text: is responsible for the development, operation, and maintenance of our information security program and controls. The Director has extensive experience in the information technology field, and cybersecurity knowledge and skills gained through relevant experiences. The Director and Chief Financial Officer regularly review potential risks and measures implemented by the Company to identify and mitigate cyber security risks.


text: We are committed to appropriate cybersecurity governance and oversight. Our board of directors oversees management's processes for identifying and mitigating risks, including cybersecurity and information security risks. Our audit committee oversees risks related to cybersecurity and reports to the full board regarding its activities, including those related to cybersecurity.

companyName: Cardiff Lexington Corp

ticker: CDIX

secItem: Item 1C


text: Although we may face a number of cybersecurity risks in connection with our business, we have not experienced any cybersecurity threats, incidents, or challenges that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, " Risk Factors," in this Governance

companyName: Xenetic Biosciences, Inc.

ticker: XBIO


text: As part of our information technology needs, we have contracted with NBP to provide certain equipment and services related to telephone systems, servers, network access, desktop and end-user support, and back-office equipment support. Inherent in the services provided by NBP are its efforts to assess, identify and manage risks from cybersecurity threats related to the specific equipment and services it provides us. We have no independent internal processes for addressing cybersecurity threats and have not integrated any processes provided by NBP in assessing, identifying and managing risks from cybersecurity threats into our overall risk management system; however, we receive and review monthly reports from NBP on user access changes to our electronic accounting file share folder and address any concerns immediately.

companyName: U. S. Premium Beef, LLC


text: We are not aware of any risks from cybersecurity threats or previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Board of Directors has the responsibility to require USPB to have adequate oversight of risks from cybersecurity threats. Management's role in assessing and managing our risks from cybersecurity risks has similarly been limited to the engagement of NBP to provide information technology equipment and services. If NBP were to inform us of a cybersecurity incident, that incident would be reported to the Board if material in nature.


text: The Company recognizes the importance of cybersecurity in safeguarding its information systems and data. Our cybersecurity measures primarily rely on standard security protocols provided by Microsoft Outlook and OneDrive, which include encryption, multi-factor authentication, and access controls to protect against unauthorized access and data breaches.

companyName: Coeptis Therapeutics Holdings, Inc.

ticker: COEP


text: Given the evolving nature of cybersecurity threats, the Company monitors its systems for potential vulnerabilities and relies on third-party security updates and patches to mitigate risks. While we believe our current measures are appropriate for our operations, we acknowledge that no security system is entirely immune from potential threats, including phishing attacks, malware, ransomware, and unauthorized access.


text: The Company's executive management is responsible for overseeing cybersecurity risks and ensuring compliance with our security practices. At this time, the Company does not have a dedicated cybersecurity team but relies on its IT service providers and Microsoft's security framework for system protection and incident response.


text: Despite these measures, the Company may be vulnerable to cybersecurity incidents that could disrupt operations, compromise sensitive data, or result in financial or reputational harm. Any material cybersecurity incident would be assessed and disclosed as necessary.


text: We use, store and process data for and about our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2025.

companyName: Rapid Line Inc.

ticker: RPDL


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office and Google enterprise to provide protection against cybersecurity threats.


text: We conducted a NIST risk assessment and performed as needed updates to our risks to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We engage a managed service provider ("MSP") and other third parties in connection with our cybersecurity and information technology risk assessment processes and our MSP also assists us with managing and monitoring our network and local computer systems. These service providers assist us in designing and implementing our cybersecurity policies and procedures, as well as monitoring and testing our safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through communications.

companyName: Empery Digital Inc.

ticker: EMPD


text: Risk Management and Strategy Our information security program is designed to detect, respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our systems from cybersecurity threats, we use various security tools that help prevent, escalate, investigate, and recover from identified vulnerabilities and security incidents in a timely manner.

companyName: MAGELLAN COPPER & GOLD Corp

ticker: MAGE


text: Our board of directors is responsible for oversight and risk management in genera. Our board of directors receives periodic updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.


text: Identification —monitor information technology systems and detect deviations from normal operations and see if they represent actual security incidents. When an incident is discovered, collect additional evidence, establish its type and severity, and document the incident.

companyName: WYTEC INTERNATIONAL INC

ticker: WYTC


text: Containment —perform short-term containment, for example by isolating the network segment that is under attack; then focus on long-term containment, which involves temporary fixes to allow systems to be used in production, while rebuilding clean systems.


text: Recovery —bring affected production systems back online carefully, to prevent additional attacks. Test, verify, and monitor affected systems to ensure they are back to normal activity.


text: Lessons learned —no later than two weeks from the end of the incident, perform a retrospective of the incident. Prepare complete documentation of the incident, investigate the incident further, understand what was done to contain it, and determine whether anything in the incident response process could be improved.


text: Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect our clients, customers, employees, and vendor information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents. Our current cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats.

companyName: SATIVUS TECH CORP.

ticker: SATT


text: CEO is responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside consulting firm to monitor activity and advise the company of cybersecurity protocols.


text: We engaged and used the advice of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers have recommended periodic evaluations of the work stations.


text: FMA/2FA, this is our first AND most important first line of defense, no one should have MFA bypassed or disabled, with no exceptions.


text: Email Banner for external emails. This banner assists us to identify any phishing / impersonation email and cannot be bypassed. Conditional Access Policy (CAP): Rejects connections to Exchange Online from un-authorized countries.


text: We are further enhancing this control by implementing ACL's (access lists) in our CRM and ERP systems and any other mission critical platform.


text: ALL platforms should have MFA enforced, any platform not supporting MFA in 2024 is deemed high-risk and immediately replaced as it is obsolete and poses high-risk to the Company.


text: of the date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation and cause damage to our relationships,, as well as prevent us from attracting new clients / customers. and / or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.


text: In the ordinary course of our business, we receive, process, use, and store digitally large amounts of data, including customer data as well as confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to us and our business operations. To this end, we have implemented policies designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them. While we have taken measures designed to protect the security of the confidential and personal information under our control, we cannot provide absolute assurance that any security measures that we or our third-party service providers have implemented will be effective against current or future security threats.

companyName: CLOUDASTRUCTURE, INC.

ticker: CSAI


text: Our cybersecurity program is managed by our executive management team, including our Chief Executive Officer and Chief Technology Officer, and includes mechanisms, controls, technologies, systems, policies, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the systems and data residing in them. We consult with outside advisors and experts to assist us with assessing, identifying, and managing cybersecurity risks.


text: We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Our board of directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. We intend to provide our board of directors with periodic updates on cybersecurity and information technology matters and related risk exposures from management.


text: All customer and user information is stored directly within our own data centers, or Google Cloud and Amazon Web Services platforms, which provides market-leading data security for their centralized servers. On occasion, limited amounts of customer information such as names and emails are exported from these systems solely for the purposes of accounting and filings and is never shared outside of the Company and its contracted accounting consultants, which are under confidentiality agreements. Highly sensitive customer payment information is generally never revealed to the Company in any capacity and is hidden by payment processors for security purposes, with the sole exception being accounts who provide written or digital copies of credit card information for payment processing on agreed upon terms. Such information is secured on Company computers and never distributed.


text: Risk Management and Strategy We recognize the importance of cybersecurity in protecting our operations, customer information, and proprietary data. We are committed to implementing robust security measures to mitigate the risk of cyber incidents that could potentially disrupt our business operations or compromise the integrity of our data.

companyName: AppTech Payments Corp.

ticker: APCX


text: Engage Third-parties on Risk Management Due to the difficulties and evolving nature of cybersecurity threats, AppTech engages with external experts, including cybersecurity consultants and auditors to evaluate and test its risk management systems. These relationships allow us to utilize specialized knowledge and insights, ensuring our strategies and processes remain in-line with current best practices. These third-parties provide the Company with regular audits, threat assessments, and consultations on security enhancements. Also, during onboarding and periodically thereafter, we conduct trainings for the Company's employees, contractors, and temporary workers about cybersecurity risks, including sending test phishing emails for training purposes to all users of the Company's email system.


text: Our cybersecurity strategy encompasses a comprehensive suite of measures designed to protect our systems and data from unauthorized access, use, alteration, or destruction. These measures include, but are not limited to: Implementation of advanced cybersecurity technologies, including firewalls, intrusion detection systems, and encryption protocols, to safeguard our network and data. Regular security assessments and penetration testing conducted by external experts to identify and remediate potential vulnerabilities. Establishing and maintaining incident response and recovery plans to ensure timely and effective responses to any cybersecurity incidents.


text: Risks from Cybersecurity Threats Like other companies in our industry, we face several cybersecurity risks in connection with our business. Although such risks have not materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, to date, we have, from time to time, experienced threats to and security incidents related to our data and systems, including denial of service and phishing attacks.


text: Risk Management Personnel managing our cybersecurity risks rests with our third-party provider, the Company's Director of Information Technology and Director of Software Engineering (referred to as "IT"). Their knowledge, experience and relationship with our third-party vendor are instrumental in developing and executing our cybersecurity strategies.


text: IT Team provides updates to upper Management on a routine basis or as potentially critical risks from cybersecurity threats or incidents arise. In addition, the audit committee is notified of any material cybersecurity concerns that may impact internal controls, data storage, or the integrity of our financial reporting.


text: Despite our diligent efforts to secure our systems and data, we acknowledge that no cybersecurity measures can completely eliminate the risk of cyber incidents. The evolving nature of cyber threats means that we must continually adapt our cybersecurity strategies to address new and emerging risks.


text: In recognition of these risks, we have implemented a comprehensive risk management framework that includes: • Continuous monitoring of our networks and systems for signs of unauthorized activity. • Regular updates to our cybersecurity measures to address new vulnerabilities and threats. • Collaboration with industry partners and government agencies to share information on threats and best practices for cybersecurity. • Maintaining cyber insurance to mitigate the financial impact of potential cybersecurity incidents.


text: Potential Impact of Cybersecurity Incidents We recognize that a significant cybersecurity incident could have material adverse effects on our business, including operational disruptions, financial losses, legal liabilities, and damage to our reputation.


text: Such incidents could also result in the loss of proprietary information or the exposure of sensitive customer data, leading to further financial and reputational harm.


text: In conclusion, while AppTech Payment Corp is committed to employing comprehensive cybersecurity measures to protect against cyber threats, there are inherent risks associated with cybersecurity that could impact our business. We continue to monitor our cybersecurity landscape actively and adapt our defenses to mitigate these risks as much as possible.


text: Risk management and strategy We are increasingly dependent on sophisticated software applications and computing infrastructure to conduct key operations. We depend on both our own systems, networks, and technology as well as the systems, networks and technology of our contractors, consultants, vendors and other business partners.

companyName: Phio Pharmaceuticals Corp.

ticker: PHIO


text: Cybersecurity Program Given the importance of cybersecurity to our business, we maintain a robust cybersecurity program to support both the effectiveness of our systems and our preparedness for information security risks. This program includes a number of safeguards, such as: continuous monitoring for internal and external threats; regular evaluations of our cybersecurity program, including periodic external reviews; and industry benchmarking. We are implementing cybersecurity awareness trainings for all employees. Our program leverages standard industry frameworks to strengthen our program effectiveness and reduce cybersecurity risks.


text: controls and processes employed to assess, identify and manage material risks from cybersecurity threats are implemented and overseen by the use of consultants as the Company does not have a full-time dedicated cybersecurity position in the Company. Our consultants have over 20 years of experience in information technology matters and are responsible for the day-to-day management of the cybersecurity program, including the prevention, detection, investigation, response to, and recovery from cybersecurity threats and incidents, and are regularly engaged to help ensure the cybersecurity program functions effectively in the face of evolving cybersecurity threats. The Board of Directors (the " Board ")


text: As of December 31, 2024, we are not aware of any material risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected the business strategy, results of operations or financial condition of the Company or are reasonably likely to have such a material effect. While we maintain a robust cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement adequate security measures. For additional information, see "Item 1A—Risk Factors."


text: Risk Management and Strategy We have recently implemented additional security measures as part of an evolving cybersecurity posture and will continue to devote resources to address security vulnerabilities in an effort to prevent cyberattacks and mitigate the damage that could result from such an attack. All employees have recently begun receiving cybersecurity training and other education regarding their use of computers, information technology, and sensitive data including specifically how to recognize common attack strategies. As the Company does not have a physical office location, it does not have a local network or in-house servers and proprietary applications. We therefore utilize third parties applications and resources to support our information technology ("IT") needs. All applications utilized by the Company are Software as a Service ("SaaS") offerings.

companyName: CNS Pharmaceuticals, Inc.

ticker: CNSP


text: As our applications are developed and managed by third parties, we are dependent on these providers for many functions including disaster recovery during a disaster or cyber incident. Our goal is to only utilize the most secure and trusted providers for our IT needs. Our business continuity plans are evaluated against evolving security and service level standards, which includes evaluating those cybersecurity threats associated with our use of key third party service providers.


text: During fiscal year 2023 we began to deploy and utilize enterprise scale technology to support an appropriate cybersecurity posture including: endpoint detection and response, firewalls, security information and event management, email security, multifactor authentication, and vulnerability management. As part of the service offering from our outsourced IT security services provider, cybersecurity related alerts will be issued to us as relevant situations develop. These alerts will be evaluated in concert with our IT provider and in the event an alert requires action within our environment, such actions will be taken promptly. Our process and cybersecurity posture will continue to be refined based on the results of periodic cybersecurity assessments conducted jointly with our IT provider. We have recently begun reporting on cybersecurity in reports to the Board of Directors and will continue to do so.


text: To operate our business, we rely upon certain third-party service providers to perform a variety of functions, such as outsourced business critical functions, clinical research, professional services, SaaS platforms, managed services, cloud-based infrastructure, content delivery, encryption and authentication technology, corporate productivity services, and other functions. We are developing certain vendor management processes designed to help to manage cybersecurity risks associated with our use of certain of these providers. Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider related to the services they provide and/or the information they process, conducting security assessments, conducting on-site inspections, requiring their completion of written questionnaires regarding their services and data handling practices, and conducting periodic re-assessments during their engagement. For our largest third-party provider, our Contract Research Organization ("CRO") which is helping us manage our global trial of Berubicin, we are currently conducting a security assessment and review including their cybersecurity practices, protocols and protections, handling of information protected by HIPAA, and physical security.


text: Board of Directors is responsible for oversight of cybersecurity risk. Our Chief Financial Officer and Chief Executive Officer are the members of management responsible for managing and assessing our cybersecurity practices and have recently commenced reporting on such practices and risks. The plan for the future is that they will continue to report to the Board on cybersecurity at least quarterly. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Board of Directors and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken.


text: Company recognizes the critical importance of cybersecurity in protecting our sensitive data, intellectual property, and the personal information of our employees and partners. We have implemented a comprehensive cybersecurity risk management program that includes the following key components:

companyName: Sunshine Biopharma Inc.

ticker: SBFM


text: Assessment and Management conduct regular risk assessments to identify and evaluate potential cybersecurity threats and vulnerabilities. Our risk management framework is aligned with industry standards such as the NIST Cybersecurity Framework (CSF) and ISO 27001. We continuously monitor and update our cybersecurity measures to address emerging threats and ensure the protection of our assets.


text: management oversees our cybersecurity risk management efforts. Our senior management team is actively involved in cybersecurity policies, procedures and strategy development.


text: Response and Recovery have a robust incident response plan in place to quickly detect, respond to, and recover from cybersecurity incidents. We collaborate with external cybersecurity experts and law enforcement agencies to enhance our incident response capabilities.


text: Training and Awareness provide ongoing cybersecurity training and awareness programs for all employees to promote a culture of security. Our training programs cover topics such as phishing prevention, secure data handling, and recognizing potential cyber threats.


text: assess the cybersecurity practices of our third-party vendors and partners to ensure they meet our security standards. Our contracts with third parties include provisions for cybersecurity requirements and incident reporting.


text: comply with all relevant cybersecurity regulations and standards, including the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation (GDPR). We regularly review and update our cybersecurity policies and procedures to ensure compliance with evolving regulatory requirements.


text: in Cybersecurity continuously invest in advanced cybersecurity technologies, including threat detection and prevention systems, encryption, and secure access controls. Our cybersecurity is part of our overall budget which is reviewed and approved by our board of directors to ensure adequate resources are allocated to protect our assets. the past fiscal year, we experienced no cybersecurity incidents.


text: Currently, our Chief Operating Officer is expected to lead our cybersecurity risk assessment and management processes and oversee their implementation and maintenance. Our Chief Operating Officer will be tasked with staying informed about, and monitoring the prevention, mitigation, detection and remediation of cybersecurity incidents through his management of, and participation in, the cybersecurity risk management and strategy processes we plan to develop and as described above, including the operation of an incident response plan, and report to the Board of Directors on any appropriate items.

companyName: Chilean Cobalt Corp.

ticker: COBA


text: The Company has not adopted any insider trading policies and procedures governing the purchase, sale, and/or other dispositions of the Company securities yet, as we are still in the restructuring process. We however plan to adopt this soon once the restructuring process is done.

companyName: Aphoenity International Holdings Inc.


text: In the ordinary course of business, we receive, process, use, and store digitally large amounts of data, including confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to us and our business operations. To this end, we have implemented policies designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them. While we have taken measures designed to protect the security of the confidential and personal information under our control, we cannot provide absolute assurance that any security measures that we or our third-party service providers have implemented will be effective against current or future security threats.

companyName: Mobiquity Technologies, Inc.

ticker: MOBQ


text: Our cybersecurity program is managed by our Chief Technology Officer. Most of the information generated and collected by us is stored and maintained by third-party vendors and service providers, who have demonstrated their own cybersecurity protocols which our management believes to be adequate for protecting our digital files in their possession. Our CTO is responsible for assessing and managing cybersecurity risks. Our CTO has cybersecurity expertise. We have no formal cybersecurity policies and processes in place; however, the Board and management believe cybersecurity represents an important component of our overall approach to risk management and oversight.


text: We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Our Board of Directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. We provide our Board of Directors with periodic updates on cybersecurity and information technology matters and related risk exposures from management.


text: Most information is stored directly to Amazon Web Services platforms, which provide market-leading data security for their centralized servers. Our company follows best practices for security, indemnity and compliance. All connections in and out of our remote services are made over secure connections, including https and Secure Shell (SSH) protocols. On occasion, limited amounts of information such as names and emails are exported from our systems solely for the purposes of accounting and filings and is not shared outside of our company and its contracted accounting consultants, which are under confidentiality agreements.


text: Cybersecurity threats have not materially affected our company, including its business strategy, results of operations or financial condition. Our company is not aware of any material security breach to date. Accordingly, our company has not incurred any expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations. There can be no assurance that our third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be effective in protecting our systems and information.


text: Risk Management and Strategy One of the functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. The Board receives updates as needed from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition As of December 31, 2024, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: ATHENA GOLD CORP

ticker: AHNRF


text: Risk Management and Strategy The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. The Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that the Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.

companyName: DarkPulse, Inc.

ticker: DPLS


text: During the year ended December 31, 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.


text: Internal Cybersecurity Team Our internal cybersecurity team, led by our IT Manager, is responsible for implementing, monitoring, and maintaining cybersecurity and data protection practices across the company. Our IT Manager has over 14 years in cybersecurity work experience and managing all levels of the Company's on-premises and cloud infrastructure.

companyName: Koil Energy Solutions, Inc.

ticker: KLNG


text: Company currently manages its cybersecurity risk through a variety of practices applicable to all users of its information technology and assets, including our officers, directors, contractors, and vendors. These practices include the use of passwords protocols, third party firewalls, antivirus protections, and secure cloud-based data storage. The Company also promotes general security awareness through basic user access controls and regular internal monitoring.

companyName: Cluster Group Holdings Ltd Co

ticker: CLUS


text: Board of Directors oversees cybersecurity risks and performs an annual review of the Company's cybersecurity program, including management's actions to identify, detect, and respond to potential threats.


text: of the date of this report, the Company has not experienced any material cybersecurity incidents, nor has it identified any material cybersecurity threats that have affected or are reasonably likely to materially affect its business strategy, results of operations, or financial condition.


text: Cybersecurity Risk Management, Strategy, and Governance We aim to deploy a cyber-risk management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our data and information systems. The Company currently manages its cybersecurity risk through a variety of practices that are applicable to all users of our information technology and information assets, including our officers and directors, contractors, and vendors. The Company uses a combination of technology and monitoring to promote security awareness and prevent security incidents, including network and passwords protocols, third party firewalls, and antivirus protections. Our Board of Directors performs an annual review of our cybersecurity program, including management's actions to identify and detect threats.

companyName: Eline Entertainment Group, Inc.

ticker: EEGI


text: Cybersecurity Risk Management and Strategy We recognize the importance of cybersecurity in maintaining the integrity of our systems and data. Our IT Director oversees cybersecurity risk management, conducting assessments as needed based on identified risks or evolving security practices. We implement security measures such as firewalls, encryption, and access controls to help protect against unauthorized access.

companyName: BIOREGENX, INC.

ticker: BRGX


text: To date, we have not experienced any material cybersecurity incidents affecting our operations or financial condition. We continue to monitor risks and adjust our security measures as necessary.


text: Cybersecurity Governance Cybersecurity oversight is managed by our IT Director, who is responsible for evaluating risks and implementing security measures. We do not have a dedicated board committee for cybersecurity, but executive leadership is informed of cybersecurity matters as needed.


text: Risk Management and Strategy Our website is monitored by a third party to check if our website is secure. We are prepared to inform all parties necessary if any breach of cyber-security were to happen. We have never had this problem and so we have never had to inform consultants, auditors, or other third parties.

companyName: IIOT-OXYS, Inc.

ticker: ITOX


text: We have never had a breach of cyber-security at any point in our past. The risk to us of cybersecurity threats is in data storage of customer questions and emails. A breach of customers' data could negatively materially affect our public trust and could result in loss of customers and revenue.


text: Our management monitors our websites and online accounts frequently to manage risks associated with cyber-security risks. Our management communicates with our board on matters of cybersecurity but, has not had to inform them of any breaches thus far.


text: Risk Management and Cybersecurity We are committed to robust cybersecurity measures to protect our data and systems. Our policies include regular risk assessments, employee training, and incident response plans. The board oversees our cybersecurity strategy, ensuring appropriate risk mitigation. Technical controls like firewalls and encryption safeguard our information, while continuous monitoring allows prompt incident response. In case of a cybersecurity incident, we have established procedures for reporting, investigating, and mitigating impacts, with timely disclosure to stakeholders.

companyName: LEGEND SPICES, INC.


text: We use, store, and process limited data related to our operations. As of the date of this filing, we have not yet implemented a formal cybersecurity risk management program designed to identify, assess, and mitigate risks from cybersecurity threats. We intend to implement a cybersecurity risk management program as our business operations and technology infrastructure evolve.

companyName: Natics Corp.

ticker: NTCS


text: Cyber Risk Management and Strategy We plan to implement and maintain a cybersecurity risk management program under the oversight of our Board of Directors. Once implemented, this program will include systematic processes for identifying, assessing, and mitigating cybersecurity risks and will be integrated into our overall risk management processes. We intend to adopt a risk-based approach to managing cyber threats, supported by commonly used cybersecurity technologies, such as cloud-based monitoring and threat detection tools.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing.


text: As part of this effort, we also intend to implement controls to assess and manage risks associated with third-party service providers who may have access to our systems or data. This may include review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: We expect to regularly evaluate and enhance our cybersecurity policies and procedures in response to emerging threats or developments affecting our industry.


text: In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our security controls include: Network

companyName: Dalrada Technology Group, Inc.

ticker: DHTI


text: traffic monitoring and filtering of Sentinelone to protect against phishing attacks hardening hardening barriers to hardware access of on prem hardware firewall in order to keep less secure hardware such as printers and scanners on their own VLAN to minimize attack vectors Board


text: of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters. The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities. Any significant cybersecurity matters, including those related to incidents, are escalated to the Board of Directors.


text: We face cybersecurity threats in the ordinary course of our business and have faced cybersecurity threats and breach attempts in the past. Such threats and breach attempts have not materially affected our business, strategy, results of operations or financial condition. At any given time, however, we may face known or unknown cybersecurity risks and threats that cannot be fully prevented or mitigated, and we may discover vulnerabilities in our cybersecurity programs. Therefore, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, information related to our clinical trials, and information of our employees, or Information Systems and Data.

companyName: AETHLON MEDICAL INC

ticker: AEMD


text: The Company's Chief Financial Officer, with assistance from our third-party cybersecurity vendors, is responsible for identifying, assessing, and managing our cybersecurity threats and risks. Together, they identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example, automated tools, evaluating our and our industry's risk profile, conducting real-time monitoring of certain systems, and implementing escalation protocols with our third-party cybersecurity vendors.


text: use third-party service providers to perform a variety of functions throughout our business, such as hosting companies and contract research organizations. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program includes conducting a risk assessment for certain vendors.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the Chief Executive Officer, and Chief Financial Officer.


text: Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including CFO/CEO. The CFO/CEO work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to the audit committee of the board of directors for certain cybersecurity incidents.


text: the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect our clients, customers, employees, and vendor information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: Stemtech Corp

ticker: STEK


text: cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats.


text: & COO and CEO are responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside consulting firm to monitor activity and advise the company of cybersecurity protocols.


text: undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including an annual risk review, policy reviews and revisions. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a cybersecurity incident by the administering of local and cloud based back up of files. and emails.


text: Email Banner for external emails. This banner assists us to identify any phishing / impersonation email and cannot be bypassed.


text: Conditional Access Policy (CAP): Rejects connections to Exchange Online from un-authorized countries. We are further enhancing this control by implementing ACL's (access lists) in our CRM and ERP systems and any other mission critical platform. ALL platforms should have MFA enforced, any platform not supporting MFA in 2024 is deemed high-risk and immediately replaced as it is obsolete and poses high-risk to the Company.


text: date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation and cause existing Independent Business Partners (IBPs or distributors) / customers to discontinue, as well as prevent us from attracting new clients / customers. and / or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.


text: Risk Management and Strategy We acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: VitaNova Life Sciences Corp

ticker: VNOV


text: Inc. has implemented basic but targeted cybersecurity risk management measures appropriate for its early-stage operations and limited digital footprint. As a digital marketplace operating in a primarily cloud-based environment, the Company's exposure to cybersecurity threats is continuously monitored by executive management.

companyName: Mercalot Inc.


text: The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage. These vendors maintain their own cybersecurity programs, which include network protection, access controls, and incident response procedures. While Mercalot Inc. does not yet employ a dedicated IT security team, its directors are actively involved in overseeing operational and technological risk, including cybersecurity.


text: Executive management, consisting of the Chief Executive Officer and the Board, is responsible for identifying, evaluating, and responding to potential cyber risks. The Company periodically reviews its internal systems and third-party vendor protocols to assess vulnerabilities and ensure secure handling of sensitive business information.


text: To date, Mercalot Inc. has not experienced any material cybersecurity incidents, and no specific threat has materially affected or is reasonably likely to materially affect the Company's business strategy, operations, or financial condition. However, the Company recognizes that its reliance on cloud infrastructure and digital communication tools poses an ongoing cybersecurity risk and will continue to assess and strengthen controls as operations scale. Management plans to formalize its cybersecurity policies and implement internal training protocols as the business grows.


text: any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: Cybersecurity Risk Management, Strategy, and Governance The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. The Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that the Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.

companyName: Palisades Venture Inc.


text: During the year ended December 31, 2024, we did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.


text: The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage. These vendors maintain their own cybersecurity programs, which include network protection, access controls, and incident response procedures. While Londax Corp. does not yet employ a dedicated IT security team, its directors are actively involved in overseeing operational and technological risk, including cybersecurity.

companyName: Londax Corp.

ticker: LDXC


text: To date, Londax Corp. has not experienced any material cybersecurity incidents, and no specific threat has materially affected or is reasonably likely to materially affect the Company's business strategy, operations, or financial condition. However, the Company recognizes that its reliance on cloud infrastructure and digital communication tools poses an ongoing cybersecurity risk and will continue to assess and strengthen controls as operations scale. Management plans to formalize its cybersecurity policies and implement internal training protocols as the business grows.


text: As of May 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: The Company has implemented processes designed to identify, assess, and manage material risks from cybersecurity threats. These include system monitoring, vulnerability assessments, employee training, and incident response planning. The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage, and these vendors maintain their own cybersecurity programs, including network protection, access controls, and incident response procedures.

companyName: DeltaSoft Corp


text: Our Board of Directors oversees cybersecurity risk as part of its overall risk management responsibilities, and management provides periodic updates on cybersecurity matters. The Company has adopted an incident response plan to ensure timely detection, containment, and remediation of potential threats. During the fiscal year ended March 31, 2025, the Company did not experience any material cybersecurity incidents.


text: Information Technology are committed to using technology to improve our competitive position. We depend on a variety of information systems and technologies (including cloud technologies) to manage the operations of our growing customer base. Our core business systems consist mostly of purchased and licensed software programs that integrate together and with our web-based radio automation systems.

companyName: Transglobal Management Group, Inc.

ticker: TMGI


text: manage data security and privacy at the highest levels. Our Chief Executive Officer (CEO) is actively engaged in oversight of cybersecurity and IT infrastructure and works with outsourced vendors to manage all network operations. Our vendors keep our CEO informed on cybersecurity and privacy matters throughout the year. We have strengthened our data protection capabilities through investments in our infrastructure hardware and software. During the fiscal year ended May 31, 2025, the Company did no t experience any material cybersecurity incidents.


text: did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.

companyName: Neolara Corp.


text: We are an early-stage company with limited operations, yet we recognize that we are subject to various cybersecurity risks that could adversely affect our business. Cyberattacks on companies around the world continue to increase, which cause operational failures, compromised sensitive corporate or customer data, and/or result in significant financial damages. These attacks occur over the internet, through malware, viruses or attachments to e-mails, or through inside actors with access to systems within the organization.

companyName: GenFlat Holdings, Inc.

ticker: GFLT


text: Our Chief Executive officer is the sole member of our Board of Directors, and he is responsible for oversight of cybersecurity risk. Our Chief Executive Officer, along with our President is responsible for the ongoing managing and assessing of our cybersecurity practices and reporting on such practices and risks. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Board of Directors and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken. We believe we are appropriately staffed (as supported by IT consultants and service providers, as needed) to support a healthy cybersecurity posture given our Company's size and scope.


text: The Board of Directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects. While none of our directors has formal professional certifications in cybersecurity, several members of the Board have experience overseeing information technology and enterprise risk management in prior executive or board roles. The Board receives periodic updates on cybersecurity matters as part of its overall risk oversight responsibilities. Day-to-day responsibility for identifying and managing cybersecurity risks rests with our Director of IT Security & Future Solutions and his information security team. The team is responsible for monitoring our networks, systems, and data, implementing technical safeguards, conducting employee training, and coordinating incident response procedures.

companyName: FRANKLIN WIRELESS CORP

ticker: FKWL


text: Management provides regular reports to the Audit Committee, generally on an annual basis, or more frequently as needed covering: the Company's cybersecurity strategy and policies, recent threat environment developments, and any cybersecurity incidents and responses.


text: In addition, in the event of a significant cybersecurity incident, the Chief Operating Officer will promptly inform the Chief Executive Officer and General Counsel, who in turn will notify the Chair of the Audit Committee and the Board as appropriate.


text: Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects. We ordinarily do not engage assessors, consultants, auditors or other third parties in connection with such oversight.


text: As of June 30, 2025, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon.


text: Risk Management and Strategy As a company selling products, including those for defense applications, we may be the target of cyber-attacks from a variety of threat actors. Cybersecurity threats include attacks on, or other attempts to infiltrate, our information technology (IT) infrastructure and the IT infrastructure of our customers, suppliers, subcontractors and other third parties, attempting to gain unauthorized access to our confidential or other proprietary information, classified information, or information relating to our employees, customers, and other third parties, or to disrupt our systems or the systems of our customers, suppliers, subcontractors, and other third parties. Cybersecurity threats also include attempts to infiltrate our products or services, including attacks targeting the security, confidentiality, integrity and/or availability of the hardware, software and information installed, stored or transmitted in our products, including after the purchase of those products and when they are incorporated into third-party products, facilities, or infrastructure. Our Cybersecurity Program.

companyName: PRECISION OPTICS CORPORATION, INC.

ticker: POCI


text: Our products and services are normally classified as EAR 99 by the U.S. government, but our defense customers generally require compliance with the International Traffic in Arms Regulation ("ITAR"). Moreover, our products sold for defense applications are integrated with our customers' products and these customers may provide us with Controlled Unclassified Information (CUI) that requires, safeguarding and dissemination controls in accordance with laws, regulations, or Government-wide policies. Given the nature of our business and the cybersecurity risks we face, we have instituted cybersecurity measures for identifying, assessing, and managing cybersecurity risks, which include material risks from cybersecurity threats to our internal systems, our products, services and programs for customers, and our supply chain.


text: The goals of our enterprise cybersecurity program align with the National Institute of Standards and Technology (NIST) standards, among others. The program includes processes and controls for the deployment of new IT systems by the Company and controls over new and existing system operations. We, or contracted third parties, monitor and conduct regular testing of these controls and systems, including vulnerability management through active discovery and testing to regularly assess patching and configuration status. In addition, we require our employees to complete data security training, and we regularly conduct simulated phishing and cyber-related communications. Incident Response.


text: We engage third party service providers to expand the capabilities and capacity of our cybersecurity program, including for design, monitoring and testing of the program's risk prevention and protection measures, and process execution including incident detection, investigation, analysis and response, eradication, and recovery.


text: Our Chief Financial Officer and Vice President of Engineering meet regularly with third party service providers to review their performance and progress towards our cybersecurity initiatives. Program Assessment.


text: We continuously evaluate and seek to improve and mature our cybersecurity processes against government standards. Our cybersecurity program is regularly assessed through management self-evaluation and ongoing monitoring procedures to evaluate our program effectiveness, including assessments associated with internal controls over financial reporting as well as vulnerability management through active discovery and testing to validate patching and configuration. As cybersecurity threats are continuously evolving, we also periodically engage with third parties to perform maturity assessments of our program to identify potential risk areas and improvement opportunities. This includes assessment of our overall program, policies and processes, compliance with regulatory requirements and an overall assessment of key vulnerabilities. We use these assessments to supplement our own evaluation of the overall health of our program and target improvement areas.


text: Board Oversight and Management's Role Our Board of Directors has primary oversight responsibility for enterprise cybersecurity risks. The Audit Committee also considers enterprise cybersecurity risks in connection with its financial and compliance risk oversight role. The Chief Financial Officer regularly reports to the Board of Directors on the status of the Company's cybersecurity program and provides the Board with the annual assessment by a third party on the Company's cybersecurity program.


text: Risk management and strategy Cybersecurity risk management is an important part of the Company's overall risk management efforts. We maintain a comprehensive enterprise-wide information security program that comprises policies and controls designed to identify, safeguard against, detect, respond to, mitigate and manage reasonably foreseeable cybersecurity risks and threats. Our approach utilizes diverse security tools to prevent, identify, investigate, resolve and recover from vulnerabilities and security incidents. These include, but are not limited to, internal reporting, monitoring and detection tools. We use a collaborative, enterprise-wide strategy to address cybersecurity risks and allocate significant resources to our cybersecurity and risk management processes, which efforts are intended to adapt to the evolving cybersecurity landscape and promptly address emerging threats.


text: Our cybersecurity risk management program aligns with the National Institute of Standards and Technology (NIST) framework and is organized into five key functions: identification, protection, detection, response and recovery. We regularly assess the threat landscape and employ a layered cybersecurity strategy to prevent, detect and mitigate threats.


text: We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our security controls include: Network traffic monitoring and filtering Usage of Sentinelone Proofpoint to protect against phishing attacks OS/Hardware hardening OS/Software hardening Physical barriers to hardware access


text: Usage of on prem hardware firewall VLANs in order to keep less secure hardware such as printers and scanners on their own VLAN to minimize attack vectors Our Board of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters. The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities. Any significant cybersecurity matters, including those related to incidents, are escalated to the Board of Directors.


text: The board of directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage and mitigate those risks. The audit committee of the board of directors (the "Audit Committee") has been designated by our board of directors to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our management. The board of directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects.

companyName: iPower Inc.

ticker: IPW


text: of June 30, 2025, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon. For more information about these risks, please see "Risk Factors - Risks Related to our Business and Products" in Item 1A of this Form10-K.


text: The Company recognizes the importance of managing cybersecurity risks to protect its information systems and data. We do not currently engage any third-party cybersecurity service providers.

companyName: Naploy Corp.


text: During the fiscal year ended July 31, 2025, the Company did not experience any material cybersecurity incidents that affected our operations, financial condition, or results.


text: The Company is committed to continuously improving its cybersecurity safeguards as part of overall risk management and will update these disclosures should circumstances change.


text: Cybersecurity risk management is part of the Company's overall risk management. Our cybersecurity risk management is designed to provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers. We rely on the cybersecurity protections of many of our third-party service providers. Our primary third-party service providers, utilize two (2) factor authorization as well as login and password protections with email verifications.

companyName: Guru App Factory Corp

ticker: GAFC


text: We maintain an incident response plan with a cross-functional team comprised of members of the information technology department, senior management and other appropriate individuals. The team is responsible for assessing and managing the cybersecurity incident response process and taking necessary corrective actions to mitigate and/or eliminate any issues. In connection with our new digital asset treasury strategy, we intend to appoint a Chief Information Security Officer in Fiscal 2026.

companyName: Forward Industries, Inc.

ticker: FWDI


text: Our control over the security posture of and ability to monitor the cybersecurity practices of third-party vendors and service providers, including Galaxy Digital and any digital asset custodians, exchanges, or validators we utilize, is limited and there can be no assurance that we can prevent, mitigate or remediate the risk of any compromise or failure in the cybersecurity infrastructure owned or controlled by third parties. Given our significant digital asset holdings, any cybersecurity breach affecting our third-party service providers could have a material adverse effect on our business, financial condition, and results of operations.


text: Our Board of Directors has overall responsibility for the oversight of risk management, including cybersecurity risks. The Board of Directors receives periodic briefings on cybersecurity matters, including key risks to the Company, recent developments and risk mitigation activities from management.


text: The Company faces risks from cybersecurity incidents that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. Cybersecurity incidents may target and compromise our systems, as well as confidential consumer, employer, and agent information that we store and manage in connection with some of our services. Any cybersecurity incidents affecting our computer networks, databases, third-party services or facilities could lead to potential interruptions of our operations or our ability to manage and report our operating results. Cybersecurity incidents may also result in the inappropriate use or disclosure of personal information, which could adversely affect consumers' confidence in our or our agents' business and expose us to liabilities. As a result, we are required to expend significant capital and other resources to protect us against these security breaches or to alleviate problems caused by these breaches. Intermex has experienced, and may continue to experience, cybersecurity threats in the normal course of its business. To date, however, these events have not had a material adverse effect on the Company's business, financial condition, results of operations, cash flows or reputation. See Item 1A. Risk Factors for additional information on how risks could materially affect the Company.

companyName: International Money Express, Inc.

ticker: IMXI


text: To mitigate cybersecurity risks, the Company has designed and implemented a Cybersecurity and Information Security Program ("Cybersecurity Program"), which is managed and executed by our Chief Information Security Officer ("CISO"). Our CISO has over 20 years of experience in information technology and cybersecurity primarily focused in the financial services industry. Our CISO is an experienced professional in technology, security, risk management, and compliance principles related to most United States and global financial services related regulations. Also, our CISO holds and maintains an active Certified Information Systems Security Professional certification as well as other relevant technical certifications. The Board of Directors of the Company (the "Board") generally oversees management's processes for identifying and mitigating risks we are exposed to, including cybersecurity risks, to help align our risk exposure with our strategic objectives, and has delegated specific oversight of cybersecurity risk management to the Board's Audit Committee. At least on a quarterly basis, or more frequently as may be warranted, the Board and the Audit Committee are apprised of cybersecurity incidents, if any, and initiatives related to any identified heightened risks. In addition, the CISO provides a comprehensive annual report on cybersecurity as well as quarterly updates to the Audit Committee, the Board and Internal Technology Steering Committee ("IT Steering Committee"), which is composed of members from our Executive Management team and key Information Technology ("IT") personnel.


text: The foundation of our Cybersecurity Program is based on recognized best practices and standards for cybersecurity and information technology that include the Center of Internet Security ("CIS") Controls Framework. The CIS Critical Security Controls Framework is a prioritized set of safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are mapped to and referenced by multiple legal, regulatory, and policy frameworks. This framework is employed to guide cybersecurity investments similar to third party audits and risk assessments. Our Cybersecurity Program employs a practical risk-based approach with a focus on addressing risk factors with the highest possible impact, high levels of likelihood, and least amount of existing compensating controls. Key risk factors, along with action plans and a status of identified matters are communicated to Executive Management, the Audit Committee and the Board as part of the CISO's quarterly updates. We have created and continually update, as required, a detailed cybersecurity incident response plan, which outlines the steps to be followed from incident detection to eradication, recovery and notification and which we implement in the event of a cybersecurity incident.


text: The Company engages a third party to perform an annual cybersecurity audit, which attests compliance with our Cybersecurity Program and industry best practices. The results of the third-party audit and internal vulnerability reviews are used by the CISO to guide investments in cybersecurity capabilities, solutions, and services to reduce the Company's exposure to cybersecurity risks. To aid managing, prioritizing and remediating any identified cybersecurity, software engineering, and IT infrastructure risks, the Company has implemented a risk register. The risk register is maintained by the IT Department and the status of remediation efforts is communicated to management during the quarterly meetings of the IT Steering Committee. Any significant, control failure, weakness or cybersecurity incident is reported by the CISO to the Company's incident response team and prioritized for remediation in accordance with our cybersecurity incident response plan. In addition to the third-party audit, we perform ongoing vulnerability reviews and conduct annual penetration testing of both external and internal systems. These tests are conducted by qualified external consultants and all findings are reported to the CISO and any deficiency is tracked until it has been fully remediated. A risk assessment is conducted regularly against NIST and CIS frameworks to determine gaps in controls that exposes the Company to a risk level that requires mitigation efforts. The Company requires in depth security monitoring continuous and real-time, detection of, and responses to cybersecurity threats and has partnered with industry leading managed service providers to accomplish this objective. Our cybersecurity partners maintain continuous security operations centers, threat intelligence, response capabilities, and incident response services. These services are tested for effectiveness annually as part of the internal penetration testing process. As mentioned above, the Company has implemented an incident response plan and incident response team that meets at least annually to assess breach scenarios and improve our response capabilities. All findings from testing, vulnerability analysis, breach scenarios, and event detection are reported quarterly by the CISO to the IT Steering Committee and Audit Committee.


text: The Company faces risks from cybersecurity incidents that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. Cybersecurity incidents may target and compromise our systems, as well as confidential consumer, employer, and agent information that we store and manage in connection with some of our services. Any cybersecurity incidents affecting our computer networks, databases, third-party services or facilities could lead to potential interruptions of our operations or our ability to manage and report our operating results. Cybersecurity incidents may also result in the inappropriate use or disclosure of personal information, which could adversely affect consumers' confidence in our or our agents' or digital partners' business and expose us to liabilities. As a result, we are required to expend significant capital and other resources to protect us against these security breaches or to alleviate problems caused by these breaches. Intermex has experienced, and may continue to experience, cybersecurity threats in the normal course of its business. To date, however, these events have not had a material adverse effect on the Company's business, financial condition, results of operations, cash flows or reputation. See Item 1A. Risk Factors for additional information on how risks could materially affect the Company.


text: The foundation of our Cybersecurity Program is based on recognized best practices and standards for cybersecurity and information technology that include the Center of Internet Security ("CIS") Controls Framework. The CIS Critical Security Controls Framework is a prioritized set of safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are mapped to and referenced by multiple legal, regulatory, and policy frameworks. This framework is employed to guide cybersecurity investments similar to third party audits and risk assessments. Our Cybersecurity Program employs a practical risk-based approach with a focus on addressing risk factors with the highest possible impact, high levels of likelihood, and least amount of existing compensating controls. Key risk factors, along with action plans and a status of identified matters are communicated to Executive Management, the Audit Committee and the Board as part of the CISO's quarterly updates. We have created and continually update, as required, a detailed cybersecurity incident response plan, which outlines the steps to be followed from incident detection to eradication, recovery and notification and which we will implement in the event of a cybersecurity incident, including the determination of materiality of cybersecurity incidents to ensure accurate and timely disclosures of those events in accordance with current regulatory requirements.


text: The Company engages a third party to perform an annual cybersecurity audit, which attests compliance with our Cybersecurity Program and industry best practices. The results of the third-party audit and internal vulnerability reviews are used by the CISO to guide investments in cybersecurity capabilities, solutions, and services to reduce the Company's exposure to cybersecurity risks. To aid managing, prioritizing and remediating any identified cybersecurity, software engineering, and IT infrastructure risks, the Company has implemented a risk register. The risk register is maintained by the IT Department and the status of remediation efforts is communicated to management during the quarterly meetings of the IT Steering Committee. Any significant, control failure, weakness or cybersecurity incident is reported by the CISO to the Company's incident response team and prioritized for remediation in accordance with our cybersecurity incident response plan. In addition to the third-party audit, we perform ongoing vulnerability reviews and conduct annual penetration testing of certain external and internal systems based on selected criteria as determined by Management in conjunction with external consultants. These tests are conducted by qualified external consultants and all findings are reported to the CISO and any deficiency is tracked until it has been fully remediated. A risk assessment is conducted regularly based on NIST and CIS frameworks to determine gaps in controls that exposes the Company to a risk level that requires mitigation efforts. The Company requires in depth security monitoring continuous and real-time, detection of, and responses to cybersecurity threats and has partnered with industry leading managed service providers to accomplish this objective. Our cybersecurity partners maintain continuous security operations centers, threat intelligence, response capabilities, and incident response services. These services are tested for effectiveness annually as part of the internal penetration testing process. As mentioned above, the Company has implemented an incident response plan and incident response team that meets at least annually to assess breach scenarios and improve our response capabilities. All findings from testing, vulnerability analysis, breach scenarios, and event detection are reported quarterly by the CISO to the IT Steering Committee and Audit Committee.


text: Cybersecurity Risk Management and Strategy We have no employees and are externally managed by the Manager, an affiliate of the Sponsor. The Manager is responsible for the overall management of our activities, subject to oversight by our board of directors.

companyName: CNL Strategic Capital, LLC


text: Identifying and assessing cybersecurity risk as well as protecting us and our businesses from such risk is integrated into our overall risk management systems and processes as well as specifically addressed in our enterprise-wide cybersecurity program. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including threat intelligence collaboration and advisory mediums, third-party due diligence and risk assessments when determining the selection, oversight and engagement of third-party service providers, application security evaluations and annual penetration tests as well as management risk and compliance reviews. The foregoing combines with periodic review and analysis of third-party service provider system and organizational controls, internal network intrusion prevention systems, vulnerability assessments, access management, data loss prevention, remote access control, mandatory cybersecurity awareness training and random phishing campaigns with additional requisite training, if applicable, to identify and protect against cybersecurity risk.


text: Security events and data incidents are evaluated, ranked by severity and prioritized for response and remediation. Incidents are evaluated to determine materiality as well as operational and business impact and reviewed for privacy impact. Materiality is determined by considering qualitative and quantitative factors. The CSIRT team also conducts tabletop exercises to simulate responses to cybersecurity incidents. The Sponsor's team of cybersecurity professionals then collaborate with technical and business stakeholders across our business units to further analyze the risk to the company, and form detection, mitigation and remediation strategies.


text: As of the date of this filing, we do not believe that our business strategy, results of operations or financial conditions have been materially affected by any risks from cybersecurity threats for the reporting period covered by this report. However, institutions like us, and our service providers, have experienced cybersecurity events and data incidents in the past and will likely continue to be the target of cyberattacks and intrusions. For additional information on the cybersecurity risks we face, see "Part 1, Item 1A. Risk Factors–Risks Related to Our Business—We could be negatively impacted by cybersecurity attacks."


text: Cybersecurity Governance Cybersecurity is an important part of our risk management processes and an area of focus for our board of directors and management. Our Audit Committee is responsible for the oversight of risks from cybersecurity threats. Members of the Audit Committee receive updates at least annually from senior management, including leaders from the CTO, internal audit and legal teams regarding matters of cybersecurity. This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. Our board of directors also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.


text: The cybersecurity risk management and strategy processes are overseen by the Sponsor's cybersecurity committee which consists of the Company's chief financial officer and general counsel, and the CTO, legal, risk management, and compliance teams. Such individuals have an average of over 15 years of prior work experience in various roles involving information technology, including security, auditing, and compliance. These individuals are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to the Audit Committee on any appropriate items.


text: Managing Cybersecurity Risks; Cybersecurity Risk Management Strategy Our cybersecurity risk management program is integrated into the Company's enterprise risk management framework, and our strategy focuses on implementing effective and efficient processes, technologies, and controls to assess, identify, and manage cybersecurity risks. Our cybersecurity program is designed to be aligned with the National Institute of Standards and Technology ("NIST") framework, which organizes the management of cybersecurity risks into five categories: identify, protect, detect, respond, and recover.

companyName: Brighthouse Financial, Inc.

ticker: BHF


text: Our Chief Technology Officer ("CTO") has overall responsibility for our information technology program, which includes the Company's cybersecurity program. Our Chief Information Security Officer ("CISO") is directly responsible for the Company's cybersecurity program, which is designed to protect and preserve the integrity, confidentiality, and continued availability of the information owned by, or in the care of, the Company. Our CTO has over 25 years of information technology experience, including systems development, technology strategy, and vendor management; our CISO has over 30 years of information technology and cybersecurity program management experience. Prior to joining Brighthouse Financial, both our CTO and CISO previously served in roles that involved leading and overseeing information technology and cybersecurity programs at other public companies in the financial services industry. In addition, our CTO serves on a cross-departmental, management-level risk committee that oversees the Company's enterprise risks, including cybersecurity risks. This enterprise-level risk committee is informed about and monitors the prevention, mitigation, detection, and remediation of cybersecurity incidents.


text: Our cybersecurity team regularly assesses the threat landscape and takes an enterprise-wide view of cybersecurity risks. We monitor issues that are internally discovered or externally reported that may affect our business, and we employ a range of tools and third-party services to effectuate our cybersecurity risk identification and assessments, including regular network and endpoint monitoring, threat and vulnerability assessments, and external penetration testing. In addition, our cybersecurity team conducts regular reviews, conducts tabletop exercises, performs internal testing, and leverages the audits performed by our internal audit team, as well as the services of third-party consultants, to assess and evaluate the effectiveness of our controls (in alignment with the NIST framework) and to improve our security measures and strategy. The cybersecurity team has also engaged a third party to measure our cybersecurity program against the NIST cybersecurity framework. The results of this assessment confirmed the rigor of our cybersecurity risk management practices.


text: Our cybersecurity team has also established Company-wide policies and procedures that cover cybersecurity matters, which are designed to enable us to effectively identify, evaluate, and respond to events that have the potential to impact our business. In the event of a cybersecurity incident, the Company utilizes a well-defined incident response plan that coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes to triage, assess severity, escalate, contain, investigate, and remediate the incident, as well as to comply with potentially applicable legal obligations (including relevant securities laws) and mitigate brand and reputational damage. This plan includes immediate actions to mitigate the impact, as well as long-term strategies for the remediation and prevention of future incidents. In accordance with this plan, we have established a cross-departmental Brighthouse Response Team that is responsible for coordinating enterprise-wide responses to cybersecurity incidents, as applicable. This Brighthouse Response Team provides reports regarding cybersecurity incidents to the enterprise-level risk committee referenced above.


text: Further, employees outside of our technology organization have a role in our cybersecurity defenses, and we encourage a corporate culture supportive of security, which we believe improves the effectiveness of our cybersecurity risk management program. Through our Security Awareness Program, we provide our employees with regular cybersecurity training and educational resources to help ensure that they remain vigilant against threats. These include frequent simulations, newsletters, alerts, e-mail reminders, and a mandatory annual cybersecurity awareness training course for all employees. In addition to company policies that we make available to all employees, our awareness training provides clear reporting and escalation processes in the event of suspicious activity.


text: Third-Party Risk Management Our processes also address the cybersecurity risks associated with our use of third-party vendors, some of whom have access to our customer and employee data. We conduct security assessments of all third-party vendors that have access to our systems, our data and/or the facilities that house such systems or data. As part of our third-party risk management program, our cybersecurity risk management and third-party risk management teams collaborate to monitor our third-party vendors' compliance with our cybersecurity standards. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: Risks from Cybersecurity Threats Our systems and our third-party vendors' systems periodically experience directed attacks intended to lead to (i) interruptions or delays in our operations or (ii) the loss, misuse or theft of personal information and other data, including confidential information or intellectual property. We have not experienced any cybersecurity incidents to date, directly or indirectly, that have materially impacted our business, financial condition, or results of operations. For more information regarding our risks from cybersecurity threats, see "Risk Factors — Operational Risks — Any failure in cyber- or other information security systems, as well as the occurrence of events unanticipated in Brighthouse Financial's or our third-party service providers' disaster recovery systems and business continuity planning could result in a loss or disclosure of confidential information, damage to our reputation and impairment of our ability to conduct business effectively" and "Risk Factors —Operational Risks — Any failure to protect the confidentiality of customer, employee, or other third-party information could adversely affect our reputation and have a material adverse effect on our business, financial condition and results of operations."


text: Board of Directors - Oversight and Management Reporting The Audit Committee of the Board of Directors (the "Audit Committee") is primarily responsible for overseeing cybersecurity risks, and the Board of Directors is actively engaged with respect to these risks. The Audit Committee and/or the Board of Directors generally meet with our CTO and CISO on a quarterly basis to review our information technology and cybersecurity risk profile and to discuss our activities to manage the related risks, including risk assessments, mitigation strategies, areas of emerging risks, incidents and industry trends, tabletop exercises, and other areas of importance. In addition to these regular meetings, we have an escalation process in place to timely inform the Board of Directors of any significant cybersecurity incidents, including any updates relating thereto, to ensure that the Board of Directors' oversight is proactive and responsive. Our Chief Compliance Officer also regularly reports to the Audit Committee regarding the Company's compliance with applicable regulations relating to cybersecurity.


text: Managing Cybersecurity Risks; Cybersecurity Risk Management Strategy Our cybersecurity risk management program is integrated into the Company's enterprise risk management framework, and our strategy focuses on implementing effective and efficient processes, technologies, and controls to assess, identify, and manage cybersecurity risks. Our cybersecurity risk management program is designed to be aligned with the National Institute of Standards and Technology Cybersecurity Framework ("NIST Framework"), which provides standards, guidelines and best practices on managing cybersecurity risk, as well as the organization, improvement and assessment of the Company's cybersecurity risk management program.