text: Cybersecurity Governance Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management. Our Audit Committee is responsible for the oversight of risks from cybersecurity threats. Members of the Audit Committee receive updates every quarter from senior management, including leaders from our Information Security, Product Security, Compliance, and Legal teams regarding matters of cybersecurity. This includes existing and new cybersecurity risks, the status of how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any), and the status of key information security initiatives.


text: Our cybersecurity risk management and strategy processes are overseen by leaders from our Information Technology, Information Security, Product Security, Compliance, and Legal teams.

companyName: Toughbuilt Industries, Inc

secItem: Item 1C


text: Such individuals have extensive prior work experience in various roles involving information technology, including security, auditing, compliance, systems, and programming. These individuals are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to the Audit Committee.


text: The Company acknowledges the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition, and reputation.


text: As a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team, or specific protocols to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan, or engaged with external cybersecurity consultants for assessments or services.


text: Given our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyber-attacks, data breaches, and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs, and negatively impact our reputation among customers and partners.


text: The Company is in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments, and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity, and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and the Company will continue to assess and update our cybersecurity measures in response to emerging threats.


text: For a discussion of potential cybersecurity risks affecting the Company, please refer to Item 1A - Risk Factors - Risks Related to IT in this report.


text: Risk Management and Strategy The Company has established processes to assess, identify, and manage risks from cybersecurity threats as part of our broader enterprise-wide risk management system and processes, which is overseen by our Board of Directors through our Audit Committee, along with our executive management.

companyName: Citius Pharmaceuticals, Inc.

ticker: CTXR


text: As of the date of this Annual Report, we have not encountered any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition. For more information on our cybersecurity related risks, see "Risk Factors - Risks Related to Our Business and Our Industry" included elsewhere in this Annual Report on Form 10-K.


text: The Board of Directors is responsible for overseeing our enterprise risk management program. The Audit Committee of the Board of Directors has been designated by the Board to oversee cybersecurity risks and our processes to identify, prioritize, assess, manage, and mitigate those risks. The Audit Committee receives updates on cybersecurity and information technology matters and related risk exposures from our Chief Financial Officer.


text: The Chief Financial Officer oversees the operation of our cybersecurity program and has 10 years of executive experience overseeing risk management and internal controls. The Chief Financial Officer is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through the Chief Financial Officer's oversight of the Company's information technology function and supervision of the Company's IT administrator.


text: The Board of Directors is responsible for overseeing our enterprise risk management program. The Audit Committee of the Board of Directors has been designated by the Board to oversee cybersecurity risks and our processes to identify, prioritize, assess, manage, and mitigate those risks. The Audit Committee receives updates on cybersecurity and information technology matters and related risk exposures from our Chief Financial Officer ("CFO").

companyName: CITIUS ONCOLOGY, INC.

ticker: CTOR


text: The CFO oversees the operation of our cybersecurity program and has 10 years of executive experience overseeing risk management and internal controls. The CFO is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through the CFO's oversight of the Company's information technology function and supervision of the Company's IT administrator.


text: To meet our business objectives, we rely on both internal information technology (IT) systems and networks, and those of third parties and their vendors, to process and store sensitive data, including confidential research, business plans, financial information, intellectual property, and personal data of ours and our customers that may be subject to legal protection, and promote the continuity of our Company's business operations.

companyName: NightFood Holdings, Inc.

ticker: NGTF


text: In the ordinary course of our business, we receive, process, use, store, and share digitally certain data, including user data as well as confidential, sensitive, proprietary, and personal information.


text: We recognize the importance of assessing, identifying, and managing risks from cybersecurity threats. Our approach to cybersecurity risk management is aligned with our risk profile and business. We follow a formal, documented process to assess the data protection practices of certain third-party vendors that handle sensitive information on our behalf.

companyName: Amesite Inc.

ticker: AMST


text: Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us or our business strategy, results of operations or financial condition, we could, from time to time, experience threats and security incidents relating to our and our third-party vendors' information systems. For more information, please see the section entitled "Risk Factors"


text: Our board of directors has oversight over cybersecurity risks. Our management provides periodic presentations to the board of directors on our cybersecurity program, including updates on cybersecurity risks and related cybersecurity strategy, as applicable. The management provides updates regarding our cybersecurity program to the board of directors when material.


text: While we have not experienced any material cybersecurity threats or incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents.


text: of September 30, 2024, we did not establish policies and processes for assessing, identifying, and managing material risk from cybersecurity have integrated the processes of assessing, identifying, and managing material risk from cybersecurity threats into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Zhuoxun Hongtu Inc.


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards. Our Vice President, Mr. Peng, is designated to manage the risk assessment and mitigation process.


text: may engage consultants and other third parties as needed in connection with our risk assessment policies and processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.


text: require third-party service providers to certify their ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of their security measures that may affect the Company.


text: part of our overall risk management strategies, we also conduct cybersecurity trainings for personnel at all levels and in all departments.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Mr. Yi, as sole director of our Board of Directors, is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Mr. Peng, our Vice President, provides periodic briefings to Mr. Yi regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity policies and procedures, activities of third parties, and the like.


text: Peng has more two decades of experience working in IT and technology companies. Before assuming his current positions as chief product officer and VP of our Company, Mr. Peng served as General Manager of Beijing Xuri Yuanfan Technology Development Co., Ltd., an internet solution company, from July 2006 to June 2016. From September 2002 to June 2006, Mr. Peng served as manager of the technology department at Beijing Shidai Saibo Technology Development Co., Ltd., an IT solution company. Earlier in his career, Mr. Peng started at Beijing Jinhaihang Electronic Technology Co., Ltd., serving as a technical support engineer for the company's education software businesses, from March 2000 to August 2002. Therefore, Mr. Peng has intimate knowledge of IT and cybersecurity issues and our operations.


text: part of the executive team reporting to the Board, Mr. Peng oversees our cybersecurity policies and processes, including those described in "Risk Management" above. The processes by which Mr. Peng is informed of and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents include log review from IT and operations teams or reports received from network systems and applications if any unusual activity occurs, such as email system notification of items opened that could be malicious.


text: Cybersecurity Risk Management and Strategy In the normal course of business, we may collect and store customer information, and certain sensitive company information, including proprietary and confidential business information.

companyName: NYIAX, INC.


text: To protect this information, our existing cybersecurity policies require continuous monitoring, network security measures, and encryption of data. We maintain various protections designed to safeguard against cyberattacks, including firewalls, key-based authentication, and virtual private networks. We protect against business interruption by backing up our major systems.


text: Our cybersecurity program is led by our CTO, alongside the CEO, and includes but is not limited to: IT security policies and practices, security risk assessment and mitigations, software vulnerability checks and updates, regular access certificate rotations - all designed to protect the privacy and security of the sensitive information and continuation of business.


text: Given the size of the company, we do not have a specific committee dedicated to cybersecurity oversight. Instead, all board members participate in the review and monitoring of these risks. The CTO and the CEO inform the board of directors on information security and cybersecurity matters as needed.


text: Despite the implementation of our cybersecurity program, our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences for the business. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security. None.


text: To proactively manage cybersecurity risk in our organization, our management team has instituted an Information Technology Security Policy that is available to all employees through our Quality Management System. We also conduct regular cybersecurity awareness and training campaigns for existing employees. Stakeholders can access Jasper's Information Technology helpdesk 24/7 online or by phone, to report any security incidents for escalation.

companyName: Jasper Therapeutics, Inc.

ticker: JSPR


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.

companyName: SURGE COMPONENTS INC

ticker: SPRS


text: Key elements of our cybersecurity risk management program include but are not limited to, risk assessments designed to help identify material risks from cybersecurity threats to our critical systems, information, services, and our broader enterprise IT environment;


text: individuals, including employees and external third party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; a cybersecurity insurance policy in place to help mitigate monetary losses of a potential cybersecurity attack.


text: Members of our management team have prior work experience in supervising and implementing cybersecurity risk mitigation efforts in highly-regulated industries. Our internal cybersecurity personnel and retained external cybersecurity consultants also have a breadth of expertise across core cybersecurity disciplines including governance, risk, compliance, and security architecture.


text: Our management team takes steps to stay informed and monitors efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment Our Board considers cybersecurity risk as part of its risk oversight function and receives regular updates from the management team on our cybersecurity risks and in addition, management updates the Board where it deems appropriate, regarding any cybersecurity incidents it considers to be significant or potentially significant.


text: of the internal working group have multiple decades of experience in information security and risk management, including assessing cybersecurity threats. Furthermore, the CTO and CISO have educational backgrounds and hold professional experience and certifications relevant to management of cybersecurity.

companyName: Kayne Anderson BDC, Inc.

ticker: KBDC


text: Company's Board of Directors (the "Board") is responsible for overseeing the Company's risk management program and cybersecurity is a critical element of this program. Management is responsible for the day-to-day administration of the Company's risk management program and its cybersecurity policies, processes, and practices. The Company's cybersecurity policies, standards, processes, and practices are based on recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and other applicable industry standards and are fully integrated into the Company's overall risk management processes. In general, the Company seeks to address material cybersecurity threats through a company-wide approach that addresses the confidentiality, integrity, and availability of the Company's information systems or the information that the Company collects and stores, by assessing, identifying and managing cybersecurity issues as they occur.

companyName: Kayne DL 2021, Inc.


text: The Company has implemented a comprehensive, cross-functional approach to assessing, identifying and managing material cybersecurity threats and incidents. The Company's program includes controls and procedures to properly identify, classify and escalate certain cybersecurity incidents to provide management visibility and obtain direction from management as to the public disclosure and reporting of material incidents in a timely manner.


text: The Company implements technical safeguards that are designed to protect the Company's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence, as well as assistance from third party experts where necessary.


text: The Company provides regular, mandatory training for all levels of employees regarding cybersecurity threats as a means to equip the Company's employees with effective tools to address cybersecurity threats, and to communicate the Company's evolving information security policies, standards, processes, and practices.


text: Company conducts periodic assessment and testing of the Company's policies, standards, processes, and practices in a manner intended to address cybersecurity threats and events. This includes penetration testing of network infrastructure and phishing tests targeting the Adviser's employees. The results of such assessments and reviews are evaluated by management and reported to the Board, and the Company adjusts its cybersecurity policies, standards, processes, and practices as necessary based on the information provided by these assessments and reviews.


text: Board, in coordination with the Adviser, oversees the Company's risk management program, including the management of cybersecurity threats. The Board receives regular updates and reports on developments in the cybersecurity space, including risk management practices, recent developments, vulnerability assessments, third-party and independent reviews, the threat environment, and information security issues encountered by the Company'. The Board also receives prompt and timely information regarding any cybersecurity risk that meets pre-established reporting thresholds, as well as ongoing updates regarding any such risk. On an annual basis, the Board and the Adviser discuss the Company's approach to overseeing cybersecurity threats.


text: Adviser has established an internal working group that includes relevant representation from senior management including the CCO, CFO, and CISO, and CTO who work collaboratively to implement a program designed to protect the Company's information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents in accordance with the Company's incident response and recovery plans. Through ongoing communication with these teams, the CISO, CTO and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time, and report such threats and incidents to the Board when appropriate.


text: Effects of Cybersecurity Incidents from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: Company has a dedicated internal IT department with cybersecurity engineers who oversee various aspects of cybersecurity. These engineers specialize in different areas, including ensuring security during product development, particularly in the domains of cloud management platforms and network interactions, as well as managing cybersecurity for daily office communications.

companyName: RICHTECH ROBOTICS INC.

ticker: RR


text: the event of an unexpected cybersecurity incident, the engineers immediately report to the Company's management. They are equipped with pre-established response plans to address such situations effectively and mitigate potential risks.


text: our cybersecurity risk management relies primarily on internal resources. However, as the Company continues to expand, we anticipate engaging third-party consultants to assist in enhancing our cybersecurity management processes and addressing evolving threats.


text: we do not currently have third-party collaborations, the Company plans to implement a process for selecting and evaluating third-party service providers in the future. This will include comparing services, signing security agreements, and having our internal engineers assess the third parties' achievement of security objectives.


text: the past three years, our Company has not experienced any material cybersecurity risks. To ensure robust protection against potential threats, we have implemented the following security measures: Regularly updating and changing critical passwords. modifying communication interfaces to enhance security. development tasks in a modular fashion to minimize exposure. dual-factor authentication for system access. tiered authorization levels for critical network operations. routine security training and awareness programs for employees.


text: the Company's board of directors does not oversee cybersecurity risks directly. However, plans are in place to introduce such oversight in the future. The Audit Committee of the Board will assume responsibility for cybersecurity risk oversight, with a plan to review cybersecurity matters on a quarterly basis. This initiative will ensure that the Company maintains robust oversight mechanisms to address evolving cybersecurity threats effectively.


text: responsibility for assessing and managing cybersecurity risks within the Company lies with the managers of the R&D department and the IT department. Both individuals possess relevant expertise in their respective fields, ensuring a high level of competence in identifying and mitigating cybersecurity risks. Their duties include monitoring potential threats, implementing security protocols, and responding the event of cybersecurity incidents or abnormal alerts, the relevant department managers immediately intervene and manage the situation.


text: All logs and records related to such events are preserved for future analysis. Cybersecurity testing is incorporated into every stage of product development, ensuring that vulnerabilities are identified and addressed proactively. Additionally, server security patches are regularly updated to mitigate potential threats.


text: Our management team, in conjunction with third-party information technology ("IT") and cybersecurity service providers, is responsible for oversight and administration of our cyber risk management program, and for informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents. Adial's management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes directly or via selection of strategic third-party partners, and relies on threat intelligence as well as other information obtained from governmental, public, or private sources, including external consultants engaged by us for strategic cyber risk management, advisory and decision making. Our management team and key staff participate in regular cybersecurity training created by industry recognized cybersecurity providers. Our Audit Committee also provides oversight of risks from cybersecurity threats.

companyName: ADIAL PHARMACEUTICALS, INC.

ticker: ADIL


text: We maintain a cyber risk management program designed to identify, assess, manage, mitigate and respond to cybersecurity threats. This program, in conjunction with our enterprise risk management assessment processes, address cybersecurity risks to the corporate information technology, or IT, environment including systems, hardware, software, data, people and processes.

companyName: Protara Therapeutics, Inc.

ticker: TARA


text: The underlying processes and controls of our cyber risk management program incorporate recognized best practices and standards for cybersecurity and IT, including the National Institute of Standards and Technology, or NIST, Cybersecurity Framework, or CSF, and processes and controls supporting data protection requirements under applicable law. The NIST CSF offers a thorough set of guidelines and best practices to help establish a strong cybersecurity posture. Utilizing NIST CSF enables us to systemically identify, assess, and manage cybersecurity risks most relevant and impactful to our business operations. It is important to note that using the NIST CSF as a guide does not imply our cybersecurity program meets any specific technical standards or requirements.


text: We have an annual assessment performed by a third-party specialist of the Company's cyber risk management program against the NIST CSF. The annual risk assessment identifies, quantifies and categorizes significant cyber risks. In addition, we, in conjunction with the third-party cyber risk management specialists, developed a risk mitigation plan to address such cyber risks, and where necessary, remediate potential vulnerabilities identified through the annual assessment process.


text: In addition, we maintain policies over areas such as protecting and handling confidential information, processing of personal data, access on/off boarding, user management, acceptable use, and IT change control management to help govern the processes put in place by management designed to protect our IT assets, data and services from threats and vulnerabilities. We employ additional key practices within the cyber risk management program including, but not limited to maintenance of an IT assets inventory, periodic network scans, identity access management controls including restricted access to privileged accounts, and physical security measures at our facilities. We also utilize information protection/detection systems, or IPS/IDS, including maintenance of firewalls and anti-malware tools, network and data traffic monitoring with automated alerting, ongoing cybersecurity user awareness training, industry-standard encryption protocols, formalized change management processes and critical data backups to reduce cybersecurity risk.


text: Cybersecurity partners, including assessors, consultants, advisors and other third-party service providers, are a key part of our cybersecurity risk management strategy and infrastructure. We partner with industry recognized cybersecurity providers leveraging third-party technology and expertise and engage with these partners to monitor and maintain the performance and effectiveness of IT assets, data and services. The cybersecurity partners provide services including, but not limited to systems inventory monitoring, configuration management, periodic network scanning, user management, mobile device monitoring, capacity monitoring, network protection and monitoring, IPS/IDS management, remote access monitoring and management, user activity monitoring, data backups management, infrastructure maintenance, incident response, cybersecurity strategy, and cyber risk advisory, assessment and remediation.


text: We have implemented third-party risk management processes to manage the risks associated with reliance on vendors, critical service providers, and other third parties that may lead to a service disruption or an adverse cybersecurity incident. This includes processes for performing third-party risk ratings and data classification mapping of current and ongoing vendors. The program promotes good cybersecurity practices with our third-party vendors and helps to ensure their adherence to our cybersecurity standards.


text: Our cybersecurity program includes an incident response plan that includes all relevant and critical members of management and third-party service providers alike.


text: The team is responsible for assessing and managing cybersecurity incident response processes, response times, and communication plans in the event corrective actions and mitigation procedures are required to isolate and eradicate an incident.


text: Our finance leadership team, led by our chief financial officer, in conjunction with third-party IT and cybersecurity service providers is responsible for oversight and administration of our cyber risk management program, and for informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation and remediation of cybersecurity incidents. Our finance leadership team has experience selecting, deploying and overseeing cybersecurity technologies, initiatives, and processes directly or via selection of strategic third-party partners.


text: We also rely on threat intelligence and other information obtained from governmental, public, or private sources, including external consultants engaged by us for strategic cyber risk management, advisory and decision making.


text: The Audit Committee of the Board of Directors, or the Audit Committee, oversees our cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk advisory services, brief the Audit Committee on cyber threats and vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, the emerging threat landscape, and new cyber risks on at least an annual basis.


text: This includes updates on our processes to prevent, detect and mitigate cybersecurity incidents. In addition, the Audit Committee is responsible for reporting information about such risks to the Board of Directors and material cybersecurity risks and/or events are reviewed by the Board of Directors, at least annually, as part of our corporate risk oversight processes.


text: We acknowledge that the risk of cyber incidents is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of our business. However, prior cybersecurity incidents have not been material and are not reasonably likely to have had a material adverse effect on our business, financial condition, results of operations, or cash flows. We proactively seek to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal policies, processes, and operations; however, potential vulnerabilities to known or unknown threats will still remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors and additional stakeholders, which could subject us to additional liability and reputational harm.


text: In response to such risks, we have implemented initiatives such as our cybersecurity risk assessment process and development of an incident response plan. See Item 1A. "Risk Factors" for more information on Company cybersecurity risks.


text: However, we do depend on the digital technologies of third parties, including information systems, infrastructure and cloud applications and services, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. In the event of a cybersecurity incident impacting us, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

companyName: ASPAC III Acquisition Corp.

ticker: ASPC


text: Management's Role in Cybersecurity Risk Management The Company's management, including the Company's CCO and the Head of Information Technology of Oxford Funds, manages the Company's cybersecurity program. The President and CCO of the Company oversee the Company's oversight function generally and rely on Oxford Funds' Head of Information Technology to manage the assessment and management of material risks from cybersecurity threats. The Head of Information Technology has more than 9 years of experience in actively managing cybersecurity and information security programs for financial services companies with complex information systems. The CCO has been responsible for his oversight function as CCO to the Company for 9 years and has worked in the financial services industry for more than 35 years, during which time the CCO has gained expertise in assessing and managing risk applicable to the Company.

companyName: Oxford Square Capital Corp.

ticker: OXSQ


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties.

companyName: Merlin, Inc.

ticker: MRLN


text: We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering. In addition to our own cybersecurity risks, any proposed Business Combination target may have been subject to, or may in the future be subject to, cybersecurity incidents.


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident.

companyName: COLOMBIER ACQUISITION CORP. II


text: As an early stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering. In addition to our own cybersecurity risks, any proposed Business Combination target, such as GrabAGun, may have been subject to, or may in the future be subject to, cybersecurity incidents.


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties. Any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data.

companyName: AA Mission Acquisition Corp.


text: Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats.


text: Risk management and strategy rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.

companyName: Ondas Inc.

ticker: ONDS


text: part of our broader risk management framework, we have identified the potential cybersecurity risks to our business and implemented structured controls to mitigate them. Our business applications and hosting services are designed to minimize the impact of cybersecurity incidents, enhance cybersecurity resilience, we have implemented a structured Information Security Management System (ISMS) certified in accordance with ISO 27001, providing a comprehensive approach to managing cybersecurity risks and aligning with industry best practices. Our risk mitigation efforts include a combination of administrative, technical, and operational controls, such as real-time monitoring and detection activities, anti-malware and endpoint protection solutions, annual employee cybersecurity training, regular security audits, third-party penetration testing, and a clear communication and reporting structure to facilitate timely responses to security incidents.


text: have a Cybersecurity Incident Response Plan (CIRP) that defines roles, responsibilities, and reporting mechanisms, as well as a structured incident response process covering preparation, detection, response, documentation, and post-incident analysis. This plan outlines possible cybersecurity threats and response measures for incidents such as denial-of-service attacks, malicious code attacks, website defacement, data corruption, and data leakage. In addition, we maintain a Business Continuity Plan (BCP) in accordance with ISO 27001 to ensure operational resilience, including detailed continuity procedures, system restoration timeframes, and recovery strategies for various scenarios.


text: address cybersecurity risks associated with third-party service providers, we have established procedures, policies, and tools for identifying, assessing, and mitigating potential threats. This process begins with a third-party risk assessment, which is performed and updated as needed. Our Information Security Guidelines for Suppliers ensure compliance with security standards, while our Access Control Policies regulate third-party access to sensitive systems, and our Cloud System Information Security Procedures govern data security in cloud environments.


text: We also engage third-party consultants to assist in designing and enhancing our cybersecurity risk management framework, including penetration testing and continuous threat monitoring. date, we have not encountered cybersecurity threats or incidents that have had a material impact on our business.


text: Chief Financial Officer has primary responsibility for assessing, monitoring, and managing cybersecurity risks. Leaders of our Ondas Networks and OAS segments, along with the Chief Financial Officer, meet quarterly to assess cybersecurity risks, identify emerging threats, and evaluate our risk management framework. The Chief Financial Officer provides quarterly updates to the Board of Directors on any cybersecurity-related risks. Our incident response plan includes notifying the Board of Directors of any material threats or incidents as they arise. Although these members of our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with in-house and third-party information technology specialists, enables them to effectively assess and manage material risks from cybersecurity threats.


text: OAS, risk management oversight is further managed through our Head of Information Security, who is responsible for overseeing the information security aspects of our cybersecurity framework. Our Head of Information Security brings extensive expertise to the role, with military experience in information security, a B.Sc. in Information Systems Engineering, and specialized training in computer and information systems security/information assurance from the T V S D Academy. Additionally, our Head of Information Security is certified by the Standards Institution of Israel as a Senior Internal Auditor for ISO 27001. Her areas of expertise include performing risk assessments, developing business continuity plans, drafting information security policies and procedures, conducting internal audits, leading information security training, and evaluating information systems structured approach ensures that our cybersecurity governance remains robust, proactive, and aligned with industry best practices.


text: Ondas Networks, risk management is further managed through the use of expert third party companies to assist in managing relevant risks.


text: In particular, the Company outsources its information technology function and monitoring to a third-party provider whereby it benefits from a professionally managed network monitoring, management, maintenance, detection and response system and a 24/7 security operations center with both onsite and remote support services. Any cybersecurity incident would be reported to the Company promptly by our third-party consultant.


text: Risk management and strategy Managing Material Risks & Integrated Overall Risk Management We have developed and continue to develop processes, including those intended to follow an internal Information Technology (IT) Security Policy, which seek to assess, identify, and manage material risks from cybersecurity threats to the IT systems and information that we create, use, transmit, receive, and maintain. We also seek to integrate these processes and policies into our overall enterprise risk management system and processes. We also maintain an evolving cybersecurity roadmap for our future cybersecurity plans. The processes for assessing, identifying, and managing material risks from cybersecurity threats, including threats associated with our use of third-party service providers, include our efforts to identify the relevant assets that could be affected, determine possible threat sources and threat events, assess threats based on their potential likelihood and impact, and identify controls that are in place or necessary to manage and/or mitigate such risks. In furtherance of our cybersecurity policies and procedures, our IT team has a monthly IT Steering committee meeting, chaired by our Chief Financial Officer ("CFO") and Chief Strategy Officer, where all new IT projects include a cybersecurity component.

companyName: electroCore, Inc.

ticker: ECOR


text: Risks from Cybersecurity Threats We have not experienced any material cybersecurity incidents and the expenses we have incurred from any security incidents were immaterial. As a result, we do not believe that risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected us, our results of operations and financial condition. However, as discussed under "Risk Factors" in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple and potentially material risks to us, including potentially to our results of operations and financial condition. See also "Risk Factors — Failure to protect our information technology infrastructure against cyber-based attacks, network security breaches, service interruptions, or data corruption could significantly disrupt our operations and adversely affect our business strategy and operating results." As cybersecurity threats become more frequent, sophisticated, and coordinated, it is reasonably likely that we may expend greater resources to continue to modify and enhance protective measures against such security risks.


text: Management's Role Managing Risk The role of the Chief Information Security Officer (CISO) has been assigned to our VP, Information Technology, who has more than 20 years of IT experience and reports to the CFO. The CISO and the CFO inform the Audit Committee on cybersecurity risks. They provide briefings to the Audit Committee on no less than an annual basis or on an ad hoc basis when needed. These briefings encompass: Evaluation of existing cybersecurity risks; Status of ongoing cybersecurity initiatives and strategies from the cybersecurity roadmap; and Incident reports and learnings from cybersecurity events.


text: External Assessments Our cybersecurity policies, standards, processes and practices are regularly assessed by consultants and external independent auditors. These assessments include a variety of activities including information security assessments, audits and independent reviews of our ISMS, control environment and operating effectiveness. For example, in 2023 and 2024, we conducted independent audits to assess our ISMS against the ISO/IEC 27001:2013 standard and received certification of compliance with the standard. We also undertake regular penetration testing of our systems. The results of significant assessments are reported to management and the Board. Cybersecurity processes are adjusted based on the information provided from these assessments. We have also obtained industry certifications and attestations that demonstrate our dedication to protecting the data our customers entrust to us.

companyName: authID Inc.

ticker: AUID


text: We recognize the critical importance of maintaining the trust and confidence of our customers, business partners, employees and other stakeholders. We engage in active oversight of cybersecurity, a cornerstone of our comprehensive enterprise risk management (ERM) program. Our cybersecurity framework is rooted in the National Institute of Standards and Technology, or NIST, Cybersecurity Framework, or CSF, as well as the International Organization for Standardization (ISO/IEC 27001), reflecting our commitment to uphold the highest cybersecurity standards. We align our policies, standards and practices with these benchmarks and dynamically refine them to address evolving cybersecurity threats.

companyName: Alto Ingredients, Inc.

ticker: ALTO


text: Risk Management and Strategy We maintain a cybersecurity program aligned with NIST CSF standards designed to identify critical assets and vulnerabilities, protect them with appropriate safeguards, promptly detect cybersecurity events, respond effectively to mitigate their impact and recover from incidents to restore services. Our cybersecurity program is designed to safeguard the confidentiality, integrity and availability of information. Our cybersecurity risk management strategy includes: Governance: The Audit Committee of our Board of Directors oversees our cybersecurity risk management.


text: Our Chief Financial Officer and Director of Information Technology, along with key executives, have roles in governance and facilitating alignment across our organization.


text: Technical Safeguards We deploy technical defenses against cybersecurity risks of attack and other incidents, including firewalls, intrusion detection and prevention systems and access controls. We refine these measures based on our ongoing assessments, including cybersecurity threat intelligence updates.


text: Response and Recovery Planning: We maintain incident response and recovery frameworks, tested twice yearly through backup restorations to critical systems, to improve our preparedness to effectively manage and mitigate cybersecurity incidents.


text: Education and Awareness: Our personnel and members of our Board of Directors undergo mandatory periodic training on cybersecurity threats, with updated insights into effective defense mechanisms and our evolving cybersecurity policies and practices.


text: Use of Third Parties: We collaborate with external cybersecurity service providers, including auditors, consultants and governmental agencies, to refine our cybersecurity measures. These service providers carry out cybersecurity risk evaluations such as periodic assessments and vulnerability scans to pinpoint potential security flaws and suggest enhancements. In addition, we employ third-party technology and other solutions to enhance our protection against cybersecurity risks. These solutions include our use of a managed security service provider to support our in-house technology team, an endpoint detection and response, or EDR, system for ongoing surveillance, detection, and action against threats, as well as a security information and event management, or SIEM, system designed to automate the real time identification, investigation and prioritization of critical alerts.


text: Third-Party Risk Management: We use a comprehensive due diligence process to manage third-party risks, emphasizing continuous monitoring and to ensure our business partners' cybersecurity practices meet our stringent standards.


text: As of the filing of this report, we do not believe that any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect, Alto Ingredients, Inc.


text: networks and systems are continuously monitored by a combination of third-party service providers and an internal cybersecurity team. Management is promptly notified of cybersecurity incidents. Audit Committee is promptly notified by our management of any material cybersecurity breach. Board of Directors is briefed at least quarterly on the state of our cybersecurity program.


text: internal cybersecurity team collaborates with external cybersecurity service providers, including auditors, consultants and governmental agencies, to refine our cybersecurity measures. These service providers carry out cybersecurity risk evaluations such as periodic assessments and vulnerability scans to pinpoint potential security flaws and suggest enhancements.


text: Engagement and Continuous Improvement We periodically evaluate our cybersecurity measures through internal and external audits and assessments to ensure our cybersecurity program is at the forefront of industry best practices.


text: The results of these audits and assessments inform adjustments to our cybersecurity program to improve our resilience against emerging cybersecurity threats.


text: 2024, we did not identify any cybersecurity breaches that materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition.

companyName: Purple Innovation, Inc.

ticker: PRPL


text: management team is responsible for monitoring, preventing, detecting, mitigating and remediating cybersecurity incidents. Our chief technology officer has over 41 years of experience and has held various leadership roles in information technology, including serving as a chief information officer and chief technology officer for the last 13 years. He has successfully implemented and managed large enterprise resource planning systems, e-commerce websites, stores and enterprise infrastructure, both cloud-based and on-premise. His expertise extends to evaluating and hiring cybersecurity personnel and outsourced managed services, defining incident response plans, conducting tabletop exercises, and establishing communication protocols with internal executives, board members, and vendors. He has firsthand experience in responding to actual cybersecurity incidents, showcasing a deep understanding of the challenges and complexities within the cybersecurity landscape in the retail sector. Our senior director of cybersecurity and compliance has a 16-year track record as an information technology and information security professional, complemented by an Executive MBA. His career is distinguished by a decade of leadership as the commander of the United States Army cyber protection team (174 CPT), where he gained cybersecurity experience at USCYBERCOM and ARCYBER.


text: He holds multiple professional certifications, including CISSP, PMP and multiple SANS certifications. Our chief technology officer and senior director of cybersecurity and compliance report to the Audit Committee on these matters. maintain a cybersecurity risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats.


text: Our cybersecurity risk management processes are being integrated into our overall risk management processes. We are making efforts to incorporate cybersecurity considerations as a part of our business processes. We engage with external cybersecurity experts, including assessors, consultants, and auditors, to enhance our cybersecurity measures and ensure compliance with industry best practices. For example, a comprehensive cyber risk assessment, both physical and logical, was conducted by a third party, serving as an external penetration test to validate our security posture. We have established processes to oversee and manage cybersecurity risks associated with our use of third-party service providers, ensuring they adhere to our security standards. We review third-party service provider contracts to ensure they contain data privacy and security provisions, aligning with our standards and regulatory requirements. Additionally, we have established a Technology Review Committee ("TRC") tasked with the role of evaluating new software tools and technologies before their implementation. The TRC consists of experts from various domains within our organization, including information technology security, compliance, legal, and operations. This TRC conducts assessments to ensure that any new software tools meet our standards for security, compliance and operational efficiency.


text: oversight of our cybersecurity is assigned to the Audit Committee of our Board of Directors. The Audit Committee receives regular reports and briefings from management on our cybersecurity threat risk management and strategy processes, including on topics such as our data security posture, results from third-party assessments, progress towards pre-determined risk-mitigation-related goals, incident response plans, and cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to these risks.


text: In addition, management updates the Audit Committee as necessary regarding any material cybersecurity incidents as well as any incidents with lesser impact potential. The Audit Committee received one report from our Senior Director of Cybersecurity and Compliance in 2024.


text: are a shell company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable target businesses for a business combination. Therefore, we do not consider that we face significant cybersecurity risk. Nevertheless, we employ various procedures designed to identify, protect, detect and respond to and manage reasonably foreseeable cybersecurity risks and threats given our limited operations. These include, but are not limited to, internal reporting, monitoring and detection tools and anti-virus software in. We also periodically assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities, including those that could arise from internal sources and external sources such as third-party service providers we do business with. We may the future determine to engage an assessor(s), consultant(s), auditor(s) or other third party (s) to supplement our processes.

companyName: Allegro Merger Corp.


text: Horizon recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: New Horizon Aircraft Ltd.

ticker: HOVR


text: Managing Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team works closely with our IT department to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Engage Third-parties on Risk Management the complexity and evolving nature of cybersecurity threats, we engage with a range of external experts, including cybersecurity assessors, consultants, and auditors in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties includes regular audits, threat assessments, and consultation on security enhancements.


text: we are aware of the risks associated with third-party service providers, we implement stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. At a minimum the monitoring includes annual assessments by our Chief Information Security Officer ("CISO"). This approach is designed to mitigate risks related to data breaches or other security incidents originating from third-parties. Risks from Cybersecurity have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Board is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Board has established robust oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence, Board of Directors Oversight Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this domain.


text: The Audit Committee is composed of independent board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.


text: CISO and our Chief Executive Officer play a pivotal role in informing the Audit Committee on cybersecurity risks. They provide comprehensive briefings to the Audit Committee on a regular basis, with a minimum frequency of once per year. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies;


text: Incident reports and learnings from any cybersecurity events; and addition to our scheduled meetings, the Audit Committee, CISO and Chief Executive Officer maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive. The Audit Committee actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated our broader strategic objectives. The Audit Committee conducts an annual review of the Company's cybersecurity posture and the effectiveness of its risk management strategies. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: responsibility for assessing, monitoring, and managing our cybersecurity risks rests with the CISO, Jason O'Neill. With over 25 years of experience in the field of IT Technology and enterprise security, Mr. O'Neill brings a wealth of expertise to his role.


text: His background includes extensive experience achieving bank and government-level compliant security practices in high-performance technology companies. His in-depth knowledge and experience are instrumental in developing and executing our cybersecurity strategies. Our CISO oversees our governance programs, communicates cyber security threats, remediates known risks, and oversees our employee training program.


text: CISO is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The CISO implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the CISO is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: to company files and data is critical to our effective operation and financial performance. The Company is aware that cybersecurity treats including ransomware must be identified and mitigated with minimal impact to corporate objectives. We employ a secure data governance policy that includes off-site, secure, multi-cloud data storage to ensure that risks to critical business operations are mitigated in the rare case of an incident.


text: CISO, in his capacity, regularly informs the Chief Financial Officer and Chief Executive Officer of all aspects related to cybersecurity risks and incidents. This ensures that the senior management team is kept abreast of the cybersecurity posture and potential risks facing New Horizon. Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Board, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.


text: have taken a multifaceted approach to addressing cybersecurity risks, including leadership from our senior management and Board of Directors, direct supervision and operational execution from our information technology ("IT") department and active involvement of employees. The Company's senior management devotes significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats. We periodically assess the threat landscape and take a holistic view of cybersecurity risks, with a layered cybersecurity strategy based on prevention, detection and mitigation. Our IT team reviews cybersecurity risks, and we have a set of Company-wide policies and procedures concerning cybersecurity matters, including policies related to encryption standards, remote access, multi factor authentication, confidential information, the use of the internet, social media, email and wireless devices and incident response.

companyName: CBAK Energy Technology, Inc.

ticker: CBAT


text: Company's Chief Executive Officer is responsible for developing and implementing our information security measures and overseeing our IT department. The Company has established a physical firewall, with physical gateways that filter suspicious files and data flows entering and exiting our Company's network. In addition, the computers in our R&D department are equipped with behavior control software, which makes emails and files sent from the R&D computers in an encrypted state and inaccessible without specific authorization from designated supervisors.


text: Company's IT department is directly responsible for cybersecurity matters and routinely reports to the senior management. In the event of a cybersecurity incident, the IT department will initially report to the Company's senior management, including our Chief Executive Officer. If the incident is assessed as a material threat or incident to our information systems, our senior management will escalate the issue to the Board of Directors. Given that our core operations are in manufacturing and involve limited network-related activities, we believe that our existing cybersecurity measures are adequate. The Company's Board of Directors and senior management are committed to continuously evaluating and upgrading our cybersecurity prevention, detection, and mitigation strategies in line with the evolution of our business needs and cybersecurity risks.


text: the fiscal year ended December 31, 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: For additional information about these risks, see " Risks Related to Our Business—We rely significantly on technology and systems to support our production, supply chain, payments, financial reporting and other key aspects of our business. Any failure, inadequacy, interruption or security failure of those systems could have a material adverse effect on our business, reputation and brand, financial condition, and results of operations " and " Risks Related to Our Business—System security risk issues, and disruption of our internal operations or information technology systems, could have a material adverse effect on our business, financial condition, and results of operations " in Item 1A-Risk Factors.


text: Health In Tech prioritizes a proactive and comprehensive approach to risk management and cybersecurity, ensuring the protection of our Operational Technology (OT) environment and critical infrastructure from evolving cyber threats. Our security framework is built on robust, adaptive measures, which are regularly refined to incorporate industry best practices and cutting-edge technologies.

companyName: Health In Tech, Inc.

ticker: HIT


text: Through strategic oversight, advanced threat detection, and frequent improvement, we maintain a high level of protection for our systems and data.


text: Below is an overview of our processes for assessing, identifying, and managing material risks from cybersecurity threats, all of which are conducted in-house.


text: Network/System Security of OT from IT and User Networks: We ensure our OT systems are physically or logically separated from corporate IT networks, reducing the risk of cross-contamination. Device Hardening: We enhance security by disabling unnecessary ports, services, and protocols, minimizing potential attack surfaces. ensure data Encryption in transit and at rest.


text: Management: We maintain a controlled patch management process, ensuring OT systems receive regular updates while considering their unique conduct continuous vulnerability scanning to internal and external networks.


text: Protection: We implement best-practice security baselines and hardening measures, supported by next-generation security agents EDR for monitoring and automated remediation. Additionally, our Security Information and Event Management (SIEM) system enables autonomous remediation and real-time threat alerting our security team.


text: Solutions: Recognizing that traditional antivirus may not always be applicable, we deploy specialized security software to detect and prevent malware threats.


text: Analysis: We utilize advanced behavioral analysis tools to detect ransomware threats by identifying unusual encryption activity, unauthorized file modifications, and abnormal network communications.


text: Backup and Recovery: We perform regular backups of critical systems, ensuring they are securely isolated from the production environment to safeguard against ransomware attacks. Additionally, our disaster recovery plans undergo routine testing of backups to ensure rapid and effective recovery when needed.


text: of Least Privilege (PoLP): We enforce strict access controls, granting system access only to individuals who require it for their roles. Regular audits ensure compliance and minimize security risks.


text: Authentication (MFA): We require MFA for all system access, adding an extra layer of security to protect against unauthorized access.


text: Access Control (RBAC): Access to sensitive systems is governed by users' roles, ensuring only authorized personnel can perform specific actions on critical systems with regular user access audits.


text: Secure Remote Access and secure tunneling: We utilize secure VPNs and tunneling technologies with strong encryption to protect remote access to our systems. These connections are continuously monitored to ensure security and integrity.


text: Incident Response and Recovery Plans have a comprehensive incident response plan with detailed procedures for addressing ransomware attacks and other cyber threats, in an effort to provide a swift and effective response. Coordination: Our IT and security teams collaborate seamlessly during incidents to respond quickly, contain threats, and minimize impact.


text: Security Audits and Risk Assessments security audits: We conduct frequent security audits and vulnerability assessments to identify potential weaknesses and keep our defenses up to date. Additionally, we engage a third-party penetration testing firm for annual assessments to identify and address security vulnerabilities/misconfigurations.


text: risk management: We regularly evaluate and adapt our security measures to respond to emerging threats, including new ransomware strains and the evolving cyber threat landscape. incorporate threat intelligence into our security operations to proactively identify and mitigate potential cyber risks.


text: Employee and Contractor Required Training and Awareness cybersecurity awareness training, encompassing phishing awareness and sensitive data handling, is required for all employees and contractors. In addition, all IT and IT security staff are required to complete secure coding and data hygiene training. conduct simulated phishing tests monthly with required retraining on any failures.


text: exercises: We regularly run simulated attack exercises to ensure our teams are prepared to act swiftly and effectively during an actual cyberattack. Risk Management and Oversight Committee We conduct comprehensive risk assessments to identify vulnerabilities across systems, processes, and third-party dependencies.


text: We use of semi-quantitative risk assessment as a tool for evaluating the probability (likelihood) and severity (impact) of potential risks.


text: We perform comprehensive vendor risk assessments to verify third-party security measures effectively meet our organization's security policies and ensure vendor compliance with all relevant regulatory requirements and review on an annual basis. Our Governance, Risk, and Compliance (GRC) applications enable continuous, automated testing and real-time monitoring of infrastructure and user compliance.


text: We have strong executive and board oversight of regulatory and compliance risks, including changes in laws and regulations that could affect the company's business.


text: We maintain a materiality assessment process designed to ensure compliance with all applicable securities laws and regulations, including the SEC's cybersecurity disclosure rules. We also consider industry-specific regulations and standards, such as HIPAA for healthcare organizations.


text: To date, we have not identified any cybersecurity incidents or threats that have materially impacted our business strategy, operations, or financial condition. Our materiality assessment process is designed to ensure compliance with all applicable securities laws and regulations, including the SEC's cybersecurity disclosure rules. We also consider industry-specific regulations and standards. However, there can be no assurances that such a cybersecurity incident will occur or that such incident will materially impact our business. Any breach of our security measures, or those of our third-party service providers, could result in unauthorized access to and misappropriation of our information, corruption of data or disruption of systems, operations or transactions, any of which could have a material adverse effect on our business strategy, results of operations or financial condition.


text: See "Item 1A. Risk Factors" of this Annual Report on Form 10-K for further discussion of the risks related to cybersecurity threats.


text: Our Vice President of Security and Compliance leads our cybersecurity program and is responsible for implementing and maintaining our cybersecurity controls and provides regular updates to the Audit Committee and our executive management team on the status of our cybersecurity program and any cybersecurity incidents.


text: As of December 31, 2024, we have not identified any risks from known cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. However, we face certain ongoing cybersecurity threats that, if realized, are reasonably likely to materially affect us. Additional information on cybersecurity risks we face is discussed in Part I, Item 1A, "Risk Factors."

companyName: GD Culture Group Ltd

ticker: GDC


text: are a special purpose acquisition company with no business operations. Since our initial public offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk.

companyName: Mountain Lake Acquisition Corp.

ticker: MLAC


text: depend on digital technologies, including information systems, infrastructure and cloud applications and services, including those of third parties with which we may deal. Sophisticated and deliberate attacks on, or security breaches in, our information systems or infrastructure, or the information systems or infrastructure of third parties or the cloud, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats. In the event of a cybersecurity incident impacting us, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with the cybersecurity incident. As an early-stage company without significant investments in data security protection, there can be no assurance that we will have sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have adverse consequences on our business and lead to financial loss.


text: of the date of this Report, we have not identified any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that we believe have, or are likely to, materially affect us since our initial public offering.


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and as noted in Item 1A. Risk Factors of this Form 10-K, cyber incidents or attacks directed at us could result in information theft, data corruption, operational disruption and/or financial loss. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats.

companyName: Dynamix Corp

ticker: ETHM


text: Our cybersecurity risk management risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;

companyName: DUKE Robotics Corp.

ticker: DUKR


text: a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: Our board of directors considers cybersecurity risks as part of its risk oversight function and oversees management's implementation of our cybersecurity risk management efforts.


text: Management updates our board of directors, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Our Chief Executive Officer ("CEO") and CFO are responsible for assessing and managing our material risks from cybersecurity threats, our overall cybersecurity risk management efforts, and supervise both our internal cybersecurity personnel and our retained external cybersecurity consultants.


text: CEO and CFO supervise efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which include ensuring routine briefings from internal security personnel, obtaining threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and providing Company personnel with alerts and reports produced by security tools deployed in the IT environment.


text: We are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: YHN Acquisition I Ltd

ticker: YHNA


text: Risk Management and Strategy Our information security and risk management program is designed to identify, assess, and manage material risks from cybersecurity threats to our applications, computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, personal information, or protected health information (PHI) (collectively, "Information Systems").

companyName: OptimizeRx Corp

ticker: OPRX


text: Our information security program's basis is a comprehensive set of policies and procedures covering various information security domains (collectively, "Information Security Policy"), including, but not limited to: Access control, Endpoint protection, Third-party oversight, Education, training, and awareness, Network security, Risk management, Incident response, Business continuity and disaster recovery, Data protection and privacy, and Other security domains. Other security assessments. All risks are documented in a central Risk Register and tracked for mitigation and other treatment decisions.


text: Our information security program is audited annually against a well-known security framework, by an accredited third-party. In 2024, we allowed our HITRUST certification to lapse and we replaced it with System and Organization Controls (SOC) 2 assessment, which has more general applicability and covers the trust services criteria of security, confidentiality, privacy, and accessibility.


text: we stored certain PHI on behalf of customers on secure AWS managed servers in the contiguous United States, encrypted at rest and in transit.


text: End users did not have permission to access PHI unless the end user's account had the proper end user role permissions (e.g., HCPs or hub service providers). These end user roles were assigned according to the customer's needs to see the information. At all times, such information was segregated so that one customer could not access records containing PHI that were associated with another customer.


text: Our external audits and assessments identify and evaluate material risks from cybersecurity threats against our overall business objectives on a periodic basis and form the basis of internal reports, which can be shared with the management team, the Audit Committee of the Board of Directors, and the Board of Directors to evaluate our overall enterprise risk.


text: Our incident response program consists of an Incident Response Plan document and a cross-functional Incident Response Team, which are defined in our Information Security Policies. All workforce members are trained on incident reporting procedures, and there is a single point of contact for reporting all incidents. Incident response training is conducted annually, followed by a tabletop exercise. Our Incident Response Plan instructs personnel on how to notify our Incident Response Team in case of an incident. The VP of Information Security is the point person for incident responses and coordinates mitigation and remediation of cybersecurity incidents. We log all incidents and response plans for purposes of internal documentation. We report critical incidents to the management team, the Audit Committee, and the Board of Directors.


text: The Company's VP of Information Security is responsible for implementing the Information Security Policy on a day-to-day basis along with the Security Committee (as defined in the Information Security Policy), which includes the heads of the following departments, at a minimum: Information Security, Technology, Compliance, Product Management, Internal Audit, and Legal.


text: We use third-party service providers to perform a variety of functions throughout our business, including, but not limited to infrastructure support and maintenance, CRM, contract management, data hosting, and miscellaneous finance and accounting projects. We assess our vendors with respect to cybersecurity risk according to the services provided, the sensitivity of the Information Systems at issue, and the provider's identity. In appropriate cases, we will seek enhanced contractual obligations or guarantees related to cybersecurity on the service provider. Vendor risk assessments are performed before each vendor is engaged, and annual reviews are conducted to ensure vendors continue to meet security requirements.


text: We also maintain technical errors and omissions insurance which includes a cyber incident endorsement of up to $20 million. This endorsement provides coverage for Network Security and Privacy, Privacy Regulation Proceeding, Privacy Event Expense Reimbursement, Extortion Demand Reimbursement, Data Restoration, Network Restoration, Business Interruption and System Failure. This coverage reimburses the most common costs for information security incidents, including attorney's fees, consumer notification costs, and regulatory fines.


text: To our knowledge, during 2024, there were no material cybersecurity incidents or threats that materially affected or are reasonably likely to materially affect the Company's business strategy, results of operations, or financial condition. For more information on risks from cybersecurity threats that may materially affect the Company, see Item 1A. "Risk Factors".


text: The Board of Directors' oversight function includes cybersecurity risk management. The Board of Directors has three members with skills and experience in information security and cybersecurity through their experience as current and former executives of digital technology companies.


text: The Board of Directors has tasked the Audit Committee with overseeing the Company's cybersecurity risk management processes and determining which threats are likely to impact the Company's strategy, business operations, and financial condition. Pursuant to its charter, the Audit Committee of the Board of Directors reviews the Company's policies regarding information technology security and protection from cyber risks.


text: In particular, the Audit Committee reviews with management the Company's key IT Systems and evaluates the adequacy of the Company's information security program, compliance, and controls.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by our VP of Information Security and the Security Committee. For strategic decisions regarding cybersecurity, the VP of Information Security consults with the Chief Technology Officer, the Chief Financial Officer, the Chief Legal Officer, and the VP of Compliance.


text: The VP of Information Security is responsible for hiring appropriate personnel, performing vendor risk assessments, and communicating information security priorities to relevant personnel, so that we can build cybersecurity risk considerations into our business practices. The VP of Information Security also plans related budgets, designs cybersecurity processes, and reviews security assessments and related reports.


text: cybersecurity risk management program, processes and strategy described in this section are limited to the personal and business information belonging to or maintained by the Company (collectively, "Confidential Information"), our own third-party critical systems and services supporting or used by the Company (collectively, "Critical Systems"), and service providers.

companyName: HeartCore Enterprises, Inc.

ticker: HTCR


text: will develop and implement a company-wide cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our Confidential Information and Critical Systems. Our cybersecurity risk management program will be integrated into our overall enterprise risk management program and includes a cybersecurity incident response plan.


text: cybersecurity risk management program shall include: risk assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader enterprise IT environment;


text: a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; cybersecurity awareness and spear-phishing resistance training of our employees, and senior management;


text: Recognizing the complexity and evolving nature of cybersecurity threats, we have engaged with a range of external experts, including cybersecurity assessors, consultants, and auditors in evaluating and testing our risk management systems in an ongoing and as needed basis. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third parties includes regular audits, threat assessments, and consultation on security enhancements.

companyName: Versus Systems Inc.

ticker: VS


text: Because we are aware of the risks associated with third-party service providers, we implement stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes quarterly assessments by our CTO. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties. Risks from Cybersecurity Threats We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Incident reports and learnings from any cybersecurity events; and requirements and industry standards. In addition to our scheduled meetings, the Audit Committee and CEO maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive.


text: The Trust understands the importance of preventing, identifying, assessing, and managing material risks associated with cybersecurity threats. To manage material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, the Trust undertakes the below-listed activities: Monitoring emerging data risks, laws, and regulations pertaining to cybersecurity; vulnerability scans of the Trust's digital infrastructure; training for employees, including regular phishing email simulations; Reviewing third-party service providers to assess each vendor's cybersecurity processes prior to engaging and on an ongoing basis; access controls that restrict third-party service provider access to systems necessary to provide services; a cyber risk assessment, internally or by engaging a third party, to evaluate cybersecurity program, policies, and procedures;

companyName: Frontier Funds


text: The Trust's cybersecurity risk management program is overseen by the Executive Committee of the Managing Owner. Periodically, the Chief Information Security Officer of the Managing Owner provides an update to the Executive Committee of the Managing Owner on the Trust's cybersecurity threat risk management and strategy processes, including potential impact on the Trust, the efforts to manage the risks that are identified, and the Trust's disaster recovery preparations.


text: As of March 31, 2025, the Trust's business strategy, operations, or financial condition have not been materially affected by, and are not likely to be materially affected by, any cybersecurity threats or incidents.


text: The Company maintains cybersecurity procedures to mitigate risk and to ensure compliance with security, availability, and confidentiality. The cybersecurity process is integrated into the Company's overall risk management system and is solely internally managed. The Company's Chief Financial Officer is responsible for identifying risks that threaten achievement of the control activities made by the Company. The risk assessment occurs as business needs change and covers identification of risks that could act against the company's objectives.

companyName: Raphael Pharmaceutical Inc.

ticker: RAPH


text: The level of each identified risk is determined by the Company' Chief Financial Officer, considering the impact of the risk itself and the likelihood of the risk materializing.


text: As of the date of this Annual Report, we are not aware of any material risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.


text: Governance: As discussed in more detail under the heading "Governance" below, as part of its general oversight duties, the Board oversees the Company's risk management, including the cyber security risks.


text: Technical Safeguards: The Company deploys commensurate technical safeguards, including firewalls, encryption, network segmentation, real-time monitoring, intrusion prevention systems, anti-malware, and access controls.


text: Continuous Review: The Company regularly reviews its cybersecurity standards, and procedures and evaluates the effectiveness of implemented security controls. The Company adjusts its cybersecurity standards and programs as necessary.


text: The Board oversees our risk management process and receive regular updates and information on cybersecurity risks, if any, which address recent developments, evolving standards, the threat environment, technological trends and information security considerations arising with respect to our peers and third parties. The Board also receive timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed.


text: The Audit Committee of the Board of Directors oversees our cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. Member(s) of management assigned with cybersecurity oversight responsibility, including Nicolai A. Brune our Chief Financial Officer and/or third-party consultants providing cyber risk services brief the Audit Committee on cyber vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, and the emerging threat landscape and new cyber risks. This includes updates on our processes to prevent, detect, and mitigate cybersecurity incidents. The Audit Committee and management have engaged a third-party firm to oversee the complete audit of our cybersecurity and risk management systems to ensure the integrity of the systems that are in place.

companyName: RenX Enterprises Corp.

ticker: RENX