text: Risk Management and Strategy operate in the life sciences sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations. We have developed and maintain processes, aligned with industry standards and best practices designed to assess, identify, and manage cybersecurity risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein. The scope of these processes includes risks that may be associated with both our internally managed information technology ("IT")

companyName: INTERPACE BIOSCIENCES, INC.

ticker: IDXG


text: systems and key business functions and sensitive data operated or managed by or maintained at third-party service providers. These processes are managed and monitored by a dedicated information technology team, which is led by our head of IT, and include mechanisms, controls, technologies, systems, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the data and maintain a stable information technology environment. We constantly monitor our information technology environment for abnormal behavior, conduct penetration and vulnerability testing, data recovery testing, security audits, and ongoing risk assessments, including due diligence on our key technology vendors and other third party service providers that have access to the personal information we collect, use, store, and transmit. We also conduct periodic employee trainings on cyber and information security, among other topics. We leverage standard industry tools from a software and hardware perspective and maintain a cybersecurity risk insurance policy.

secItem: Item 1C


text: Vice President of Information Technology has over 15 years of experience managing information technology and cybersecurity matters. The Vice President of Information Technology, together with our senior leadership team, are responsible for assessing and managing cybersecurity risks and they work collaboratively across our company to implement policies and procedures designed to protect our information and systems from cybersecurity threats and to respond promptly to any material cybersecurity incidents in accordance with our incident response plans. A cross-functional team is responsible for responding to cybersecurity incidents.


text: This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management continuously evaluate and addresses cybersecurity risks in alignment with our business objectives and operational needs. We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing. considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee (the "Committee")

companyName: HWH International Inc.

ticker: HWH


text: oversight of cybersecurity, data privacy and other information technology risks. The Committee oversees management's implementation of our cybersecurity risk management program and cybersecurity risk exposures, and the steps taken by management to monitor and mitigate cybersecurity risks. The Committee is composed of members of our board of directors with diverse expertise, which has prepared them to oversee our cybersecurity risks.


text: The Committee reports to the Board regarding its activities, including those related to cybersecurity. The Board also receives briefings from management on our cybersecurity risk management program.


text: Our management team, including our Chief Executive Officer, are responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security consultants; threat intelligence and other information obtained from governmental, public or private sources, including external consultants which may be engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our management team's experience includes monitoring the cybersecurity landscape for new risks and best practices, developing and executing cybersecurity strategies, overseeing related governance policies, testing compliance with applicable technical standards, remediating known risks and leading employee training programs.


text: Material Risks and Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management continuously evaluate and addresses cybersecurity risks in alignment with our business objectives and operational needs. from Cybersecurity Threats have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing.

companyName: Alset Inc.

ticker: AEI


text: Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee (the "Committee")


text: Committee receives periodic reports from management on our cybersecurity risks. In addition, management updates the Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Committee reports to the Board regarding its activities, including those related to cybersecurity. The Board also receives briefings from management on our cybersecurity risk management program.


text: management team, including our Chief Executive Officer, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security consultants; threat intelligence and other information obtained from governmental, public or private sources, including external consultants which may be engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our management team's experience includes monitoring the cybersecurity landscape for new risks and best practices, developing and executing cybersecurity strategies, overseeing related governance policies, testing compliance with applicable technical standards, remediating known risks and leading employee training programs.


text: Company depends on the proper functioning, availability and security of its information systems, including financial, data processing, communications and operating systems. Several information systems are software applications provided by third parties. Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, like other companies in our industry, we could, from time to time, experience threats and security incidents related to our and our third-party vendors' information systems, including attempts to gain unauthorized access to our confidential data, and other electronic security breaches. Such cybersecurity attacks can range from individual attempts to gain unauthorized access to our information technology systems to more sophisticated security threats. While we employ a number of measures to prevent, detect and mitigate these threats, there is no guarantee such efforts will be successful in preventing a cybersecurity attack. A cybersecurity attack could compromise the confidential information of our employees, customers and vendors. A successful cybersecurity attack could disrupt and otherwise adversely affect our business operations.

companyName: AmpliTech Group, Inc.

ticker: AMPG


text: identification and management of cybersecurity related risks are integrated into our overall risk management process. Cybersecurity related risks are included in the risk universe we evaluate to assess top risks to the Company at least annually. To the extent our processes identify a heightened cybersecurity related risk, risk owners are assigned to develop risk mitigation plans, which are then tracked to completion.


text: Senior management, including the Company's Chief Executive Officer, Chief Financial Officer and Chief Operating Officer, is responsible for assessing and managing cybersecurity risk, and provides briefings regarding the assessment and management of such risk to the Audit Committee, which then reports, as necessary, to the Board of Directors.


text: members of our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with in-house information-technology specialists, enables them to effectively assess and manage material risks from cybersecurity threats.


text: Company relies on in-house information-technology specialists to assist in managing relevant risks. Any cybersecurity incident would be reported promptly to management and material and potentially material incidents would be assessed by management and the Audit Committee for remediation and future prevention and detection.


text: Management and Strategy are committed to protecting information and the underlying information systems involved in the functionality of our products and the operation of our business. We assess, identify, and manage material risks from cybersecurity threats through various processes and procedures, including: assessing risks, ad hoc, to identify the potential impact and likelihood of various risks and scenarios and to determine appropriate mitigation strategies and controls; third-party manufacturer, partner, and supplier selection processes; (iii) utilizing procedures for responding to cybersecurity incidents; training our employees, incident response personnel, and senior management on cybersecurity awareness; monitoring the responsibilities of our information technology team and evaluating our cybersecurity posture and performance on an ongoing basis;

companyName: DNA X, Inc.

ticker: SONM


text: conducting regular vulnerability scans and tests utilizing threat intelligence feeds in the assessment of hardware and software; and providers and other third parties, where appropriate, to assess, test, or otherwise assist with aspects of our systems addressing cybersecurity threats.


text: management team, including our Chief Information Security Officer ("CISO"), is responsible for addressing, assessing, and managing our material risks from cybersecurity threats. Our CISO supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants (when applicable). Our management team's experience includes demonstrated expertise in cybersecurity, mobile and data devices, and smartphone software. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.


text: is a SPAC with no business operations. Since its initial public offering, its sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, HVII does not consider that it faces significant cybersecurity risk and has not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk.

companyName: Hennessy Capital Investment Corp. VII

ticker: HVII


text: depends on digital technologies, including information systems, infrastructure and cloud applications and services, including those of third parties with which it may deal. Sophisticated and deliberate attacks on, or security breaches in, its information systems or infrastructure, or the information systems or infrastructure of third parties or the cloud, could lead to corruption or misappropriation of its assets, proprietary information and sensitive or confidential data. Because of its reliance on the technologies of third parties, HVII also depends upon the personnel and the processes of third parties to protect against cybersecurity threats. In the event of a cybersecurity incident impacting HVII, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with the cybersecurity incident. As an early-stage company without significant investments in data security protection, there can be no assurance that HVII will have sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have adverse consequences on its business and lead to financial loss.


text: of the date of this Report, HVII has not identified any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that it believes have, or are likely to, materially affect it since its initial public offering.


text: have not had any reportable cybersecurity breaches or espionage, including what we may perceive or recognize as cybersecurity incidents, espionage or credible threats during the fiscal year ended December 31, 2024. To date, as a result, there has no t been any material adverse effect on our business operations or financial condition. If there is a cybersecurity attack, espionage and/or an infiltration of our files, data, customer data and the like, there would be a material adverse effect on our business, our reputation, our operations and financial condition. For example, our reputation would be damaged in the event of a cybersecurity infiltration. If there were a cybersecurity infiltration, we could lose access to our data which would disrupt our operations, and we even may not be able to operate. Such a loss of access might be temporary or permanent, and it might be localized or general. The level of disruption will depend on our backup systems. Our clients financial and other data could be taken and used against us to damage our reputation or cause harm to our clients in different ways. In the latter instance, we may be liable for monetary damages to our clients. We may be held for cyber ransom, which would be a loss to our financial resources. Our inability to operate, payment of damages, payment of ransom, and the costs of reparation of our systems, consultants and tangential expenses will all result in damage to our business and our financial resources.

companyName: EXOZYMES INC.

ticker: EXOZ


text: believe that we have implemented a comprehensive cybersecurity program aimed at identifying, monitoring, and mitigating cybersecurity risks to the best of our ability. Our security program encompasses information security responsibilities, incident response, and is diligently managed by our information technology consultants. Cybersecurity is integrated into our overall risk management framework, with consultation from our subject matter experts to assess and address potential cyber risks and their impacts.


text: Company has retained outside consultants to assist with information technology activities and has put in place governance measures for information security with a focus on continuous improvement of its systems. This includes control requirements for change management, patching processes, the implementation of multifactor authentication, comprehensive data backup strategies, and continuous security monitoring. Additionally, management continues to enhance our security controls, with any significant issues promptly reported to the Audit Committee.


text: management and strategy understand the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Processes to manage risks from cybersecurity threats have been incorporated as a part of our overall risk assessment process. Our cybersecurity risks include theft of business data, fraud or extortion, lack of access to our information systems, harm to employees, harm to business partners, violation of privacy laws, potential reputational damage, and litigation or other legal risk if a cybersecurity incident were to occur. It is difficult to assign a monetary materiality assessment to these risks or to the impact if we were to sustain a breach of our systems. Our approach is based on the premise that any cybersecurity incident could result in material harm to our company.

companyName: Vivos Therapeutics, Inc.

ticker: VVOS


text: utilize a seasoned and mature artificial intelligence-based security system that learns and monitors the actions of individuals that have access to our networks and systems, including location of access (notably from international locations), email, and SAAS platforms that we do not host. The system not only protects based off of the specific rules implemented, it also takes action based on user activity (including remote access to our systems by our employees) that is outside their normal behavior pattern. Additionally, our employees go through cybersecurity awareness training as part of their onboarding procedures.


text: a threat is detected, our system automatically notifies our internal information systems management ("ISM") team of all activities and ranks those activities based on their level of threat to the system and/or deviation of behavior from normal. Severe threats notify the ISM team via text message, regardless of hours of operation. In addition to the notification, the system will automatically take action to secure the system, up to and including blocking user accounts and access. The ISM team will then review the notification, assess the action that was taken against the actual threat, and then clear the condition or take further action.


text: mitigate risk, we periodically evaluate and assess the threat landscape and our security controls, through assessments, regular network and endpoint monitoring. We also have processes to oversee and identify material cybersecurity risks associated with our use of third-party service providers, including performing diligence on certain third parties that have access to our systems, data or facilities that store such systems or data, continually monitoring cybersecurity threat risks identified through such diligence our framework, cybersecurity issues, including those involving vulnerabilities introduced by our use of third-party software, are analyzed by subject matter experts for potential financial, operational, and reputational risks, based on, among other factors, the nature of the matter and breadth of impact.


text: of the date of this Report, there have been no cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, operations, or financial condition.


text: technology (IT) is critical to many of our operating activities and is subject to security threats and increasingly sophisticated cyber-attacks.

companyName: XMax Inc.

ticker: XWIN


text: As a result, we have policies and processes in place to assess, identify, and manage the strategic and operational IT-related risks as an integrated part of our overall risk management system. These risks include the risk of cyber-attacks on IT infrastructure and intellectual property, as well as on cybersecurity for our online product offerings. The Company has adopted Risk Assessment Methodology Policy, Information Security Policy and Incident Response Plan Policy to managing material risks from cybersecurity threats and hired IT consultant to help managing cybersecurity risks. When the Company uses a third party service provider and shares sensitive data such service provider, it must adhere to the compliance requirements in the Service Agreement which includes an acknowledgement that the service provider is responsible for safeguard and the security of the sensitive data. As of date of this report, there has been no previous cybersecurity incidents, have materially affected the Company yet. The independent director of the Board Charlie La is responsible for the oversight of risks from cybersecurity threats on behalf of the Board. Mr. Teng Ai Leng, our IT consultant and Tawny Lam, Chief Executive Officer of the Company report to Mr. Charlie La and Board of Directors for cybersecurity risks and incidents. Teng AI Leng has 30 years of working experience in the Information technology industry. The Company has adopted Incident response plan policy, including Roles and Responsibilities, Incident Categories, Categories of Event, Incident Severity, Escalation Levels, and Incident Response Life Cycle, so that the weakness, events, alerts and incidents can be appropriately managed and escalated from IT personnel, IT consultant, Chief Executive Officer to independent director and the Board.


text: cybersecurity risk management program includes the following: multidisciplinary team comprised of personnel from information technology ("IT"), internal audit, accounting, and legal, as well as third-party cybersecurity experts principally responsible for directing (i) our cybersecurity risk assessment processes, (ii) our security processes, and (iii) our response to cybersecurity incidents, and a third-party security operations center.

companyName: Calidi Biotherapeutics, Inc.

ticker: CLDI


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader and third-party security tools to monitor our systems, identify cybersecurity risks, and test our IT environment. use of third-party cybersecurity experts, where appropriate, to assess, test or otherwise assist with aspects of our security processes. cybersecurity incident response plan and business continuity plan. training for employees and key business partners with access to our systems. third-party cybersecurity risk management process for service providers and vendors who access our systems.


text: employees, as well as third parties who have access to our systems, to treat confidential and private information and data with care, including performing controls relating to such data; and cybersecurity risk insurance. also seek to engage reputable service providers that maintain cybersecurity programs or controls.


text: enterprise risk team consists of cross-functional professionals who collaborate with subject matter specialists, as necessary, including an independent third-party expert we have retained to identify and assess material risks from cybersecurity threats, their severity, and potential mitigation steps. The CISO is primarily responsible for leading our cybersecurity risk assessment and management processes.


text: Our executive staff, supported by external IT, currently serves as our CISO. The CISO regularly reviews and assesses cybersecurity initiatives, including our incident response plan, as well as cybersecurity compliance, training, and risk management efforts.


text: have not had any reportable cybersecurity breaches, including what we may perceive or recognize as cybersecurity incidents or credible threats during the fiscal year ended December 31, 2024. To date, as a result, there has not been any material adverse effect on our business operations or financial condition. If there is a cybersecurity attack and an infiltration of our files, data, customer data and the like, there would be a material adverse effect on our business, our reputation, our operations and financial condition. For example, our reputation would be damaged in the event of a cybersecurity infiltration. If there were a cybersecurity infiltration, we could lose access to our data which would disrupt our operations, and we even may not be able to operate. Such a loss of access might be temporary or permanent, and it might be localized or general. The level of disruption will depend on our backup systems. Our clients financial and other data could be taken and used against us to damage our reputation or cause harm to our clients in different ways. In the latter instance, we may be liable for monetary damages to our clients. We may be held for cyber ransom, which would be loss to our financial resources. Our inability to operate, payment of damages, payment of ransom, and the costs of reparation of our systems, consultants and tangential expenses will all result in damage to our business and our financial resources.

companyName: MDB Capital Holdings, LLC

ticker: MDBH


text: Risk Management & Strategy Our cybersecurity risk management process is a component of our overall approach to managing material risks that could impact our operations, including cybersecurity threats. In general, we seek to manage material internal and third-party cybersecurity risks through an approach that focuses on: (i) protecting information systems and the information residing therein; (ii) identifying, preventing, and mitigating cybersecurity threats; and (iii) assessing and responding to cybersecurity incidents when they occur. Maintaining, monitoring, and updating our information security program—in an effort to ensure that it remains reasonable and appropriate in light of changes in the security threat landscape, available technology, and applicable legal and contractual requirements—is an ongoing effort.

companyName: Celcuity Inc.

ticker: CELC


text: We have implemented and maintain various processes, procedures, and measures to support our overall risk management strategy and to manage and mitigate the material risks posed by cybersecurity threats to our systems and data. With respect to cybersecurity, these measures include conducting risk assessments of our operations and using a risk register to assess identified risks; developing business continuity, disaster recovery and incident response plans; implementing technical safeguards and tools; conducting ongoing cybersecurity awareness training; and using contractual protections where appropriate.


text: Our incident response plan outlines the procedures for reporting, investigating, and remediating cybersecurity incidents, including a framework to facilitate the escalation to our management team and board of cybersecurity incidents, so that our management team is alerted in a timely manner to material information that would be required to be disclosed or reported.


text: Our IT department maintains policies and procedures regarding network security, data protection and incident response. Pursuant to those policies, IT engages with the Chief Financial Officer, General Counsel and other experts when assessing cybersecurity threats, incident response, and making disclosure determinations following a data or network breach. The Vice President, IT is accountable at the management level for our overall IT risk management program. Additionally, our Chief Executive Officer and Audit Committee receives regular updates from the Chief Financial Officer, General Counsel and the Vice President, IT about significant threats and incidents involving cybersecurity and data protection, as well as security enhancements made to our IT infrastructure.


text: We use third-party service providers for a variety of services throughout our business, ranging from infrastructure support and maintenance, cybersecurity incident response, data protection and privacy compliance. In addition, we engage with contract research organizations, contract manufacturing organizations, distributors, and other supply chain resources.


text: We believe that the use of external service providers improves our operational capabilities, and we have implemented a vendor qualification and management program that applies to our service providers, including those that handle protected health information, personal information, or other information subject to protection under applicable privacy and data protection regulations. This program is designed to identify, address and seek to mitigate potential cybersecurity and data protection risks that arise from our use of external service providers. While we do not have full visibility into the cybersecurity risk management processes of our vendors, we require new service providers to complete a vendor questionnaire that identifies the vendor's network and user protections, such as the use of multi-factor authentication, and other cybersecurity risk management processes. Vendors that store or access our confidential information are required to certify that their information systems comply with applicable industry guidelines for cybersecurity, backup, and system recovery. We rely on our third-party service providers to provide notification of, and remediate, significant cybersecurity threats and cybersecurity incidents that jeopardize the confidentiality, integrity, or availability of our information.


text: We periodically evaluate, test, and update our policies, standards, and processes to mitigate cybersecurity threats and manage incidents effectively. These efforts include risk assessments, vulnerability assessments and remediations, phishing tests and employee education, and external scans. Additionally, to enhance our capabilities, we periodically engage third-party service providers, including cybersecurity consultants, to incorporate threat intelligence into our processes.


text: of any risks from cybersecurity threats, including those resulting from any previous cybersecurity incidents experienced by us or, to our knowledge, by any of our third-party service providers, that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For further discussion of cybersecurity and data privacy risks that may materially affect the Company and how they may do so, see "Risk Factors—If our information technology systems or data, or those of third parties upon which we rely, are or were compromised, we could face clinical trial delays; regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; and other adverse consequences,"


text: Our Audit Committee oversees Celcuity's management of risks arising from cybersecurity threats. Our CEO delivers periodic briefings to the Board and Audit Committee on material cybersecurity risks that are pertinent to our business operations. Additionally, we have processes to promptly notify the Audit Committee and Board of a significant cybersecurity incident and to inform the Audit Committee and Board of remediation progress, as appropriate.


text: The Vice President, IT has overall responsibility for our information security program, with support from our management team and specialized partners in cybersecurity incident response and privacy. The process includes managing our incident response strategy. If a cybersecurity incident meets certain criteria, however, our CEO, CFO and General Counsel will become involved with the response strategy, including decisions about public disclosure and reporting.


text: Our Vice President, IT also coordinates with our CEO, CFO and General Counsel to determine strategic cybersecurity priorities and to establish compliance procedures.


text: We believe our business leaders have the appropriate expertise, background and depth of experience to manage risks arising from cybersecurity threats. Our Vice President, IT has served in various roles in information technology and information security for over three decades, which includes experience in the biotech, pharmaceutical and healthcare industries and experience in cybersecurity risk management and data privacy compliance.


text: In the ordinary course of our business, we, and the third parties upon which we rely, collect, process, receive, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, share and store (collectively, "process") proprietary, confidential, and sensitive information, including protected health information, personal information, credit card and other financial information, or other sensitive information owned or controlled by ourselves or our customers, payors, and other parties.


text: a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and as noted in " Item 1A. Risk Factors " of this Annual Report, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our Board of Directors oversees risk for our Company, and prior to approving our filings with the SEC, our Board of Directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in " Item 1A. Risk Factors " of this Annual Report.

companyName: Valuence Merger Corp. I

ticker: VMCAF


text: These cybersecurity partners, including consultants and other third-party service providers, are a key part of bioAffinity's cybersecurity risk management strategy and infrastructure and provide services including maintenance of an IT assets inventory, periodic vulnerability scanning, identity access management controls including restricted access to privileged accounts, network integrity safeguarded by web-based software, including endpoint protection, endpoint detection and response, and remote monitoring management on all devices, industry-standard encryption protocols, critical data backups, infrastructure maintenance, incident response, cybersecurity strategy, and cyber risk advisory, management team, in conjunction with third-party IT and cybersecurity service providers, is responsible for oversight and administration of the cyber risk management program and informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents. Our management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained from governmental, public, or private sources.

companyName: bioAffinity Technologies, Inc.

ticker: BIAF


text: faces risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows, or reputation. bioAffinity acknowledges that the risk of cyber incident is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. However, prior cybersecurity incidents have not had a material adverse effect on our business, financial condition, results of operations, or cash flows. The Company proactively seeks to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery; however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject the Company to additional liability and reputational harm. In response to such risks, the Company has implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. For more information on cybersecurity risks see Item 1A. "Risk Factors – Our internal information technology systems, or those of our third-party clinical research organizations or other contractors or consultants, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our diagnostic tests' or therapeutic product candidates' development programs, compromise sensitive information related to our business, or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business."


text: Company is committed to protecting the personal data shared by its clients and partners. The Company employs a combination of industry-standard security technologies, procedures, and organizational measures to safeguard personal data from unauthorized access, use, or disclosure. Employees receive extensive training to ensure the privacy and confidentiality of client information.

companyName: FDCTECH, INC.

ticker: FDCT


text: Company's Board of Directors possesses a foundational understanding of cybersecurity matters, reflecting the company's ongoing commitment to safeguarding its financial technology infrastructure. While board members may not currently hold formal cybersecurity certifications such as CISSP or CISM, several directors have prior experience in managing technology-driven businesses where data security and regulatory compliance were integral to operations. The Board remains actively engaged in cybersecurity oversight through regular updates from senior management, including the Chief Technology Officer and other executives responsible for information security. These updates typically cover threat assessments, system vulnerabilities, incident response protocols, and regulatory developments. This communication ensures that the Board is informed of emerging risks and can provide appropriate strategic guidance in alignment with the Company's overall risk management framework.


text: its privacy policy, the Company outlines its data-sharing practices, stating that personal data is not sold or rented to third parties without permission. The company may disclose personal data in response to legal requirements or to establish or exercise its legal rights.


text: Additionally, the Company may collect and share personal data to investigate, prevent, or take action regarding illegal activities, suspected a developer of regulatory-grade financial technology, the Company ensures that its cybersecurity measures align with relevant regulations and standards. The company's subsidiaries, such as Alchemy Markets Ltd. and Alchemy Prime Limited, are regulated by financial authorities like the Malta Financial Services Authority (MFSA) and the UK's Financial Conduct Authority (FCA), respectively. Compliance with these regulatory bodies necessitates adherence to stringent cybersecurity protocols to protect client data and maintain the integrity of financial operations.


text: While the Company implements robust cybersecurity measures, it acknowledges the inherent risks associated with cyber threats. Potential risks include unauthorized access, cyberattacks, and data breaches, which could lead to financial loss, reputational damage, and regulatory penalties. The company continuously assesses and enhances its cybersecurity framework to mitigate these risks and protect stakeholders' interests. In summary, the Company prioritizes cybersecurity through comprehensive measures, regulatory compliance, and ongoing risk management to safeguard its operations and client data.


text: To ensure compliance with industry standards and safeguard sensitive customer data, the Company mandates that all employees, regardless of department or role, participate in annual Payment Card Industry Data Security Standard (PCI DSS) training. This training is designed to educate staff on best practices for handling payment card information securely, identifying potential security risks, and mitigating vulnerabilities. By reinforcing the importance of PCI compliance, we aim to foster a culture of cybersecurity awareness throughout the organization, reduce the risk of data breaches, and maintain the highest level of protection for our customers' financial information. Failure to complete the required training may result in disciplinary actions, underscoring the critical importance of this initiative in protecting both the Company and its customers.

companyName: GOOD GAMING, INC.

ticker: GMER


text: of the functions of our Audit Committee is to identify principal risks related to our company and ensure implementation of appropriate systems to manage these risks, including risks from cybersecurity threats. Our Audit Committee works with members of our management to identify and manage these risks, including cybersecurity risks. We currently outsource a qualified Information Technology Administrator who reports to our Chief Executive Officer. This consultant has over 25 years of experience with cybersecurity, information technology development and deployment and information technology risk assessment and management, including information security management. Our Information Technology Administrator regularly monitors our information technology systems and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents in consultation with our Chief Executive Officer. To the extent necessary, our Chief Executive Officer reports such risks to our Board of Directors.

companyName: RenovoRx, Inc.

ticker: RNXT


text: Company has not adopted any formal cybersecurity risk management program or formal processes for assessing, identifying, and managing material risks from cybersecurity threats. At the management level, our Chief Executive Officer and Chief Financial Officer are responsible for addressing cybersecurity incidents, while our full board of directors has oversight responsibility for the Company's overall risk management, including cybersecurity risk, and has not delegated oversight authority for cybersecurity risks to any committee. In the event a cybersecurity incident occurs, the Company's Chief Executive Officer and the Financial Officer are expected to inform our board of directors of the details of such incident as well as the measures taken in response to such incident. In fiscal year 2024 we did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: JONES SODA CO.

ticker: JSDA


text: Management and Strategy we are in our early stages of our business plan, we regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities and test those systems pursuant to our cybersecurity processes and practices, which are integrated into our overall risk management system. As we progress with the development of our business plans, we plan to use various security tools designed to help us identify, investigate, resolve and recover from security incidents in a timely manner.

companyName: CalEthos, Inc.

ticker: GEDC


text: controls and processes employed to assess, identify, and manage material risks from cybersecurity threats are implemented and overseen by our Chief Information Officer ("CIO"). Our CIO has more than 20 years of information technology experience, including seven years specializing in cybersecurity. Our CIO is responsible for assessing the impact of cybersecurity threats and incidents, assessing whether and to what extent they can be contained and mitigated, containing and mitigating them, remediating incidents, and performing post-incident analysis and program enhancements. In the event of a significant cybersecurity incident, our CIO would engage senior management to inform them of the incident and related threats and response. We would also likely engage a third-party incident response vendor to assist us in the event of a significant cybersecurity incident. Our Chief Executive Officer directly oversees our CIO and receives information on cybersecurity risks from our CIO. Our CIO, in turn, is informed about risks from cybersecurity threats through dashboards, email alerts, reporting from the MSSP, and regular review of our systems and information technology environment.

companyName: Tevogen Bio Holdings Inc.

ticker: TVGN


text: CIO may report to and brief the Board and the audit committee on cybersecurity matters, including key risks, the potential impact of those exposures on our business, financial results, operations, and reputation, as well as the programs and steps implemented by management to monitor and mitigate risks. The reporting cadence and structure continues to develop.


text: of the date of this Annual Report, we are no t aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations, or financial condition or are reasonably likely to have such a material effect. While we have implemented a cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement security measures adequate to prevent cybersecurity incidents or fully mitigate their impact. For additional information regarding risks relating to privacy and cybersecurity, see "Item 1A—Risk Factors".


text: Third-party Risk we are aware of the risks associated with third-party service providers, Bioxytran implements stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes quarterly assessments by our Chief Financial Officer ("CFO"). This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. from Cybersecurity Threats have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing.

companyName: BIOXYTRAN, INC

ticker: BIXT


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.

companyName: Hapi Metaverse Inc.


text: Board considers cybersecurity risk as part of its risk oversight function and has oversight of cybersecurity, data privacy and other information technology risks. The Board oversees management's implementation of our cybersecurity risk management program and cybersecurity risk exposures, and the steps taken by management to monitor and mitigate cybersecurity risks. The Board is composed of directors with diverse expertise, which has prepared them to oversee our cybersecurity risks.


text: The Board receives periodic reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. Board also receives briefings from management on our cybersecurity risk management program.


text: management team, including our Chief Executive Officer, are responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises efforts to prevent, detect, mitigate and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security consultants; threat intelligence and other information obtained from governmental, public or private sources, including external consultants which may be engaged by us; and alerts and reports produced by security tools deployed in the information technology environment. Our management team's experience includes monitoring the cybersecurity landscape for new risks and best practices, developing and executing cybersecurity strategies, overseeing related governance policies, testing compliance with applicable technical standards, remediating known risks and leading employee training programs.


text: is committed to ensuring the highest standards of cybersecurity to protect our systems, networks, and data from cyber threats. We recognize the critical importance of safeguarding sensitive information and maintaining the trust of our customers, partners, and stakeholders. cybersecurity strategy is built on a foundation of proactive risk management, continuous monitoring, and adherence to industry best practices. We employ a multi-layered approach which leverages technologies to defend against evolving cyber threats.

companyName: Aspire Biopharma Holdings, Inc.

ticker: ASBP


text: recognizes that cybersecurity is not solely a technology issue but also a people and process issue. We invest in ongoing employee training and awareness programs to empower our staff to recognize and respond to potential security threats effectively.


text: 1) Cybersecurity incidents: Our public-facing website complies with WCAG 2.2 level AA standards for accessibility. We manage various databases, including those on Amazon and Google Clouds, each with three sets of development, testing, and production environments. Our main data warehousing solutions is Amazon Redshift, complemented by Amazon S3 for object storage.

companyName: MOBIVITY HOLDINGS CORP.

ticker: MFON


text: prevent unauthorized access, we have established a series of security gates across all production environments and instances two individuals have update access to production database instances, and a limited number of individuals have read-only access to our cloud environments, 2-3 members of our Platform Engineering team have access to production and test instances, and logs are generated for any changes made Risk Management: We maintain multiple AWS and Google Cloud environments, each with three sets of development, testing, and production environments. Our primary data warehousing solution is Amazon Redshift, while we use Amazon S3 Glacier for archival storage and Amazon S3 for object storage. We also employ Amazon Sagemaker for machine learning tasks and internally host Apache Superset on the AWS platform for data visualization.


text: environments are isolated using credentials and accounts are following a plan to ensure scheduled patching, upgrades, and other maintenance occur every quarter. This includes updates for have the capability to search our logs for security incidents are on schedule to monitor every public endpoint using a Web Application Firewall (WAF), ensuring that all traffic is logged with patterns to detect any suspicious behavior aim to enable automatic processes to ensure no production data is changed without systematic audits data visualization tool has login credentials with role-based access 3) Management's Role: Our board of directors has ultimate oversight of cybersecurity risk. Our VP of Engineering and Platform Engineering Manager lead cybersecurity risk assessment and management efforts, collaborating closely with the interim CEO for guidance, strategic direction, alignment with business objectives, and environment.


text: Platform Engineering Manager has over 5 years of experience and holds a bachelor's degree in computer science. The VP of Digital Engineering brings 19 years of expertise in digital transformations across various industries, holding leadership roles at Nordstrom, Walgreens, T-Mobile, and Sony PlayStation, with a Master's degree in Business Administration from the University of Michigan have robust logging systems in place to monitor our systems, and our response plan includes promptly identifying the executives and parties affected Governance: Our governance includes routing all production changes through approval processes and testing in the test environment adhere to SOX regulations to ensure proper documentation and signoffs for any production data alterations due to incorrect data entry the event of changes, we document the reason for the update, the responsible individual, and the details of what was modified (both before and after). Additionally, all modifications undergo verification by at least one individual before and after the change board holds oversight of the Company's risks related to cybersecurity risks.


text: business strategy, results of operations, and financial condition have no t been materially affected by risks from cybersecurity threats, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents.


text: Risk Management and Strategy one of the elements of our overall risk management program, we focus on the following key areas: Technical Safeguards: We have commenced to implement technical safeguards, including but not limited to firewalls, anti-malware functionality and access controls.

companyName: AVAX ONE TECHNOLOGY LTD.

ticker: AVX


text: Role Managing Risk Our Executive Team plays a primary role in informing the Audit Committee on cybersecurity risks. These individuals monitor activity and potential risks related to the day-to-day operations of the business, including reviewing results of the work of our outside consultants. They will provide briefings to the Audit Committee on a periodic basis regarding cybersecurity matters, including but not limited to the following: Current cybersecurity landscape and emerging threats; of ongoing cybersecurity initiatives and strategies; reporting, if any, and learning from any cybersecurity events; mitigation efforts and insurance, and with regulatory requirements and industry standard.


text: has no operations and no employees, we have no operating procedures related to cybersecurity. We do design and monitor reasonable technical safeguards to minimize any identified risks with our financial reporting. management strategy also considers cybersecurity risks associated with the use of our third-party vendors and service providers.

companyName: NovelStem International Corp.

ticker: NSTM


text: Our Board of Directors oversees our cybersecurity risk management as part of its general oversight and management is responsible for the day-to-day management of material cybersecurity risks.


text: Consultants: We have identified and, as appropriate and when we have the budget to do so, will utilize outside consultants, including contractors and other third parties, to among other things, conduct regular testing of our networks and systems to identify vulnerabilities through penetration testing, while also measuring and advising on potential improvements to our incident prevention, have not encountered cybersecurity threats or experienced previously cybersecurity incidents that have materially affected or that we believe are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.

companyName: Ocean Biomedical, Inc.

ticker: OCEA


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards.

companyName: Hepion Pharmaceuticals, Inc.

ticker: HEPA


text: responsibility for assessing, monitoring and managing our cybersecurity risks rests with an IT consultant who reports to our Interim CEO/Chief Financial Officer, to manage the risk assessment and mitigation process.


text: part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with IT and management. Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.


text: have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this annual report on Form 10-K.


text: Interim Chief Executive/Chief Financial Officer is primarily responsible to assess and manage our material risks from cybersecurity threats with assistance from third-party service providers.


text: Interim Chief Executive/Chief Financial Officer oversees our cybersecurity policies and processes, including those described in "Risk Management and Strategy" above. The cybersecurity risk management program includes tools and activities to prevent, detect, and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents.


text: Interim Chief Executive/Chief Financial Officer and IT consultant provide periodic briefings to the audit committee regarding our company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. Our audit committee provides regular updates to the board of directors on such reports.


text: comprehensive risk management strategy for the assessment, identification and management of material risks stemming from cybersecurity threats involves a systematic evaluation of potential threats, vulnerabilities, and their potential impacts on our organization's operations, data, and systems.

companyName: Digital Brands Group, Inc.

ticker: DBGI


text: cybersecurity risk management program is integrated into our overall enterprise risk management program and shares common methodologies, reporting channels, and governance processes that apply across the enterprise risk management program, including legal, compliance, strategic, operational, and financial risk areas. The cybersecurity risk management program includes: assessments designed to help identify material cybersecurity risks to our critical systems, information, and broader enterprise IT team principally responsible for managing (i) cybersecurity risk assessment processes, (ii) security controls, and (iii) response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of security controls; awareness training for users and senior management, including through the use of third-party providers for regular mandatory training;


text: cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and risk management process for third-party service providers, suppliers and vendors, including a rigorous vetting process and ongoing monitoring mechanisms designed to ensure compliance with cybersecurity standards.


text: of the date of this Annual Report on Form 10-K, the Company is no t aware of any cybersecurity incidents that have had a materially adverse effect on our operations, business, results of operations, or financial condition.


text: Board of Directors considers cybersecurity risk as part of its risk oversight function. It has delegated oversight of cybersecurity and other information technology risks to the Audit Committee. The Audit Committee oversees the implementation of the cybersecurity risk management program.


text: Audit Committee receives periodic reports from management on potential cybersecurity risks and threats and receives presentations on cybersecurity topics from the Company's Information Systems Manager. The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity. The full Board of Directors also receives briefings from management on the cybersecurity risk management program as needed.


text: is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for our overall cybersecurity risk management program and supervises both the internal cybersecurity personnel and external cybersecurity consultants. The Company's Information Systems Manager has many years of experience leading cybersecurity oversight and has extensive experience with information technology, including security, auditing, compliance, systems, and programming.


text: management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants; and alerts and reports produced by security tools deployed in the IT environment.


text: Our cybersecurity incident response plan governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors.


text: from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing during the financial year ended December 31, 2024. We will continue to monitor and assess our cybersecurity risk management program as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity incident in the future, such an incident may have a material effect, including on our operations, business strategy, operating results, or financial condition. For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto, see the section Governance

companyName: Greenpro Capital Corp.

ticker: GRNQ


text: manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we endeavor to undertake the below listed activities: Monitor emerging data protection laws in conjunction with our advisors and implement changes to our processes to comply;

companyName: AMERICAN REBEL HOLDINGS INC

ticker: AREB


text: 2FA logins to servers; and Seek to obtain a cybersecurity insurance policy where part of the above processes, we engage with third party providers to review our cybersecurity program and help identify areas for continued focus, improvement, and compliance.


text: oversees the Company's cybersecurity risk management process. Management has adopted a charter that provides to periodically review and discuss with the Board the guidelines and policies with respect to risk assessment and risk management of cybersecurity and other risk exposures relevant to the Company's computerized information system controls and security. Management may receive additional training in cybersecurity and data privacy matters to enable its oversight of such risks. Management will report to the Board on the substance of such reviews and discussions and, as necessary, recommend to the Board such actions as management deems appropriate.

companyName: SHF Holdings, Inc.

ticker: SHFS


text: have processes for assessing, identifying and managing material risks from cybersecurity threats. These processes are integrated into our overall risk management systems, as overseen by our Board of Directors. These processes also include overseeing and identifying risks from cybersecurity threats associated with the use of third-party service providers. We conduct security assessments of certain third-party providers before engagement and have established monitoring procedures in our effort to mitigate risks related to data breaches or other security incidents originating from third parties. We have a third-party consultant who, from time to time, evaluates any potential cybersecurity risks on our behalf.

companyName: Quest Water Global, Inc.

ticker: QWTR


text: Managing cybersecurity risk is critical to supporting our vision, enabling our strategy, and safely operating our business. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. Our process for identifying and assessing material risks from cybersecurity threats operates alongside our broader overall risk assessment process which covers all Company risks. As part of this process, appropriate personnel collaborate with third-party subject matter experts to gather insights for identifying and assessing material risks associated with cybersecurity threats, their severity, and potential mitigations. Further, we provide periodic training for all personnel regarding cybersecurity threats, with such training appropriate to the roles, responsibilities and access of the relevant Company personnel. Our policies require all workers to report any real cybersecurity incident or suspected cybersecurity threat. Compare our processes to benchmark standards, such as those set by the National Institute of Standards and Technology ("NIST"). Closely monitor emerging data protection laws and implement changes to our processes as needed. Conduct annual cybersecurity management and incident training for employees involved in our systems that contain sensitive data.

companyName: I-ON Digital Corp.

ticker: IONI


text: As part of the above process, we engage third-party services to provide 24-hour, 365-day monitoring, escalation, and response to cyber incidents. In addition to consulting on best practices, we leverage a third-party expert security firm for independent evaluations of our security controls through penetration testing. These evaluations test both the design and the operational effectives of security controls.


text: Our board of directors, in coordination with the Audit Committee, oversees our risk management program, including the management of risks associated with cybersecurity threats.


text: Our board of directors and Audit Committee receive periodic updates on developments in our cybersecurity risk management practices, evolving standards, third-party vulnerability assessments, and information security issues. On an annual basis, our board of directors and the Audit Committee discuss our approach to overseeing cybersecurity threats with senior management, including our Chief Executive Officer ("CEO"). At the direction of the Board of Directors, the Company is in the process of strengthening its risk management procedures.


text: In this specific regard, the Company has begun a search for a Chief Financial Officer (CFO), and will place similar recruitment emphasis on identifying a Senior Risk Officer and recruitment of additional board members who have had Board level Audit Committee experience.


text: we are not aware of cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business, strategy, results of operations, or financial condition at this time. For further discussion of the risks associated with cybersecurity incidents, see Part I, Item 1A of this Form 10-K under the risk factor entitled Risks Specific to Our Business.


text: Company's executive officers oversee the strategic processes to safeguard data and comply with relevant regulations and has overall responsibility for evaluating cybersecurity risks, as well as related policies and risks in connection with the Company's supply chain, suppliers and other service providers. The Company does not currently engage any assessors, consultants, auditors, or other third parties in connection with any such processes, given the size and scale of the Company, the resources available to it, the anticipated expenditures, and the risks it faces in terms of cybersecurity. The Company's executive officers are responsible for overseeing and periodically reviewing and identifying risks from cybersecurity threats associated with its use of any third-party service provider.

companyName: Freight Technologies, Inc.

ticker: FRGT


text: Company provides mandatory, quarterly (and sometimes monthly) information security training sessions to employees about current cybersecurity threats and best practices to address them, and provides regular updates to employees about emerging cybersecurity threats and preventive measures. The Company provides its employees, contractors and third parties with access to the Company's information systems and data with a written guide which contains discussions of the key concepts, potential threats, and practical solutions to ensure the confidentiality, integrity and availability of the Company's information assets. The Company also provides employees with an information guide containing essential information, best practices, and guidelines for utilizing Google Drive as a cloud backup solution for the Company's data.


text: the start of its latest completed fiscal year and up to the date of this Report, the Company is not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the registrant, including its business strategy, results of operations, or financial condition.


text: Company's board of directors is collectively responsible for oversight of risks from cybersecurity threats. The Company's executive officers oversee the overall processes to safeguard data and comply with relevant regulations and will report material cybersecurity incidents to the board of directors. The Company's CEO has more than 15 years of experience in the field of information technology with a focus on software development. Some of his experience and knowledge relates specifically to cybersecurity. Other executive officers of the Company have more limited experience in the area of cybersecurity. When and where necessary in the view of the Company's executive officers, the Company will consult with external advisers to manage and remediate any cybersecurity incidents. For material cybersecurity incidents, the Company's executive officers will promptly inform, update, and seek the instructions of the board.


text: the complexity and evolving nature of cybersecurity threats, our technology team periodically evaluates and tests our risk management systems. Our technology team has specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices.


text: Third-Party Risk we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes regular assessments by our technology team. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: Company's technology team is primarily responsible for assessing, monitoring and managing our cybersecurity risks. The technology team ensures that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks, and provides briefings on cybersecurity threats and related risks to our Chief Executive Officer on a regular basis.


text: Our Director of IT has over 15 years of experience in the field of information technology. He oversees and tests our compliance with standards, remediates known risks, and leads our employee training program and has extensive experience in cybersecurity and possesses the necessary knowledge, skills, background, and experience.


text: technology team is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. The technology team implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the Director of IT will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents. to Board of Directors cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.


text: date, we have not experienced any material cybersecurity incidents, and there has been no known unauthorized access to our systems. Should any reportable cybersecurity incident arise, our management shall promptly report such matters to our Board of Directors for further actions, including regarding the appropriate disclosure in accordance with SEC regulations, mitigation, and other response or actions that the Board of Directors deems appropriate to take.

companyName: China Foods Holdings Ltd.

ticker: CFOO


text: the current digital environment, companies may be the target of cyber-attacks or other malicious efforts to cause a cyber incident. These cyber incidents can include, but not limited to, gaining unauthorized access to digital systems for purposes of misappropriating assets or sensitive information, corrupting data or causing operational disruption. The possible consequences of such an attack include but are not limited to loss of data, damage to the Company's reputation, interruptions to our operations, and/or the need to pay ransom.

companyName: Vystar Corp

ticker: VYST


text: Historically, we have not experienced cybersecurity incidents that materially impacted our business strategy, operating results and financial condition but we cannot guarantee a future cybersecurity incident would not materially impact us.


text: manage our cyber risk, we have engaged in a third-party service provider who is responsible for upgrading software and hardware to those with the greatest security protections. We also utilize multi-factor authentication processes for system access. Our data is stored on secure servers and protected by encryption by our providers. Our credit card sales are processed through one of the larger payment processing companies in the U.S. As such, we do not maintain any personal data in our systems.


text: Company's cyber risk management strategy has consisted of a focus on minimizing our attack surface and leveraging industry standard cyber threat prevention, detection, and remediation tools. The Company assesses cyber security risk as follows: have executed this strategy with a cloud-first approach, awareness training, and deliberate use of well-established vendors for software and hardware solutions.

companyName: BOXABL Inc.


text: February 2024, the Company engaged HUB International as its national insurance broker and risk services consultant. HUB brings industry expertise specifically regarding cybersecurity. (iii)


text: Company consulted with HUB and consulting firm, Cyber Risk Opportunities, to assess its network infrastructure and cyber posture, mitigate cybersecurity threats and protect the Company's shareholders. date, no cybersecurity threats have materially affected our business strategy, operations, or financial condition.


text: of directors has oversight of our strategic and business risk management and has delegated cybersecurity risk management oversight to the Audit Committee of our board of directors (Audit Committee). Our Audit Committee is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. Management is responsible for identifying, assessing, and managing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, maintaining cybersecurity policies and procedures, and providing regular reports to our board of directors, including the Audit Committee. In response to the departure of our IT Manager in 2024 and a number of other IT personnel in 2025, the Company's management is in discussions with a number of third parties service providers to provide IT security services as well as the process to hire a new head of IT. In addition, the Company engaged Cyber Risk Opportunities to perform network penetration testing in March 2025 and their findings were reported to the Company's Audit Committee. Each of their findings have been remediated and were contained as of the date of this report.


text: operate in the industrial sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect our employees, customers, and corporate data and prevent data loss and other security breaches, including a cybersecurity risk assessment program. Both management and our board of directors are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: PIONEER POWER SOLUTIONS, INC.

ticker: PPSI


text: current cybersecurity risk assessment program consists of not only real-time monitoring of things from patching policies to mandatory multi-factor authentication, but also policies in place for encryption of data both in transmission and at rest. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats and is informed by previous cybersecurity incidents we have observed in our company, in our industry, and as reported by our cybersecurity partner CCS Business Solutions, Inc.


text: Management, along with CCS Business Solutions, Inc., are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. The individuals currently serving in these roles are the Chief Financial Officer as the representative of our management, and the CEO of CCS Business Solutions, Inc. The CEO of CCS Business Solutions, Inc. has over 20 years of experience in the technology industry, with most of that experience being specifically in cybersecurity. He also has formal education with a degree in Computer Science with a concentration in Artificial Intelligence, mainly involving self-learning algorithms.


text: board of directors is responsible for oversight of risks from cybersecurity threats in conjunction with our senior management team and CCS Business Solutions, Inc. This includes receiving reports and updates from our outside partner CCS Business Solutions, Inc. with respect to the management of risks from cybersecurity threats. Such reports cover our information technology security program, including its current status, capabilities, objectives and plans, as well as the evolving cybersecurity threat landscape. Additionally, the board of directors considers risks from cybersecurity threats as part of its oversight of our business strategy and risk management.


text: routinely undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including assessments of our data access in the form of user audits, real-time monitoring of risk on a per system level as it pertains to AV completeness, system vulnerabilities, and third-party patching. In addition to this, we actively monitor and practice disaster recovery and business continuity plans in the event that any risk is able to circumvent the controls we have in place.


text: leverage the advice of third-party consultants and auditors to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers perform an audit of the datacenter from the top down annually, to ensure that controls are effective, still implemented to the fullest, and are meeting also have policies and procedures to oversee and identify the risks from cybersecurity threats associated with our use of third-party service providers. Our core third-party service provider in the technology space is audited yearly through our Sarbanes Oxley process, providing line-of sight to their internal operations along with their SSAE-16 certification.


text: date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. It is for this reason we are constantly reevaluating our cybersecurity stance, posturing against industry standards to try and effectively mitigate our risk.


text: currently maintain a cyber liability insurance policy. However, our cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all. In addition, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations.


text: Risk management and strategy the crucial necessity of establishing, executing, and sustaining strong cybersecurity measures to secure our information systems. This is undertaken to uphold the confidentiality, integrity, and accessibility of our data.

companyName: SEATech Ventures Corp.

ticker: SEAV


text: We recognize the intricate and ever-changing nature of cybersecurity threats. To address this, we shall collaborate with external experts, including cybersecurity assessors and consultants. This cooperation shall involve regular audits, threat assessments, and consultations to enhance our security measures. These efforts ensure that our cybersecurity strategies adhere to industry best practices and remain effective in safeguarding our systems.


text: Understanding the potential risks associated with third-party service providers, we shall implement stringent processes to oversee and manage these concerns. We shall conduct thorough security assessments before engaging with any third-party provider and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This involves quarterly assessments by our management and continuous evaluations by our security engineers. This approach is designed to mitigate the risks of data breaches or other security incidents originating from third-party sources. We have not encountered cybersecurity issues that have significantly impacted our operational performance or financial status.


text: board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer, are actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM").

companyName: Sigyn Therapeutics, Inc.

ticker: SIGY


text: We have implemented a cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and we have integrated these processes into our overall risk management program. We assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: VYCOR MEDICAL INC

ticker: VYCO


text: As a small company our IT systems and assets are limited mainly to accounting and administrative systems and email communications, all of which are cloud based.


text: Our cybersecurity risk management program to protect these assets and systems includes: skilled third-party information security and data privacy personnel, who support our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;


text: email security systems including automatic detonation and evaluation of the implementation of formal protection systems against phishing; the use of multi-factor authentication (MFA), next-generation anti-virus, the use of tools to monitor access for unusual behaviour; the use of a protective DNS service to block access to malicious websites;


text: external service providers, where appropriate, to monitor, assess, test, or otherwise assist with aspects of our security controls, to support risk mitigation efforts, and to utilize a security information and event management system (SIEM);


text: the regular (less than 30 days) installation by our third-party information security provider of critical and high severity patches across our systems; training for our employees on cybersecurity awareness;


text: We have not identified any risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. Board comprises our management team and considers cybersecurity risk as part of its risk oversight function.


text: Our management team is responsible for assessing and managing our material risks from cybersecurity threats. Our President has overall oversight and with our Chief Financial Officer oversees our external information security professionals who have primary responsibility for our overall cybersecurity risk management program and supervises our internal personnel on these matters.


text: management team oversees efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include threat briefings from internal personnel and external service providers, as well as alerts and reports produced by security tools deployed in the information technology environment.


text: Cyber Risk Management and Strategy the oversight of the Board of Directors since we do not currently have an Audit Committee, we have implemented and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes are integrated into our overall risk management processes, and cybersecurity is one of our designated risk categories. We implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify, and address cybersecurity risks. In support of this approach, our IT security team implements processes to assess, identify, and manage security risks to the company, including in the pillar areas of security and compliance, application security, infrastructure security, and data privacy. This process includes regular compliance and critical system access reviews. In addition, we conduct application security assessments, vulnerability management, penetration testing, security audits, and ongoing risk assessments as part of our risk management process. We also maintain an incident response plan to guide our processes in the event of an incident.

companyName: SHOREPOWER TECHNOLOGIES INC.

ticker: SPEV


text: third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We utilize well-known cloud-based technologies and service providers such as Amazon AWS, Microsoft Office, and Google enterprise to provide protection against cybersecurity threats. We have a special email encryption from Google that protect against cyberthreats.


text: to evaluate and enhance our systems, controls, and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: We review cybersecurity risk as part of our overall enterprise risk management program. This ensures that cybersecurity risk management remains a top priority in our business strategy and operations.

companyName: First Choice Healthcare Solutions, Inc.

ticker: FCHS


text: The Board of Directors is aware of the critical nature of managing risks associated with cybersecurity threats. The Board has established robust oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence.


text: The Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this domain. On a periodic basis, our Board of Directors reviews the adequacy of our computer systems controls, cybersecurity risk management and related governance and incident disclosures.


text: Our Chief Financial Officer plays a pivotal role in informing the Board of Directors on cybersecurity risks and provides briefings to the Board of Directors on a regular basis, with a minimum frequency of once per year. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies; Incident reports and learnings from any cybersecurity events; and Compliance with regulatory requirements and industry standards.


text: Risk Management Personnel assessing, monitoring and managing our cybersecurity risks rests with our information technology provider, who leads testing of our compliance with standards, remediation of known risks, and our employee training program. Our information technology providers lead our implementation and oversight of processes for the regular monitoring of our information systems.


text: Our information technology providers regularly inform the COO and CFO about matters related to cybersecurity risks and incidents. Together, our COO and CFO then update our Board on significant cybersecurity matters, and strategic risk management.


text: directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer, is actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM").

companyName: ALPHA MODUS HOLDINGS, INC.

ticker: AMOD


text: Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. Governance: Management oversees cybersecurity risk mitigation and reports to the board of directors any cybersecurity incidents.


text: our current stage of cybersecurity development, we have no t experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.

companyName: Wenyuan Group Corp.

ticker: WYGC


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We primarily rely on expert third-party managed IT service providers to protect our IT systems from cybersecurity threats.

companyName: Algorhythm Holdings, Inc.

ticker: RIME


text: Material Risks & Integrated Overall Risk Management one of the critical elements of our overall risk management program, our cybersecurity program is focused on the following key areas: Technical


text: Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, anti-malware software, and monitoring software agents that are installed on our devices.


text: Management: Our financial data and primary operational systems are hosted off-site in virtual cloud environments which get periodically backed up and can be restored in the event of a cybersecurity incident. Our music subscription service is managed by our content provider, Stingray Group, who processes payments, and our e-commerce website payment processing is handled by Shopify. We do not store sensitive customer credit card data within our IT systems.


text: Management: We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team works closely with our third-party IT service provider to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-Party Risk conduct annual assessments of the SOC reports of our providers because we are aware of the risks associated with third-party service providers. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: from Cybersecurity Threats of the date of this report, there have been no cybersecurity incidents that have materially affected our results of operations or financial condition.


text: Risk Management and Strategy Like all companies that utilize electronic technology, we are subject to threats of breaches of our technology systems. To mitigate the threat to our business, we will take a comprehensive approach to cybersecurity risk management. Our Board and our management actively oversee our risk management program, including the management of cybersecurity risks. We intend to have established policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats, including those discussed in our Risk Factors. We intend to have devoted financial and personnel resources to implement and maintain security measures to meet regulatory requirements and shareholder expectations, and we intend to continue to make investments to maintain the security of our data and cybersecurity infrastructure. We intend to establish and maintain a Cybersecurity Maturity Model Certification compliance program and work to meet all applicable deadlines. While there can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective, we believe that the Company's sustained investment in people and technologies will have contributed to a culture of continuous improvement that has put the Company in a position to protect against potential compromises and we do not believe that risks from prior cybersecurity threats have materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that past or future attacks will not materially affect us, including our business strategy, results of operations, or financial condition.

companyName: Beeline Holdings, Inc.

ticker: BLNE


text: To date, we have not experienced any material cybersecurity incidents, and there has been no known unauthorized access to our systems. Should any reportable cybersecurity incident arise, our management shall promptly report such matters to the Company's Board of Directors (the "Board")

companyName: Transportation & Logistics Systems, Inc.

ticker: TLSS


text: for further actions, including regarding the appropriate disclosure in accordance with SEC regulations, mitigation, and other response or actions that the Board deems appropriate to take.