text: We engage third party services in connection with our cybersecurity risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. Our managed information technology service provider monitors and alerts us of cybersecurity threats and potential breaches. Our managed information technology service provider has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: Employee training and phishing campaigns are conducted every year. The Company's employees are expected to help safeguard the Company's information systems and to assist in the discovery and reporting of cybersecurity incidents.

companyName: Xenetic Biosciences, Inc.

ticker: XBIO

secItem: Item 1C


text: Although we may face a number of cybersecurity risks in connection with our business, we have not experienced any cybersecurity threats, incidents, or challenges that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, " Risk Governance


text: One of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers, with assistance from third-party consultants or advisors as appropriate, are responsible for the day-to-day management of the material risks we face. Our Chief Financial Officer oversees our cybersecurity risk assessment and mitigation process, and is responsible for the timely reporting of any material cybersecurity incident or threat, as well as any other cybersecurity related risks, to our board of directors.


text: Companies such as ours face a variety of risks, including financial reporting, legal, credit, liquidity, operational, health, safety and cybersecurity risks. The Board believes an effective risk management system will (1) identify the material risks that we face in a timely manner, (2) communicate necessary information with respect to material risks to senior executives and, as appropriate, to our directors (3) implement or oversee implementation of appropriate and responsive risk management and mitigation strategies consistent with our risk profile, and (4) integrate risk management into our decision-making.

companyName: GeoSolar Technologies, Inc.


text: Our Board oversees risk management after receiving briefings from advisors and also based on its own analysis and conclusions regarding the adequacy of our risk management processes. The Board continuously evaluates and manages material risks including geopolitical and enterprise risks, financial risks, environmental risks, health and safety risks and cybersecurity risks.


text: Daniel Chartock, our Chief Growth Officer and Executive Vice President of Operations, is responsible for assessing and managing cybersecurity risks. Mr. Chartock is experienced in assessing and managing cybersecurity risks due to his 30+ years in information technology consulting.


text: To date we have not experienced any cybersecurity threats and any risks from cybersecurity threats have not materially affected, and are not reasonably likely to materially affect, our business strategy, results of operations, or financial condition.


text: Cyber criminals are becoming more sophisticated and effective every day, and they are increasingly targeting software companies. All companies utilizing technology are subject to threats of breaches of their cybersecurity programs. To mitigate the threat to our business, we take a comprehensive approach to cybersecurity risk management and make securing the data customers and other stakeholders entrust to us a top priority. Our Board and our management are actively involved in the oversight of our risk management program, of which cybersecurity represents an important component. As described in more detail below, we have established policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats. We have devoted financial and personnel resources to implement and maintain security measures to meet regulatory requirements and customer expectations, and we intend to continue to make significant investments to maintain the security of our data and cybersecurity infrastructure. There can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective. Although our Risk Factors include further detail about the material cybersecurity risks we face, we believe that risks from prior cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that they will not materially affect us, including our business strategy, results of operations, or financial condition.

companyName: Paysign, Inc.

ticker: PAYS


text: Risk Management and Strategy We understand the critical importance of cybersecurity in protecting our operations, customer data, and the integrity of our services. Our commitment to cybersecurity is unwavering, and we adopt a serious, multi-layered approach to minimize the risks and potential impacts of cyber-attacks which has been integrated into our overall risk management process. Our strategies are designed to ensure the resilience and security of our systems, safeguarding against both internal and external vulnerabilities. We employ state-of-the-art technologies and practices to secure our systems. This includes deploying advanced encryption, securing network infrastructure, and implementing robust access controls and authentication mechanisms.


text: While we can provide no assurance against unauthorized access and breaches, our information technology infrastructure is designed with security at its core, with all data, whether at rest or in transit, being protected against unauthorized access and breaches.


text: Partnerships and Collaboration We believe in the strength of collaboration in combating cyber threats. We actively engage with cybersecurity communities, industry groups, and regulatory bodies to stay ahead of evolving cyber risks. By sharing knowledge and best practices, we enhance our defenses and contribute to the broader effort of securing the digital ecosystem. We maintain controls and procedures that are designed to ensure prompt escalation of certain cybersecurity incidents so that decisions regarding public disclosure and reporting of such incidents can be made by management and the Board in a timely manner.


text: We continuously monitor our information technology environment to detect and respond to threats in real-time. Our dedicated cybersecurity team uses sophisticated tools to track anomalies, potential vulnerabilities, and ongoing attacks. This includes leveraging a best-in-class third-party 24/7/365 Security Operations Center.


text: This proactive surveillance allows us to address threats swiftly, mitigating any possible impact on our operations and clients. Semi-annually, we leverage third-party independent consultants to perform penetration and segmentation testing of our internal and externally facing environments. The results of the assessment are used to drive alignment on, and prioritization of, initiatives to enhance our security controls, make recommendations to improve processes, and inform a broader risk assessment that is presented to our Board, Audit Committee, and members of management.


text: Technical Safeguards Cybersecurity is an ever-evolving field, and we are committed to continuous improvement of our security practices. We regularly review and update our cybersecurity policies, procedures, and technologies to address new challenges and adapt to the changing threat landscape.


text: is a foundational element of our operations. Our multi-layered approach — encompassing system security, vigilant monitoring, comprehensive training, and collaborative engagement — demonstrates our dedication to protecting our company, our clients, and the financial ecosystem. We remain steadfast in our commitment to maintaining the highest standards of cybersecurity resilience and response. We have established comprehensive incident response and recovery plans and continue to regularly test and evaluate the effectiveness of those plans. Our incident response and recovery plans address and guide our employees, management and the Board on our response to a cybersecurity incident.


text: Education and Awareness Recognizing that human error can often be a weak link in cybersecurity defenses, we are committed to regular and comprehensive training for all employees and executives. This includes annual cybersecurity awareness sessions for our Board, ensuring that our highest levels of leadership are informed and vigilant about the latest cybersecurity trends and threats. Our training programs are designed to foster a culture of security awareness, equipping our team with the knowledge and tools needed to recognize and prevent cyber threats.


text: Cybersecurity Threats We are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition.


text: Our Board, in coordination with the Audit Committee, oversees our management of cybersecurity risk. They receive regular reports from management about the prevention, detection, mitigation, and remediation of cybersecurity incidents, including material security risks and information security vulnerabilities. Our Audit Committee directly oversees our cybersecurity program. The Audit Committee receives regular updates from management on cybersecurity risk resulting from risk assessments, progress of risk reduction initiatives, external auditor feedback, control maturity assessments, and relevant internal and industry cybersecurity incidents.


text: Management's Role Our Chief Technology Officer, Information Security Officer, and General Counsel have primary responsibility for assessing and managing material cybersecurity risks and are members of our management's Information Technology Steering Committee (the "Security Committee"), which is a governing body that drives alignment on security decisions across the Company. Such individuals have experience in various roles for public companies involving managing information security, managing risk, implementing effective information and cybersecurity programs, and adhering to relevant compliance requirements. The Security Committee meets at least quarterly to review security performance metrics, identify security risks, and assess the status of approved security enhancements. The Security Committee also considers and makes recommendations on security policies and procedures, security service requirements, and risk mitigation strategies.


text: Risk Management and Strategy We maintain a technology and cybersecurity program, which includes information security, as part of our overall risk management process with the aim that our information systems, including those of our vendors and other third-parties, will be resilient, effective, and capable of safeguarding against emerging risks and cybersecurity threats. A key element of our technology and cybersecurity program strategy is fostering training and awareness for our employees.

companyName: Cardiff Lexington Corp

ticker: CDIX


text: Our technology and cybersecurity program focuses on the defense, rapid detection and rapid remediation of cybersecurity threats and incidents. Our program also includes cybersecurity policies and a crisis response and management plan that is intended to allow rapid management and response and appropriate communication of cybersecurity threats and incidents.


text: Our cybersecurity crisis management plan sets forth the items, procedures, and actions we expect to address and follow in the event of a cybersecurity incident, including detection, response, mitigation and remediation. When a potential threat or incident is identified, our cyber security incident response team will assign a risk level classification and initiate the escalation and other steps called for by our plan. All incidents that are initially assessed by the cybersecurity incident response team as potentially high-risk are escalated promptly to our Chief Executive Officer, who will determine whether and what elements of our cybersecurity crisis response and management plan should be activated, including escalation to other senior management. Our Chief Executive Officer will inform our board of directors of cybersecurity incidents, as appropriate, considering a variety of factors, including financial, operational, legal, or reputational impact.


text: We are committed to appropriate cybersecurity governance and oversight. Our board of directors oversees management's processes for identifying and mitigating risks, including cybersecurity and information security risks. As noted elsewhere in this report, we plan to establish a standing audit committee. Once we establish an audit committee, we anticipate that the audit committee will oversee risks related to cybersecurity and report to the full board regarding its activities, including those related to cybersecurity.


text: Our board of directors meets regularly with our executive management and receives updates on the status and overall effectiveness of our technology and cybersecurity program, relevant information technology operations, any changes in material cybersecurity risks and any significant cybersecurity incidents consistent with our technology and cybersecurity program. The board also discusses with executive management the steps management has taken to monitor and mitigate privacy, data security, and cybersecurity risk exposures, our information governance policies and programs, and major legislative and regulatory developments that could materially impact our exposure regarding privacy, data security risk, and cybersecurity. The board of directors considers cybersecurity as part of our business strategy, financial planning, and capital allocation.


text: For additional information on our cybersecurity risks, please see Item 1A " Risk Factors—Risks Related to Our Business and Structure—A cyber security incident could cause a violation of HIPAA, breach of member privacy, or other negative impacts."


text: Because we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes annual assessments of the SOC reports of our providers and implementing complementary controls. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties. We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.

companyName: Sunshine Biopharma Inc.

ticker: SBFM


text: We have established policies and procedures for assessing, identifying, and managing material risk from cybersecurity threats. We monitor cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that we use through third party providers that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Empery Digital Inc.

ticker: EMPD


text: We conducted a NIST risk assessment and perform as needed updates to our risks to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We engage a managed service provider ("MSP") and other third parties in connection with our cybersecurity and information technology risk assessment processes and our MSP also assists us with managing and monitoring our network and local compute systems. These service providers assist us in designing and implementing our cybersecurity policies and procedures, as well as monitoring and testing our safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through communications.


text: One of the key responsibilities of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face.


text: Our Executive Vice-President and Chief Financial Officer ("CFO") is primarily responsible for assessing and managing our material risks from cybersecurity threats. In this regard, our CFO has assistance from service providers, other consultants and third parties. Our CFO has served as an executive officer for three years and prior to this was an audit and advisory partner at a public accounting firm overseeing financial statement audits of public and private companies. Audit procedures performed for his clients included evaluating internal controls and risk assessment evaluations over information technology and cybersecurity policies.


text: Our CFO oversees our cybersecurity policies and procedures, including those described in "Risk Management and Strategy" above. Under such policies and procedures, our CFO is responsible for reporting to our board of directors regarding any cybersecurity incident including the results of cybersecurity risk assessments.


text: The Company does not, and will not, have the resources to institute cybersecurity measures until such time as it may be able to enter into a successful merger transaction.

companyName: CONECTISYS CORP

ticker: CONC


text: Risk Management and Strategy We recognized the significance of cybersecurity in our business operations. Therefore, we have established a comprehensive cybersecurity and risk management framework, which includes regular cybersecurity risk assessments to identify and evaluate potential cyber-attack threats and information security weakness that may affect our business. We plan to implement a series of preventive measures, including firewalls, cyber-attack detection systems, and data encryption, to safeguard confidential information and data. We will regularly conduct cybersecurity awareness training for employees to enhance their awareness of potential cybersecurity threats and ensure they take appropriate preventive measures.

companyName: TANCHENG GROUP CO., LTD.

ticker: QSJC


text: We ensure compliance with PRC laws and regulations, including but not limited to the Cybersecurity Law, the Personal Information Protection Law and The Cybersecurity Review Measures (2021 version). We endeavor to take appropriate measures to protect national secrets and sensitive data while ensuring that the disclosure complies with PRC restrictions on data transport.


text: Our cybersecurity crisis management plan outlines the items, procedures and actions we will undertake in the event of a cybersecurity incident, including detection, response, mitigation and remediation. When a potential threat or incident arises, our cybersecurity incident response team, currently consisting of one cybersecurity expert, will assign a risk level classification and initiate the necessary escalation procedures outlined in our plan. All incidents that are initially assessed by the cybersecurity incident response team as potentially high-risk are escalated promptly to our Chief Financial Officer, who will determine whether and what elements of our cybersecurity crisis response and management plan should be activated, including escalation to other senior management. Our Chief Financial Officer will inform our board of directors of cybersecurity incidents, as appropriate, considering a variety of factors, including financial, operational, legal or reputational impact.


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. In the event of any significant cybersecurity incidents, we will publicly disclose the nature, scope, and impact of the incident, as well as the remediation measures we implement.


text: We are committed to appropriate cybersecurity governance and oversight. Our technology and cybersecurity program is the principal responsibility of our board of directors. Our board of directors will regularly review the cybersecurity policies and incident response plans to ensure the company remains vigilant against cybersecurity threats.


text: Our board of directors has oversight of our strategic and business risk management and has delegated cybersecurity risk management oversight to the Chief Financial Officer and our cybersecurity incident response team. Our board of directors are responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which we are exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. Management is responsible for identifying, assessing, and managing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, maintaining cybersecurity policies and procedures, and providing regular reports to our board of directors. The company will continue to commit to maintaining high standards of cybersecurity practices to protect the interests of our customers, shareholders, and other stakeholders. We will continuously monitor the latest developments in the field of cybersecurity and update our cybersecurity and risk management framework as needed.


text: Risk Management and the ordinary course of our day-to-day business, we receive, process, use, store, and share digitally data, including user data as well as confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to our this end, we have implemented a Security Incident Response Plan ("SIRP") designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them. Our SIRP is managed and monitored by a dedicated security/information systems team and includes mechanisms, controls, technologies, systems, policies, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the systems and data residing in them.

companyName: WYTEC INTERNATIONAL INC

ticker: WYTC


text: Preparation —perform a risk assessment and identify sensitive assets. Our team includes an outside security/information systems team that provides managed services on a regular basis.


text: Identification —monitor information technology systems and detect deviations from normal operations and see if they represent actual security incidents. When an incident is discovered, collect additional evidence, establish its type and severity, and document the incident. Containment —perform short-term containment, for example by isolating the network segment that is under attack;


text: then focus on long-term containment, which involves temporary fixes to allow systems to be used in production, while rebuilding clean systems.


text: Eradication —remove malware from all affected systems, identify the root cause of the attack, and take action to prevent similar attacks in the future.


text: affected production systems back online carefully, to prevent additional attacks. Test, verify, and monitor affected systems to ensure they are back to normal activity. Lessons learned —no later than two weeks from the end of the incident, perform a retrospective of the incident.


text: Prepare complete documentation of the incident, investigate the incident further, understand what was done to contain it, and determine whether anything in the incident response process could be improved.


text: The audit committee of our board of directors (the "Audit Committee") is responsible for overseeing cybersecurity risk and periodically updates our board of directors on such matters. The Audit Committee receives periodic updates from management regarding cybersecurity matters, and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations, or financial condition.


text: We use a third-party vendor to provide a suite of services to assess, identify, and manage material risks from cybersecurity threats. These services include providing us with a secure email platform, including content examination and data leak prevention; system monitoring and support, including patch management, anti-virus and threat hunting services; and system backup and recovery services. As we expand our business operations, we plan to evaluate the development of enhanced processes that will allow for the identification and assessment of cybersecurity risk that will be integrated into an overall risk management system, which will be managed by senior management and overseen by the Board of Directors.

companyName: Chilean Cobalt Corp.

ticker: COBA


text: As part of these developments, we plan to identify and address cybersecurity risks related to our business, privacy and compliance issues through a multi-faceted approach that is expected to include third-party assessments, internal information technology (IT) audit, IT security, governance, risk and compliance reviews. In connection with these planned approaches, and to defend, detect and respond to cybersecurity incidents, we, among other things, will consider: conducting proactive privacy and cybersecurity reviews of systems and applications, audits of applicable data policies, performing penetration testing using external third-party tools and techniques to test security controls, conducting employee training, monitoring emerging laws and regulations related to data protection and information security, and implementing appropriate changes.


text: As part of the above-planned processes, we may engage external auditors and consultants with expertise in cybersecurity to assess our internal cybersecurity programs and compliance with applicable practices and standards.


text: We plan to design our risk management program to also assess third-party risks, and we plan to perform third-party risk management to identify and mitigate risks from third parties, such as vendors, suppliers, and other business partners associated with our use of third-party service providers. In addition to new vendor onboarding, we plan to perform risk management during third-party cybersecurity compromise incidents to identify and mitigate risks to us from third-party incidents.


text: We expect that cybersecurity will become an important part of our risk management processes and an area of focus for our Board of Directors and management. We expect that our Board of Directors will be responsible for the oversight of risks from cybersecurity threats. We expect our senior management will provide our Board of Directors updates on at least an annual basis regarding matters of cybersecurity. This is expected to include existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. We expect that our Board members will also engage in periodic conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.


text: Currently, our Chief Operating Officer is expected to lead our cybersecurity risk assessment and management processes and oversee their implementation and maintenance.


text: Our Chief Operating Officer will be tasked with staying informed about, and monitoring the prevention, mitigation, detection and remediation of cybersecurity incidents through his management of, and participation in, the cybersecurity risk management and strategy processes we plan to develop and as described above, including the operation of an incident response plan, and report to the Board of Directors on any appropriate items.


text: Risk Management and Strategy We have implemented a cybersecurity process that is designed to assess, identify, manage and govern material risks from cybersecurity threats and requires a firewall for outside connections.

companyName: FOCUS UNIVERSAL INC.

ticker: FCUV


text: We operate a closed server in a locked room and regularly examine cybersecurity threats that could compromise our information system's security or data and otherwise maintain our cybersecurity policies and procedures in accordance with industry standard control frameworks and applicable regulations, laws, and standards.


text: We regularly check and improve our security measures and educate our employees about such measures with the help of our information technology (IT) team. Key personnel are made aware of our cybersecurity process through trainings. We do not engage third party professionals or disclose our internal security measures to private parties.


text: We have never experienced a cybersecurity incident that was determined to be material, although, like many technology-dependent companies operating in the current environment, we have experienced cybersecurity incidents in the past. For additional information regarding whether any risks from cybersecurity threats are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, please see the section titled " Risk Factors."


text: One of the key functions of our board of directors, in connection with our IT team, is informed oversight of our risk management process, which includes risks from cybersecurity threats.


text: Our board of directors monitors and assesses strategic risk exposure, and our executive officers manage the material risks we face.


text: Our Vice President of Operations, who has over 30 years of experience in IT and marketing, works with our board of directors to manage our cybersecurity policies and processes, including those described in the "Risk Management and Strategy" section above. Together, they stay informed and manage how we identify, address, prevent and resolve cybersecurity issues and related matters. They also track how we prevent, identify, lessen, and address cybersecurity issues. This is done through regular checks of our systems, tests to identify security weaknesses, and maintaining an incident response plan. In addition to such regular system checks, our Vice President of Operations, together with the board, regularly discuss active, emerging and potential cybersecurity risks. They keep each other informed about significant changes affecting cybersecurity, and they periodically update management with these changes, as well as our cybersecurity risks, so that management can administer its oversight function as a part of its broader oversight and risk management.


text: We recognize the importance of securing our data and information systems and have a process for assessing, mitigating and managing cybersecurity and related risks.

companyName: INTRUSION INC

ticker: INTZ


text: Our VP of Engineering, who reports to the CEO, leads our cybersecurity function and is responsible for managing our cybersecurity risk and the protection of our networks, systems, and data. The VP of Engineering uses both internal and external resources to execute this process including our own INTRUSION Shield technology, to help prevent, identify, escalate, investigate, and resolve security incidents in a timely manner. The Company, with the oversight of the CTO, also requires all employees to complete an annual cybersecurity training course.


text: Our Board of Directors is responsible for overseeing our enterprise risk management activities. The Board of Directors receives an update on the Company's risk management process and the risk trends related to cybersecurity at least annually.


text: AppTech recognizes the importance of developing, implementing, and maintaining strong cybersecurity measures to safeguard our information systems and protect our data's privacy and integrity.

companyName: AppTech Payments Corp.

ticker: APCX


text: Engage Third-parties on Risk Management Due to the difficulties and evolving nature of cybersecurity threats, AppTech engages with external experts, including cybersecurity consultants and auditors to evaluate and test its risk management systems.


text: These relationships allow us to utilize specialized knowledge and insights, ensuring our strategies and processes remain in-line with current best practices. These third-parties provide the Company with regular audits, threat assessments, and consultations on security enhancements. Also, during onboarding and periodically thereafter, we conduct trainings for the Company's employees, contractors, and temporary workers about cybersecurity risks, including sending test phishing emails for training purposes to all users of the Company's email system.


text: Oversee Third-party Risk To manage the risks associated with third-party service providers, AppTech conducts weekly calls with its providers to monitor compliance on an ongoing basis. Issues that arise are addressed immediately with mitigating measures added to avoid future problems.


text: Risks from Cybersecurity Threats Like other companies in our industry, we face several cybersecurity risks in connection with our business. Although such risks have not materially affected us, including our business strategy, results of operations, or financial condition, to date, we have, from time to time, experienced threats to and security incidents related to our data and systems, including denial of service and phishing attacks.


text: Risk Management Personnel and managing our cybersecurity risks rests with our third-party provider, the Company's Director of Information Technology and Director of Software Engineering (referred to as "IT"). Their knowledge, experience and relationship with our third-party vendor instrumental in developing and executing our cybersecurity strategies.


text: Risk Management Reporting The IT Team provides updates to upper Management on a routine basis or as potentially critical risks from cybersecurity threats or incidents arise. In addition, the audit committee is notified of any material cybersecurity concerns that may impact internal controls, data storage, or the integrity of our financial reporting.


text: Cybersecurity Program Given the importance of cybersecurity to our business, we maintain a robust cybersecurity program to support both the effectiveness of our systems and our preparedness for information security risks. This program includes a number of safeguards, such as: continuous monitoring for internal and external threats; regular evaluations of our cybersecurity program, including periodic external reviews; and industry benchmarking. We also require cybersecurity trainings when onboarding new employees, as well as cybersecurity awareness training for our employees. Our program leverages standard industry frameworks to strengthen our program effectiveness and reduce cybersecurity risks.

companyName: Phio Pharmaceuticals Corp.

ticker: PHIO


text: We use a risk-based approach with respect to our use and oversight of third-party service providers, tailoring processes according to the nature and sensitivity of the data accessed, processed, or stored by such third-party service provider. We use a number of means to assess and manage cyber risks related to our third-party service providers, including conducting due diligence in connection with onboarding new vendors and seeking to include appropriate security terms in our contracts where applicable.


text: Cybersecurity Threats In the event of a cybersecurity incident, designated personnel are responsible for assessing the severity of an incident and associated threat, containing the threat, remediating the threat, including recovery of data and access to systems, analyzing any reporting obligations associated with the incident, and performing post-incident analysis and program enhancements. We maintain a disaster recovery plan in the event of a significant cybersecurity incident.


text: We have relationships with a number of third-party service providers to assist with cybersecurity containment and remediation efforts, including insurance providers and various law firms.


text: Management Oversight The controls and processes employed to assess, identify and manage material risks from cybersecurity threats are implemented and overseen by the use of consultants as the Company does not have a full-time dedicated cybersecurity position in the Company. Our consultant has over 20 years of experience in information technology matters and is responsible for the day-to-day management of the cybersecurity program, including the prevention, detection, investigation, response to, and recovery from cybersecurity threats and incidents, and are regularly engaged to help ensure the cybersecurity program functions effectively in the face of evolving cybersecurity threats. The Board of Directors (the " Board ")


text: has overall responsibility for risk oversight and cybersecurity risk matters. The Board is responsible for discussing with management the Company's data privacy, information technology and security and cybersecurity risk exposures, including: (i) the potential impact of those exposures on the Company's business, financial results, operations and reputation; (ii) the programs implemented by management to monitor and mitigate any exposures; and (iii) major legislative and regulatory developments that could materially impact the Company's data privacy and cybersecurity risk exposure.


text: Cybersecurity Risks Our cybersecurity risk management processes are integrated into our overall information technology (" IT ") processes. As part of our IT process, we identify, assess and evaluate risks impacting our operations across the Company, including those risks related to cybersecurity. We also maintain cybersecurity insurance providing coverage for certain costs related to cybersecurity-related incidents that impact our own systems, networks, and technology or the systems, networks and technology of our contractors, consultants, vendors and other business partners.


text: As of December 31, 2023, we are not aware of any material risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected the business strategy, results of operations or financial condition of the Company or are reasonably likely to have such a material effect. While we maintain a robust cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement adequate security measures. For additional information, see "Item 1A—Risk Factors."


text: Risk Management and Strategy We have recently implemented additional security measures as part of an evolving cybersecurity posture and will continue to devote resources to address security vulnerabilities in an effort to prevent cyberattacks and mitigate the damage that could result from such an attack. All employees have recently (subsequent to December 31, 2023) begun receiving cybersecurity training and other education regarding their use of computers, information technology, and sensitive data including specifically how to recognize common attack strategies. As the Company does not have a physical office location, it does not have a local network or in-house servers and proprietary applications. We therefore utilize third parties applications and resources to support our information technology ("IT") needs. All applications utilized by the Company are Software as a Service ("SaaS") offerings. As our applications are developed and managed by third parties, we are dependent on these providers for many functions including disaster recovery during a disaster or cyber incident. Our goal is to only utilize the most secure and trusted providers for our IT needs. To this end, we are currently reviewing the security credentials and certifications of our key application providers. Our business continuity plans are evaluated against evolving security and service level standards, which includes evaluating those cybersecurity threats associated with our use of key third party service providers.

companyName: CNS Pharmaceuticals, Inc.

ticker: CNSP


text: Our cybersecurity management strategy consists of utilizing a combination of employee education, preventative controls, detective controls, and periodic third-party cybersecurity testing.


text: During fiscal year 2023 we began to deploy and utilize enterprise scale technology to support an appropriate cybersecurity posture including: endpoint detection and response, firewalls, security information and event management, email security, multifactor authentication, and vulnerability management, with deployment of these tools completed subsequent to December 31, 2023. As part of the service offering from out outsourced IT security services provider, cybersecurity related alerts will be issued to us as relevant situations develop. These alerts will be evaluated in concert with our IT provider and in the event an alert requires action within our environment, such actions will be taken promptly. Our process and cybersecurity posture will continue to be refined based on the results of periodic cybersecurity assessments conducted jointly with our IT provider. We have recently begun reporting on cybersecurity in reports to the Board of Directors and will continue to do so.


text: To operate our business, we rely upon certain third-party service providers to perform a variety of functions, such as outsourced business critical functions, clinical research, professional services, SaaS platforms, managed services, cloud-based infrastructure, content delivery, encryption and authentication technology, corporate productivity services, and other functions. We are developing certain vendor management processes designed to help to manage cybersecurity risks associated with our use of certain of these providers. Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider related to the services they provide and/or the information they process, conducting security assessments, conducting on-site inspections, requiring their completion of written questionnaires regarding their services and data handling practices, and conducting periodic re-assessments during their engagement. For our largest third-party provider, our Contract Research Organization ("CRO") which is helping us manage our potentially pivotal global trial of Berubicin, we are currently conducting a comprehensive security assessment and review including their cybersecurity practices, protocols and protections, handling of information protected by HIPAA, and physical security.


text: The Board of Directors is responsible for oversight of cybersecurity risk. Our Chief Financial Officer and Chief Executive Officer are the members of management responsible for managing and assessing our cybersecurity practices and have recently (subsequent to December 31, 2023) commenced reporting on such practices and risks. The plan for the future is that they will continue to report to the Board on cybersecurity at least quarterly. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Board of Directors and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken.


text: We believe we are appropriately staffed (as supported by our outsourced IT provider) to support a healthy cybersecurity posture given our size and scope. Our Chief Financial Officer, who reports to the Chief Executive Officer, is directly responsible for IT functions and has earned a Master of Business Administration and also a Master of Science degree in Accounting with a Management Information Systems concentration.


text: We have implemented a set of comprehensive cybersecurity and data protection policies and procedures. Risks from cybersecurity threats are regularly evaluated as a part of our broader risk management activities and as a fundamental component of our internal control system. Our employees receive annual cybersecurity awareness training, including specific topics related to social engineering and email frauds. We utilize an outsourced information technology firm and consultants with significant expertise in cybersecurity. We invest in advanced technologies for continuous cybersecurity monitoring across our information technology environment which are designed to prevent, detect, and minimize cybersecurity attacks, as well as alert management of such attacks.

companyName: Kinetic Seas Inc.

ticker: KSEZ


text: Leet Technology Inc. recognized the importance of implementing and maintaining strong cybersecurity protocols to safeguard our information systems. This commitment is aimed at ensuring the confidentiality, integrity, and accessibility of our data.

companyName: Leet Technology Inc.


text: We have engaged a range of external experts including consultants and cybersecurity assessors, who assist us in evaluating and testing our cybersecurity systems and processes. These engagements are intended to give us access to specialized knowledge and to inform our cybersecurity processes including industry-standard control frameworks and applicable regulations, laws, and standards. Prior to entering into any agreements with third-party providers, comprehensive security assessments will be conducted, accompanied by continuous monitoring to verify adherence to our cybersecurity criteria. This involves quarterly evaluations conducted by our management team and ongoing assessments by our team. Such measures are planned to mitigate the threats of data breaches or other security breaches stemming from third-party service provider. We have not encountered cybersecurity issues that have significantly impacted our operational performance or financial status.


text: Our Board of Directors fully aware of the importance of cybersecurity. Furthermore, Board of Directors responsible for supervising data privacy and cybersecurity risks. They routinely examine the Company's cybersecurity initiatives with management, assessing the sufficiency of controls and security measures for our information technology systems.


text: We believe cybersecurity is critical to our Company. We ae not conducting material operations, so cybersecurity threats have not affected our business strategy or results of operations and the Board of Directors will assess the potential threat to future operations as such operations develop. The Board of Directors will oversee management's processes for identifying and mitigating risks, including cybersecurity risks, to facilitate mitigating our risks involved with cybersecurity. help align our risk exposure with our strategic objectives. The Board relies on its executive officers to identify cybersecurity risks and retains oversight of cybersecurity. In the event of an incident, we intend to take appropriate steps from incident detection to mitigation, recovery and notification of appropriate parties. Management is responsible for day-to-day monitoring of cybersecurity, including detection and response and to report risks and incidents to the Board of Directors. We rely on computer software provided by third parties to protect our computer systems against cybersecurity threats.

companyName: TechCom, Inc.

ticker: TCRI


text: The Company is committed to transparency and robust risk management, therefore we prioritize the protection of our stakeholders' interests, including safeguarding sensitive information from cybersecurity threats. Our approach to cybersecurity risk management encompasses a comprehensive process of assessment, identification, and mitigation strategies. Initially, we conduct thorough assessments to identify potential vulnerabilities and threats within our systems and infrastructure. These assessments are followed by rigorous identification procedures and testing aimed at pinpointing material risks that could compromise the integrity of our operations or the confidentiality of our data. Once identified, we employ a multifaceted approach to managing these risks, which includes implementing cutting-edge technological solutions, enforcing stringent access controls, and providing ongoing training and awareness programs to our employees. Moreover, we maintain open lines of communication with relevant stakeholders, ensuring timely response and adaptation to emerging cyber threats.

companyName: KwikClick, Inc.

ticker: KWIK


text: training and awareness programs for team members that include periodic and ongoing assessments to drive adoption and awareness of cybersecurity processes and procedures; a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; a third-party risk management process for service providers, suppliers, and vendors.

companyName: Marvion Inc.

ticker: MVNC


text: In the last two fiscal years, the Company has not experienced any material cybersecurity incidents. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors - "Cybersecurity Breaches and other Disruptions to our Information Technology Systems", which is incorporated by reference into this Item 1C.


text: The Board regularly receives reports from our executive officers and third parties on cybersecurity matters. In addition, the Board receives reports addressing cybersecurity as part of our overall enterprise risk management program and to the extent cybersecurity matters are addressed in regular business updates.


text: The Board, as a whole, has oversight responsibility for our strategic and operational risks. The Audit Committee of our Board, which is composed of all non-employee directors, is responsible for oversight of our efforts to eliminate cybersecurity risks. The Audit Committee meets regularly with our Chief Executive Officer and Chief Financial Officer and, in turn, reports its finding to the Board.

companyName: Grom Social Enterprises, Inc.


text: Our information security program is designed to detect, respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our systems from cybersecurity threats, we use various security tools that help prevent, escalate, investigate, and recover from identified vulnerabilities and security incidents in a timely manner.

companyName: MAGELLAN COPPER & GOLD Corp

ticker: MAGE


text: two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to eliminate all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident. For more information about these risks, please see Item 1A. Risk Factors " We rely on information technology systems which are subject to disruption, damage, failure and other risks."


text: board of directors is responsible for oversight and risk management in genera. Our board of directors receives periodic updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.


text: management team is responsible for assessing and managing the material risks from cybersecurity threats. Our management team members have expertise in information systems, compliance and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk. Our management team is informed of and monitors the prevention, detection, and mitigation of cybersecurity threats and incidents.


text: Risk Management and Strategy have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information that is also appropriate for a business at our stage of development.

companyName: Namliong SkyCosmos, Inc.

ticker: NLSC


text: cybersecurity risk management program is aligned to the Company's business strategy. It shares common methodologies, reporting channels and governance processes that apply to the other areas of enterprise risk, including legal, compliance, strategic, operational, and financial risk. Key elements of our cybersecurity risk management program include: risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise information technology a security officer responsible for managing our cybersecurity risk assessment processes and our response to cybersecurity incidents;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security procedures; when appropriate, training and awareness programs for team members to drive adoption and awareness of cybersecurity processes and procedures;


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and when appropriate, a third-party risk management process for service providers, suppliers, and vendors.


text: 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we face potential cybersecurity threats that, if realized, would materially affect us. These threats include but are not limited to ransomware and malware attacks, and compromised business email and other social engineering threats. Our suppliers, customers, contractors and business partners also face similar cybersecurity risks, which could have an adverse impact on our business. Additional information on cybersecurity risks we face is discussed in Part I, Item 1A, "Risk Factors - While we are not aware of any data breach in the past, future cyberattacks, computer viruses or any failure to adequately maintain security and prevent unauthorized access to our information technology system or data could result in a disruption of our business operations and materially adversely affect our reputation, financial condition and operating results."


text: sole director and officer is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation.


text: He addresses cybersecurity as part of our overall enterprise risk management program and to the extent cybersecurity matters are addressed in regular business updates. He is informed regarding the monitoring, prevention, detection, mitigation and remediation of cybersecurity incidents.


text: Our management, represented by our Chief Executive Officer, Dean Medwid, leads our cybersecurity risk assessment and management processes and oversees their implementation and maintenance, including integration of cybersecurity risk considerations into our overall risk management strategy and communication of key priorities to relevant personnel. Management is responsible for cybersecurity-related matters including approval of processes; review of assessments and other matters; evaluation of potential impact of incidents to determine materiality based on the nature and scope of the incident and any impact to operations, assets, or reputation; and response to incidents, including reporting certain incidents to the audit committee.

companyName: CANNAPHARMARX, INC.

ticker: CPMD


text: The audit committee receives periodic reports from management, including our Chief Executive Officer concerning any cybersecurity threats and risks considered to be significant and the processes we have implemented to address them.


text: Cybersecurity Risk Management and Strategy We have not yet developed a cybersecurity risk management program, though we are in the process of assessing the potential risks. As of this time, we have determined that risks from cybersecurity threats have not materially affected and are not reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: South East Asia Development, Corp.


text: Cybersecurity Governance Our Board of Directors has oversight responsibility for risks to our company, including incidents related to cybersecurity threats. There are more changes coming.


text: Risk Management and Strategy We identify and address cybersecurity threats and risks related to our business with an approach that includes assessments by our management and use of an outside consultant to manage our information technology. In addition, we rely on operating systems and software from established and reliable third-party service providers to provide security. We have employee policies in place designed to reduce risk of cyber-attacks and educate employees on protocol in the event of a potential cybersecurity incident.

companyName: Sonoma Pharmaceuticals, Inc.

ticker: SNOA


text: Currently we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations or financial condition or are reasonably likely to have such a material effect. However, cyber-attacks are increasing in frequency, sophistication and intensity, and despite our ongoing efforts we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. Please refer to "Risk Factors" in Part I, Item 1A of this Governance


text: The Board of Directors takes an active role, as a whole, in overseeing management regarding our Company's risks, including cybersecurity risks. Our management, including our Chief Executive Officer and our Chief Financial Officer, keeps the Board of Directors apprised of significant risks facing our Company and the approach being taken to understand, manage, and mitigate such risks, including with respect to potential cybersecurity threats.


text: Overall Risk Management We maintain a cybersecurity program that is reasonably designed to protect our information, and that of our customers, against cybersecurity threats that may result in adverse effects on the confidentiality, integrity, and availability of our information systems.

companyName: Koil Energy Solutions, Inc.

ticker: KLNG


text: The Company integrates cybersecurity risk management into its broader risk management framework to promote a company-wide culture of cyber risk awareness. The head of our IT department continuously evaluates and addresses cyber risks in alignment with business objectives, operational needs and industry-accepted standards, such as the National Institute of Standards and Technology ("NIST").


text: The Company has processes and procedures in place to monitor the prevention, detection, mitigation and remediation of cybersecurity risks. These include but are not limited to: Maintaining a defined and practiced incident response plan; Maintaining cyber insurance coverage; Employing appropriate incident prevention and detection safeguards; Maintaining a defined disaster recovery policy and employing disaster recovery software, where appropriate;


text: Educating, training and testing our user community on information security practices and identification of potential cybersecurity risks and threats; and Reviewing and evaluating new developments in the cyber threat landscape.


text: Managing Third Party Risk Koil Energy recognizes the risks associated with the use of vendors, service providers and other third parties that provide information system services to us, process information on our behalf, or have access to our information systems, and the Company has processes in place to oversee and manage these risks. We conduct thorough risk-weighted security assessments of various third-parties and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This monitoring includes both annual assessments and assessments on an ongoing basis.


text: Risks from Cybersecurity Incidents To our knowledge, Koil Energy has not been subject to cybersecurity incidents that have materially affected, or are reasonably likely to materially affect the Company, its operations or financial condition.


text: Internal Cybersecurity Team Our internal cybersecurity team, led by our IT Manager, is responsible for implementing, monitoring, and maintaining cybersecurity and data protection practices across the company.


text: Our IT Manager has over 13 years in cybersecurity work experience and managing all levels of the Company's on-premises and cloud infrastructure.


text: Our management team periodically participates in the review of our cybersecurity systems, processes, threats and incidents with our internal cybersecurity team, including the controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Board of Directors The Audit Committee of the Company's Board of Directors (the "Board") is responsible for overseeing the Company's cyber risk. Management has established a process for the Audit Committee to receive regular updates that encompass a broad range of topics, including: Current cybersecurity threat landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies; Incident reports and learnings from unique cybersecurity events, including those of other companies; Compliance status and efforts with regulatory requirements and industry standards; Regulatory updates; Vulnerability developments; and Other cyber risk topics as requested by the Board.


text: The Company's Chief Financial Officer, or CFO, with assistance from our third-party cybersecurity vendors, is responsible for identifying, assessing, and managing our cybersecurity threats and risks. Together, they identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example, automated tools, evaluating our and our industry's risk profile, conducting real-time monitoring of certain systems, and implementing escalation protocols with our third-party cybersecurity vendors.

companyName: AETHLON MEDICAL INC

ticker: AEMD


text: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: an incident response plan; incident detection and response tools; encryption of certain sensitive data and certain data on mobile systems; certain access controls enforcing the principle of need-to-know encryption of certain sensitive data and certain data on mobile systems; physical security measures; asset management, tracking and disposal; monitoring of certain systems; and employee training.


text: Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, cybersecurity risk is addressed through our quality management system and processes and overseen by our audit committee of the board of directors. We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including, for example, professional services firms, including legal counsel and certain cybersecurity service providers.


text: We use third-party service providers to perform a variety of functions throughout our business, such as hosting companies and contract research organizations. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program includes conducting a risk assessment for certain vendors.


text: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including " If our information technology systems, or those of third parties with whom we work, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to: regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences. "


text: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the Interim Chief Executive Officer, or CEO, and CFO.


text: The CFO is responsible for hiring appropriate personnel (including selecting third-party cybersecurity vendors), helping to integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities to relevant personnel. The CFO is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including CFO and CEO. The CFO and CEO work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to the audit committee of the board of directors for certain cybersecurity incidents.


text: The audit committee receives periodic reports from the CFO concerning our significant cybersecurity threats and risk and the processes we have implemented to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.


text: At present the Company has minimal risks related to Cybersecurity as its operational business is not conducted on the internet or available through the internet.

companyName: DH ENCHANTMENT, INC.

ticker: ENMI


text: The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. The Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.


text: incident" means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through our information systems that jeopardizes the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Trans American Aquaculture, Inc

ticker: GRPS


text: threat" means any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: systems" means electronic information resources, owned or used by us, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of our information to maintain or support our operations.


text: We monitor our websites and online accounts frequently to manage risks associated with cyber-security risks. Our website is monitored by a third party to check if the website or email server is secure. Our webmaster informs us of any issues that may arise in the cyber sector. We are prepared to inform all parties necessary if any breach of cyber-security were to happen. We have never had this problem and so we have never had to inform consultants, auditors, or other third parties.


text: We have never had a breach of cyber-security at any point in our past. The risk to us of cybersecurity threats is in data storage of customer questions and emails.


text: A breach of customers data could negatively materially affect our public trust and could result in loss of customers and revenue.


text: Risk Management and Strategy We have implemented comprehensive information security processes to identify, assess, and manage material risks from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware, software, and critical data, including intellectual property and confidential information ("Information Systems and Data"). Our Information Technology ("IT") team plays a key role in identifying, assessing, and managing cybersecurity threats to our Information Systems and Data, including potential system disruptions, shutdowns, or unauthorized disclosures due to cyber-attacks.

companyName: Avid Bioservices, Inc.


text: The IT team identifies and assesses cybersecurity threats and risks by monitoring and evaluating the Company's threat environment and risk profile using various methods including, for example: analyzing reports of threats, evaluating threats reported to us, coordinating with law enforcement concerning threats, internal and external security audits, vulnerability scanning, manual and automated detection tools, and continuous network monitoring. We have implemented a range of technical, physical, and organizational controls designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, such as incident detection and response policies, vulnerability management policies, disaster recovery plans, antivirus programs, authentication protocols, encryption of certain data, data segregation, asset management, tracking, and disposal, network security measures, access controls, and change management processes. We also maintain an insurance policy covering network security liability, incident response, business interruption, cyber extortion, social engineering, and computer fraud.


text: Our approach to managing cybersecurity risks is integrated into our overall risk management strategy. The IT team conducts risk assessments as needed and mandates periodic cybersecurity training for all employees. Additionally, we engage third-party service providers, including legal counsel, threat intelligence experts, cybersecurity services providers, and cybersecurity consultants, to enhance our risk management efforts.


text: We use third-party service providers to perform a variety of functions throughout our business, such as software-as-a-service (SaaS) providers and web hosting companies. We employ a vendor management program to oversee the cybersecurity practices of our third-party service providers. This includes periodic user access reviews and evaluations of System and Organization Control ("SOC") 1 reports from certain of our SaaS vendors, focusing on their data protection measures. Depending on the sensitivity of the data and the nature of the services provided, our vendor management process involves varying levels of risk assessment and contractual cybersecurity obligations.


text: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including "If our information technology systems, or those of the third parties with whom we work, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss or revenue or profits; and other adverse consequences that could have a material adverse effect on our business, financial condition, results of operations and cash flows." Our board of directors (the "Board")


text: oversees our cybersecurity risk management as part of its general oversight responsibilities and specifically monitors our cybersecurity risk management processes and mitigation strategies.


text: Our Vice President of IT, who has more than 25 years of experience in the IT industry, periodically briefs the Board and our audit committee on cybersecurity matters and is responsible for integrating cybersecurity risk considerations into our overall risk management strategy. Our Vice President of IT is also responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our cybersecurity incident response and vulnerability management processes are designed to escalate significant cybersecurity incidents to senior management depending on the circumstances, including the chief executive officer and chief financial officer, who collaborate with the incident response team to mitigate and remediate such incidents. In the event of a significant cybersecurity incident the Board is also informed as part of our incident response plan.


text: We consider risks from cybersecurity threats alongside other company risks as part of our overall risk assessment process. We face risks related to cybersecurity such as unauthorized access, cybersecurity attacks and other security incidents, including as perpetrated by hackers and unintentional damage or disruption to hardware and software systems, loss of data, and misappropriation of confidential information. To identify and assess material risks from cybersecurity threats, we maintain policies to ensure our systems are effective and prepared for information security risks. For example, our PharmaCyte Information Security Policy, which applies to all employees, contractors and third parties granted access to our systems and provides guidelines for maintaining information security, including safeguarding personal and company-issued digital devices, learning to detect phishing and other attacks, restricting data transfer, and ensuring the judicious use of the internet and social media. We also maintain a more general Risk Management Strategy that sets forth our procedures for identifying, assessing, responding to, monitoring, and reporting risks, including any cyber-related risks.

companyName: PharmaCyte Biotech, Inc.

ticker: PMCB


text: Our approach to addressing cybersecurity threat risks also includes mitigating risk associated with our use of third-party service providers. For example, when we enter into contracts with third-party collaborators or vendors pursuant to which sensitive business or personal data will be shared or accessible, we include provisions safeguarding the protection of confidential information. We also utilize a third-party service provider to maintain our information systems and assets and to employ technical safeguards that are designed to protect our information systems from cybersecurity threats.


text: Cybersecurity risk management is an integral part of our overall enterprise risk management program. The Company manages cybersecurity and data protection through a continuously evolving program. Our cybersecurity risk management program is designed to provide a framework for assessing, identifying and managing cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers, and to facilitate coordination across different departments of our Company. Our processes include steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat, including whether the cybersecurity threat is associated with a third-party service provider, and implementing cybersecurity countermeasures and mitigation strategies and informing management and the board of directors of material cybersecurity threats and incidents.

companyName: iPower Inc.

ticker: IPW


text: The board of directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage and mitigate those risks.


text: The audit committee of the board of directors (the "Audit Committee") has been designated by our board of directors to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our management. The board of directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects.


text: As of June 30, 2024, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon. For more information about these risks, please see "Risk Factors - Risks Related to our Business and Products" in Item 1A of this Form10-K.


text: The Board of Directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage and mitigate those risks. The Audit Committee of the Board of Directors (the "Audit Committee") has been designated to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our management.

companyName: FRANKLIN WIRELESS CORP

ticker: FKWL


text: The Board of Directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects.


text: As of June 30, 2024, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon.


text: The manner in which we store and/or transmit sensitive data in connection with our research and development and our day-to-day operations. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees and violation of data privacy or security laws.

companyName: Cavitation Technologies, Inc.

ticker: CVAT


text: Our risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from our vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party risks when handling and/or processing our employee, business or customer data.


text: Cybersecurity: Governance Our Board of Directors considers cybersecurity risk within the Board's risk oversight function. The board of directors has charged management with responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system controls and security. The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management program.

companyName: Tianci International, Inc.

ticker: CIIT


text: Our Corporate Controller reviews the efficacy of our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the Company's financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls, including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment of the Company's internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company's internal controls. Copies of the Corporate Controller's report are also given to the CEO/CFO and made available to members of the Board of Directors. Copies of the auditor's report are delivered to the members of the Board of Directors, which reviews and is responsible to cause a remediation of any material inadequacies in the controls environment.


text: Our Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding the Company's cybersecurity program.


text: We recognize the importance of developing, implementing and maintaining cybersecurity measures to safeguard our information and operational technologies and protect the confidentiality, integrity and availability of our data. Our business is dependent upon our computer systems, devices, software and networks to collect, process and store the data necessary to conduct almost all aspects of our business.

companyName: Forward Industries, Inc.

ticker: FWDI


text: We have designed our cybersecurity procedures based on the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"). We have used NIST CSF as a guide to help identify, assess and manage cybersecurity risks relative to our business, but this does not imply that our cybersecurity program meets any particular technical standard, specification or requirement.


text: We have processes in place to assess, identify, manage and address material cybersecurity threats and incidents. These include, among other things, annual and ongoing security awareness training for employees, mechanisms to detect and monitor unusual network activity, use of encryption and authentication technologies, penetration testing and containment and incident response tools. We regularly assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities.


text: We maintain an incident response plan with a cross-functional team comprised of members of the information technology department, senior management and other appropriate individuals. The team is responsible for assessing and managing the cybersecurity incident response process and taking necessary corrective actions to mitigate and/or eliminate any issues.


text: Our control over the security posture of and ability to monitor the cybersecurity practices of third-party vendors and service providers is limited and there can be no assurance that we can prevent, mitigate or remediate the risk of any compromise or failure in the cybersecurity infrastructure owned or controlled by third parties.


text: As of the filing date of this Annual Report on Form 10-K, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or incidents or provide assurances that we have not experienced an undetected cybersecurity incident. For more information about these risks, see "Item 1A – Risk Factors."


text: Our Board of Directors has overall responsibility for the oversight of risk management, including cybersecurity risks. The Board receives periodic briefings on cybersecurity matters, including key risks to the Company, recent developments and risk mitigation activities from management.


text: Our information technology team is responsible for assessing and maintaining our cybersecurity risk management program and may engage third-party experts on an as-needed basis for risk assessment and system enhancements. Our information technology team are experienced information systems security professionals with many years of experience in the information technology field and various degrees and cybersecurity-related certifications.


text: Risk Management and Strategy Currently, the only cybersecurity risk is from the use of websites associated with the Company. All hosting and hosting related services of these websites are engaged via reputable companies such as Namecheap, Godaddy and Cloudflare.

companyName: Medicale Corp.

ticker: MCLE


text: These aforementioned companies utilize the latest industrial standards for security and data protection. Safeguards include continuous server monitoring, server and infrastructure security configuration consistently applied across all servers, firewall protection, anti-malware protection, a dedicated internal security team, applied Open Worldwide Application Security Project secure coding practices, and regular data backups.


text: We recognize the importance of securing our data and information systems and have a process for assessing, mitigating, and managing cybersecurity and related risks.

companyName: INTRUSION INC

ticker: INTZ


text: Our VP of Engineering, who reports to the CEO, leads our cybersecurity function and is responsible for managing our cybersecurity risk and the protection of our networks, systems, and data. The VP of Engineering uses both internal and external resources to execute this process including our own INTRUSION Shield technology, to help prevent, identify, escalate, investigate, and resolve security incidents in a timely manner. The Company, with the oversight of the CEO, also requires all employees to complete an annual cybersecurity training course.


text: Our Board of Directors is responsible for overseeing our enterprise risk management activities. The CEO reports to the Board of Directors regarding cybersecurity risks, incidents, and mitigation strategies at least annually.


text: As of the date of this filing, we have not experienced any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our company, including our financial condition and results of operations.


text: We have never experienced a cybersecurity incident that was determined to be material, although, like many technology-dependent companies operating in the current environment, we have experienced cybersecurity incidents in the past. For additional information regarding whether any risks from cybersecurity threats are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, please see the section titled " Risk Factors. "

companyName: FOCUS UNIVERSAL INC.

ticker: FCUV


text: Vice President of Operations, who has over 30 years of experience in IT and marketing, works with our board of directors to manage our cybersecurity policies and processes, including those described in the "Risk Management and Strategy" section above. Together, they stay informed and manage how we identify, address, prevent and resolve cybersecurity issues and related matters. They also track how we prevent, identify, lessen, and address cybersecurity issues. This is done through regular checks of our systems, tests to identify security weaknesses, and maintaining an incident response plan. In addition to such regular system checks, our Vice President of Operations, together with the board, regularly discuss active, emerging and potential cybersecurity risks. They keep each other informed about significant changes affecting cybersecurity, and they periodically update management with these changes, as well as our cybersecurity risks, so that management can administer its oversight function as a part of its broader oversight and risk management.


text: Our information security policies and processes are designed to assess, identify, and manage material risks from cybersecurity threats, including protecting the security and confidentiality of consumer information. We use various tools and strategies to identify and assess material risks from cybersecurity threats. We conduct ongoing cybersecurity gap analysis and risks assessments, vulnerability testing, and penetration testing. The cybersecurity risk assessments, vulnerability testing, and penetration testing are designed to identify internal and external risks to the security of our information systems.

companyName: CONSUMER PORTFOLIO SERVICES, INC.

ticker: CPSS


text: We use the results of the above-described tools and strategies to assess the sufficiency of the safeguards in place to manage material risks from cybersecurity threats, to enhance such safeguards, or implement new safeguards, as necessary. We have several safeguards in place to manage material risks from cybersecurity threats. We have security awareness training for our employees, including ongoing simulated phishing email campaigns.


text: We utilize firewalls, anti-virus software, encryption on stored data and communication channels, secure web portals for remote access to our systems, password security, and two-factor authentication. We continuously update our software and security patches. We restrict inbound email attachments, certain websites, and cloud-based drives. We monitor and restrict information transfers to and from unauthorized IP addresses. We also have physical security safeguards for our locations and data centers. We back up our systems and data regularly.


text: In addition, we have a disaster recovery program designed to help us respond to and recover from an interruption of critical IT services.


text: We have implemented and recently enhanced various information security processes designed to identify, assess, and manage material risks from cybersecurity threats to our critical computer systems, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and data related to our clinical studies, manufacturing, and employees. We engage an external entity to employ processes for assessing, identifying, and managing material risks from cybersecurity threats that are incorporated into our overall risk management system. These items are designed to help protect our information assets from internal and external threats and protect the integrity and confidentiality of our data. Our system includes procedural and technical safeguards, response plans, and reviews of our policies.

companyName: ACTUATE THERAPEUTICS, INC.

ticker: ACTU


text: In addition, our recently enhanced information security process includes cybersecurity and prevention training for all employees and key consultants, including timely and relevant topics covering social engineering, phishing, mobile security, and data protection and the need for reporting incidents and suspicious events immediately.


text: Although we develop and maintain systems and controls designed to prevent cybersecurity threats from occurring, and we have a process to identify and mitigate threats, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change and efforts to overcome security measures become increasingly sophisticated. Moreover, despite our efforts, the possibility of these events occurring cannot be eliminated entirely. As we outsource more of our information systems to vendors, engage in more electronic transactions with service providers, and rely more on cloud-based information systems, the related security risks will increase and we will need to expend additional resources to protect our technology and information systems. In addition, there can be no assurance that our internal information technology systems or those of our third-party contractors, or our consultants' efforts to implement adequate security and control measures, will be sufficient to protect us against breakdowns, service disruption, data deterioration or loss in the event of a system malfunction, or prevent data from being stolen or corrupted in the event of a cyberattack, security breach, industrial espionage attacks or insider threat attacks which could result in financial, legal, business or reputational harm.


text: Our senior management team conducts the regular assessment and management of material risks from cybersecurity threats, including review with our third-party service provider. All employees and consultants are directed to report to our senior management any irregular or suspicious activity that could indicate a cybersecurity threat or incident. The Audit Committee of our Board of Directors periodically reviews our cybersecurity assessment and management policies, as appropriate.


text: Risk Management and Strategy Our cybersecurity program is designed to assess, identify, and manage material risks from cybersecurity threats, and protect and preserve the confidentiality, integrity, and continued availability of all information owned by, or in the care of, the Company. Cybersecurity risks are incorporated into the Company's broader risk management process to evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. As part of the cybersecurity program, we utilize a combination of internal technology, which we continue to analyze and update as necessary, and a third-party managed security service provider and their platform to monitor, evaluate and respond to cyber activity.

companyName: Lifeway Foods, Inc.

ticker: LWAY


text: We monitor and assess the information gathered by our security tools and services to identify gaps, exposures, or weaknesses in our overall security approach, and make the necessary changes to address such findings.


text: Additional information on cybersecurity risk we face is discussed in Part I, Item A – Risk Factors, which should be read in conjunction with the foregoing information.


text: Our Chief Financial Officer is responsible for management oversight of our information security program and controls, which includes cybersecurity risk management. Our Director of IT ("Director")