT risk assessments and employee training. We also maintain cybersecurity insurance.


text: Our assessment and management of risks from cybersecurity threats are integrated into our overall risk management processes. For example, cybersecurity risk is identified and addressed as a component of our general risk management strategy. We have also established a cybersecurity committee consisting of our Senior VP of Global IT and System Operations, IT Security Officer, information security team, and other senior leaders to oversee our cybersecurity risk management process and strategies to mitigate cybersecurity threats.


text: We use third-party service providers to assist us from time to time to identify, assess, and manage risks from cybersecurity threats, including professional services firms, cybersecurity consultants, managed cybersecurity service providers and penetration testing firms.


text: We have a vendor management program to manage cybersecurity risks associated with our use of certain service providers. The program includes, depending on the nature of the services and the identity of the service provider, completion of security questionnaires, review of the service provider's written security program, and imposition of cybersecurity-related contractual obligations on the provider.


text: For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Item 1A. Risk Factors of this Form 10-K, including " Cybersecurity risks and the failure to maintain the confidentiality, integrity, and availability of our computer hardware, software and internet applications and related tools and functions could result in dam age to the Company's reputation and/or subject the Company to costs, fines, or lawsuits", and " We rely on network and information systems and other technology whose failure or misuse could cause, and has caused, a disruption of services or loss or improper disclosure of personal data, business information, including intellectual property, or other confidential information, resulting in increased costs, loss of revenue or other harm to our business."


text: Our Board addresses the Company's cybersecurity risk management as part of its general oversight function. The Board is responsible for overseeing our cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by our Senior VP of Global IT and System Operations and IT Security Officer.


text: Our Senior VP of Global IT and System Operations in conjunction with the IT Security Officer implements programs and policy recommendations to integrate cybersecurity risk considerations into our overall risk management strategy and works with the information security team to communicate key priorities. Our Senior VP of Global IT and System Operations and IT Security Officer are responsible for helping to prepare the Company for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our incident response plan is designed to escalate certain cybersecurity incidents to members of our incident response team and members of management depending on the circumstances, including executive management and the Board. Our Senior VP of Global IT and System Operations, IT Security Officer and information security team work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to the Governance and Compliance Committee ("the Committee") for certain cybersecurity incidents. The Committee periodically evaluates overall business continuity, compliance, regulatory, quality and safety systems effectiveness.


text: The Committee includes, but is not limited to, the Company's IT Security Officer, Data Privacy Officer, Safety Officer, and Senior VP of Global IT and System Operations.


text: The Committee is updated during the quarterly Committee meetings by the Senior VP of Global IT and System Operations and the IT Security Officer concerning the Company's significant cybersecurity threats and risk and the processes we have implemented to address them. The Committee also receives reports, summaries or presentations related to cybersecurity threats, risk and mitigation. The Company's Senior VP of Commercial Operations, General Counsel, Chief Financial Officer and Chief Executive Officer may also participate in Committee meetings and will receive updates from the Committee as appropriate.


text: Cybersecurity Risk Management and Strategy Our company recognizes the critical importance of cybersecurity in our digital operations and has established a risk management program to address both internal and external cybersecurity threats. Despite our comprehensive efforts and critical resource allocation, we acknowledge the challenges posed by the evolving nature of cyber threats and the limitations in fully mitigating these risks. We have not observed any significant impacts from known cybersecurity threats or previous incidents on our operational, strategic, or financial aspects. Nevertheless, given the unpredictable nature of cyber threats, we cannot assure complete immunity against potential future impacts.

companyName: ATIF Holdings Ltd

ticker: ZBAI


text: Cybersecurity Governance Our Board of Directors plays a pivotal role in overseeing the organization's preparedness for cyber threats. This involves a comprehensive understanding of our risk profile, ensuring appropriate cybersecurity controls are in place, regularly reviewing the effectiveness of these measures, and maintaining a robust incident response plan. The Board's involvement extends beyond compliance and budget approvals to active participation in continuous cybersecurity strategy improvement.


text: We recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect our data's confidentiality, integrity, and availability. We have implemented, including testing software and our computer systems, our facilities, systems and procedures, from cybersecurity threats. We assess risks arising from cybersecurity threats against our information systems that may result in adverse effects on our information systems or any information residing therein. We conduct periodic assessments to identify such cybersecurity threats.

companyName: MULIANG VIAGOO TECHNOLOGY, INC.


text: Management is responsible for identifying and assessing material risks for the business on an ongoing basis, including in relation to cybersecurity. Our Chief Executive Officer oversees our information technology department which monitors the prevention, detection, mitigation, and remediation of cyber incidents, if any.


text: have not encountered cybersecurity risks, threats, or incidents that have materially affected or are reasonably likely to materially affect the Company, our business strategy, results of operations, or financial condition during the financial year ended December 31, 2023.


text: Cybersecurity: Risk Management and Strategy We have developed and implemented a cybersecurity risk management program that is designed to protect the confidentiality, integrity, and availability of the Company's data and systems. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Maitong Sunshine Cultural Development Co., Ltd

ticker: MGSD


text: A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;


text: As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Cybersecurity: Governance Our Board of Directors considers cybersecurity risk within the Board's risk oversight function. The board of directors has charged management with responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system controls and security. The Board oversees management's implementation of our cybersecurity risk management program.


text: Our Chief Financial Officer reviews the efficacy of our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the Company's financial statements.


text: Our Chief Financial Officer reports to our CEO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO and CFO provide prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding the Company's cybersecurity program.


text: cybersecurity program is designed to identify, assess, and manage material risks from cybersecurity threats. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which we rely. We engage external experts, including cybersecurity assessors and consultants, to evaluate cybersecurity measures and risk management processes. We engage and depend on service providers to actively monitor the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats. Our finance and compliance personnel identify and oversee risks from cybersecurity threats associated with our use of such service providers.

companyName: PhenixFIN Corp

ticker: PFX


text: Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from our Chief Executive Officer and our Chief Compliance Officer, regarding the overall state of our cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents.


text: management, including our Chief Executive Officer and Chief Compliance Officer, is responsible for assessing and managing material risks from cybersecurity threats. Members of Company management possess relevant expertise in various disciplines that are key to effectively managing such risks, such as regulatory compliance and corporate governance and rely on third-party service providers to provide expertise with respect to information technology and cybersecurity. Our management is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents, primarily through the receipt of notifications from service providers.


text: potential impact of risks from cybersecurity threats are assessed regularly, including how such risks could materially affect our business strategy, operational results, and financial condition. During the reporting period, we have not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that we believe have materially affected, or are reasonably likely to materially affect, us, including our business strategy, operational results, and financial condition.


text: Our corporate information technology, communication networks, enterprise applications, accounting and financial reporting platforms, and related systems are necessary for the operation of our business. We use these systems, among others, to manage our product development, to communicate internally and externally, to operate our accounting and record-keeping functions, to store and access data including sensitive patient data and for many other key aspects of our business. Our business operations rely on the secure collection, storage, transmission, and other processing of proprietary, confidential, and sensitive data.

companyName: NEUROONE MEDICAL TECHNOLOGIES Corp

ticker: NMTC


text: Our Chief Financial Officer leads our information security organization (overseeing work done by a third party IT services company) and reports to the Chief Executive Officer and Board of Directors of any material information regarding such cybersecurity matters.


text: Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K.


text: These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees, customers or patients, violation of data privacy or security laws, litigation, and legal, financial and reputational risk.


text: In coordination with third-party consultants, we have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical systems and data. Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards, and/or policies designed to manage and mitigate material risks from cybersecurity threats to our information systems and data, including risk assessments, incident detection and response, vulnerability management, disaster recovery and business continuity plans, internal controls within our accounting and financial reporting functions, encryption of data, network security controls, access controls, physical security, asset management, systems monitoring, vendor risk management program and employee training. We conduct annual reviews and tests of our information security program to evaluate its effectiveness and improve our security measures and planning.


text: To operate our business, we utilize certain third-party service providers and vendors to support a variety of functions. We seek to engage reliable, reputable service providers and vendors that maintain cybersecurity programs, and we implement a vetting process to ensure that all third-party service providers and venders comply with our cybersecurity program requirements. Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider, conducting security assessments, and conducting periodic reassessments during their engagement.


text: We are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations, or financial condition.


text: Our Board of Directors holds oversight responsibility for the Company's strategy and risk management, including material risks related to cybersecurity threats. Oversight of such cybersecurity risks is executed directly by the Board of Directors. The Board receives reports and engages in regular discussions with management regarding the Company's significant risk exposures resulting from material cybersecurity threats and the measures implemented to monitor and reasonably manage these risks.


text: Cybersecurity risk management and strategy Our cybersecurity risk management is based on recognized cybersecurity industry frameworks and standards, including those of the National Institute of Standards and Technology, the Center for Internet Security Controls, and the International Organization for Standardization. We use these frameworks, together with information collected from internal assessments, to develop policies for the use of our information assets (for example, TI business information and information resources such as mobile phones, computers and workstations), access to specific intellectual property or technologies, and protection of personal information. We protect these information assets through industry-standard techniques, such as multifactor authentication and malware defenses. We also work with internal stakeholders across the company to integrate foundational cybersecurity principles throughout our organization's operations, including the employment of multiple layers of cybersecurity defenses, restricted access based on business needs, and integrity of our business information. Throughout the year, we also regularly train our employees on cybersecurity awareness, confidential information protection and simulated phishing attacks.

companyName: Rafael Holdings, Inc.

ticker: RFL


text: The board of directors, as a whole, has oversight responsibility for our strategic and operational risks. The audit committee assists the board of directors with this responsibility by reviewing and discussing our risk assessment and risk management practices, including cybersecurity risks, with members of management. The audit committee, in turn, periodically reports on its review with the board of directors. Management is responsible for day-to-day assessment and management of cybersecurity risks and reports regularly to the audit committee.


text: Cybersecurity Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers, and violation of data privacy or security laws.

companyName: Toughbuilt Industries, Inc


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy, and compliance issues are identified and addressed through a multi-faceted approach including third-party assessments, internal IT Audits, IT security, governance, risk, and compliance reviews. To defend, detect, and respond to cybersecurity incidents, we, among other things: conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data policies, perform penetration testing using external third-party tools and techniques to test security controls, conduct employee training, monitor emerging laws and regulations related to data protection and information security (including our consumer products) and implement appropriate changes.


text: We have implemented incident response and breach management processes. In the event of an incident, the Cybersecurity team assesses, among other factors, safety impact, supply chain and manufacturing disruption, data and personal information loss, business operations disruption, projected cost, and potential for reputational harm, with support from external technical, legal and law enforcement support, as appropriate.


text: Security events and data incidents are evaluated, ranked by severity, and prioritized for response and remediation. Incidents are evaluated to determine materiality as well as operational, business, and privacy impact.


text: We occasionally engage third parties and consultants to assess our internal cybersecurity programs and compliance with applicable practices and standards.


text: Our risk management program also assesses third-party risks, and we perform third-party risk management to identify and mitigate risks from third parties such as vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers when handling and/or processing our employee, business, or customer data. In addition to new vendor onboarding, we perform risk management during third-party cybersecurity compromise incidents to identify and mitigate risks to us from third-party incidents.


text: Because we develop, process, store, and transmit large amounts of data, including confidential, classified, sensitive, proprietary, and business and personal information, failure to prevent or mitigate data loss, theft, misuse, unauthorized access, or other security breaches or vulnerabilities affecting our systems could: expose us or our customers to a risk of loss, disclosure, or misuse of such information; adversely affect our operating results; result in litigation, liability, or regulatory action (including under laws related to privacy, data use, data protection, data security, network security, and consumer protection); deter customers or sellers from using our products, and services; and otherwise harm our business and reputation. We use third-party technology and systems for a variety of reasons, including, without limitation, encryption and authentication technology, employee email, content delivery to customers, back-office support, and other functions. Although we have developed systems and processes that are designed to protect our data and prevent such incidents, including systems and processes designed to reduce the impact of a security breach at a third-party vendor or customer, such measures cannot provide absolute security and may fail to operate as intended or be circumvented.