text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and as noted in " Item 1A. Risk Factors " of this Form 10-K, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in " Item 1A. Risk Factors " of this Form 10-K.

companyName: Graf Global Corp.

ticker: GRAF


text: Cybersecurity Governance Cybersecurity risks and activities are reported quarterly to the Information Technology Steering Committee and the Enterprise Risk Management Committee. The Bank's chief risk officer and interim chief information officer are part of the Information Technology Steering and Enterprise Risk Management Committees. The Bank's interim chief information officer has over 30 years of experience managing technology.

companyName: Sterling Bancorp, Inc.

secItem: Item 1C


text: We have also employed a chief information security officer who reports to the chief executive officer. The chief information security officer is responsible for information security, information technology risk management, vendor management and business continuity programs. The chief information security officer holds a graduate degree in cybersecurity and numerous information security certifications, including certified information systems security professional, certified information security manager, certified cloud security professional and qualified technology expert. Additionally, the chief information security officer has worked in the information security field for over 20 years within several financial institutions, implementing cybersecurity strategies, programs, policies and procedures.


text: Our Board Risk Committee generally meets quarterly and is responsible for overseeing cybersecurity risk and our information security program, including cybersecurity, and ensuring the continued development of the program as the Company grows and cyber and information risk exposures change. At each Board Risk Committee meeting, the chief information security officer presents information security metrics and any updates to the Information Security Program. New and changing cybersecurity risks are discussed when needed. The chair of the Board Risk Committee also serves as a board member and previously served as the chair and interim chief executive officer of the Information Systems Audit and Control Association. As a board member of the Information Systems Audit and Control Association, she is a member of their Audit and Risk Committee, Compensation and Human Capital Committee and Governance and Nominating Committee. All cybersecurity-related policies are reviewed and approved annually by the chief information security officer, Enterprise Risk Management Committee, Board Risk Committee and the board of directors.


text: Cybersecurity Risk Management and Strategy As a company with no ongoing business operations, the Company currently has limited exposure to cybersecurity risks. However, we recognize the importance of maintaining secure information systems and protecting sensitive data, including corporate records and investor-related information.

companyName: RIDGEFIELD ACQUISITION CORP

ticker: RDGA


text: We have implemented basic cybersecurity measures, including access controls, secure data storage, and third-party monitoring of our IT infrastructure. Given our lack of operations, we do not anticipate that cybersecurity threats will have a material impact on our financial condition or business strategy. If we pursue an acquisition or commence business operations in the future, we intend to reassess and enhance our cybersecurity risk management framework as necessary.


text: Cybersecurity Governance Our board of directors oversees cybersecurity risk as part of its general risk management responsibilities. Given our limited operations, the board does not currently have a dedicated cybersecurity committee or officer. However, cybersecurity matters are discussed as needed, particularly in the context of potential business combinations or transactions that may introduce new risks.


text: Material Cybersecurity Incidents During the fiscal year ended December 31, 2024, we did not experience any material cybersecurity incidents. Given our current operational status, we do not believe cybersecurity risks have materially affected, or are reasonably likely to materially affect, our financial condition or results of operations.


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering. In addition to our own cybersecurity risks, any proposed Business Combination target may have been subject to, or may in the future be subject to, cybersecurity incidents.

companyName: Haymaker Acquisition Corp. 4

ticker: HYAC


text: Because of the size and scope of Prudential's business, Prudential, the Manager, their affiliates and the Company are subject to numerous and evolving cybersecurity risks, any of which, if it materializes, could affect our business strategy, results of operations, or financial condition. See "Item 1A. Risk Factors—Risks Related to Market Events and Regulatory Developments— Cybersecurity and data protection risks could result in the loss of data, exposure of confidential information, interruptions in our business, and damage to our reputation, and subject us to regulatory actions, increased costs and financial losses, each of which could have a material adverse effect on our business and results of operations." for a discussion of such risks.

companyName: PGIM Private Credit Fund

ticker: PGIM


text: As part of the information security program, Prudential conducts periodic exercises with independent outside advisers to assess the effectiveness of its program and its internal response preparedness. Prudential regularly engages with the broader security community and monitors cyber threat information.


text: During the period covered by this Annual Report, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. See "Item 1A. Risk Factors—Risks Related to Market Events and Regulatory Developments— Cybersecurity and data protection risks could result in the loss of data, exposure of confidential information, interruptions in our business, and damage to our reputation, and subject us to regulatory actions, increased costs and financial losses, each of which could have a material adverse effect on our business and results of operations." for a discussion of risks related to cybersecurity.


text: Prudential's information security program is overseen by its Chief Information Security Officer ("CISO") and Information Security Office, as well as the Chief Information Officer ("CIO"), Stacey Goodman. Each of Prudential, the Manager, their affiliates and the Company believes that Prudential's employees and the employees of the Manager, Subadviser and their affiliates who provide services to the Company, respectively, responsible for managing cybersecurity risk have the skills and knowledge to assess and manage material risks from cybersecurity threats, and their qualifications include degrees and certifications typical for cybersecurity professionals. Prudential expects these employees to, among other things, understand computer systems, networks, and security technologies and be proficient in a variety of security tools and techniques, including intrusion detection, malware analysis and penetration testing. Prudential's CISO has served in various roles in information technology and information security for over 25 years, including serving as the head of information technology risk at two large public companies. Prudential's CISO holds a graduate degree in technology management and has attained the professional certifications of Certified Information Systems Security Professional and Certified Information Privacy Professional. Ms. Goodman, our CIO, was elected Executive Vice President and Chief Information Officer of Prudential and PICA in July 2019. Previously, she served as the Chief Information Officer at Freddie Mac, where she was responsible for the technology division, and served as a member of the Senior Operating Committee. Prior to Freddie Mac, Ms. Goodman was Executive Vice President and Chief Information and Operations Officer for CIT Group, Inc., where she was a member of the Executive Management Committee. Previously, Ms. Goodman was the Divisional Chief Information Officer of Global Technology and Operations at Bank of America. She also held global leadership positions at UBS and PaineWebber. Ms. Goodman began her career at Salomon Brothers.


text: The Company depends on and engages various third parties, including suppliers, vendors, and service providers, to operate its business. The Company relies on the expertise of risk management, legal, information technology, and compliance personnel of the Adviser when identifying and overseeing risks from cybersecurity threats associated with its use of such entities. The Company's Chief Compliance Officer (" CCO ") also plays an oversight role in the area of cybersecurity preparedness with respect to these entities.

companyName: Andalusian Credit Company, LLC


text: Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from the Company's CCO regarding the overall state of the Adviser's cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents impacting the Company.


text: Management's Role in Cybersecurity Risk Management The Company's management, including the Company's CCO and the Adviser oversee the establishment of and adherence to the cybersecurity program and plays an oversight role regarding cybersecurity preparedness. Management of the Company is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with risk management, legal, information technology, and/or compliance personnel of the Adviser.


text: The Company's CCO also plays a vital oversight role in the area of cybersecurity preparedness and the effective implementation of the cybersecurity program. The CCO has worked in the financial services industry for more than 30 years, during which time the CCO has gained expertise in assessing and managing regulatory compliance risk applicable to the Company.


text: Risk Management and Strategy Information systems and other technologies, including those related to the Corporation's information and operational technology systems, and its technical and environmental data, are an important part of the Corporation's business activities. We must comply with certain elevated contractual requirements, including those related to adequately safeguarding controlled unclassified information and reporting cybersecurity incidents to the DOD. We continue to implement cybersecurity processes designed to align with DOD requirements, instructions and guidance and work with the DOD as needed to assess cybersecurity risk and on policies and practices aimed at mitigating these risks. Accordingly, the Company maintains processes for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: PERPETUA RESOURCES CORP.

ticker: PPTA


text: We maintain an incident response plan that outlines the steps to be taken in the event of a cybersecurity incident. Pursuant to the incident response plan, the identifying party is required to notify the Company's Chief Financial Officer ("CFO") and Board of Directors of certain cybersecurity incidents deemed to have a moderate or higher business impact, even if immaterial to us. The incident response plan also includes procedures for: Gathering information about the cybersecurity incident. Consulting with cybersecurity consultants and other parties to assess the cybersecurity incident.


text: Impacts from Cybersecurity Threats As of the date of this Report, though the Company and our service providers have been subject to certain cybersecurity incidents, we are not aware of any previous cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company. However, we acknowledge that cybersecurity threats are continually evolving, and the possibility of future cybersecurity incidents remains. Despite the implementation of our cybersecurity processes, our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences to the business. For additional information about the risks to our business associated with a breach or compromise to our information technology systems, see Item 1A, Risk Factors – System security vulnerabilities, data breaches, and cyber-attacks could compromise proprietary or otherwise sensitive information or disrupt operations, which could adversely affect Perpetua Resources' business, reputation, operations, and stock price.


text: Our IT Systems Administrator is responsible for assessing and managing our risks from cybersecurity threats and oversees our cybersecurity program. The IT Systems Administrator reports directly to our CFO. Our IT Systems Administrator holds an associate degree in computer application and support and has served in various roles in information systems administration for over eight years, including roles involving managing information technology and systems and implementing cybersecurity programs.


text: As a shell company with no current business or operations, we do not have an established process to oversee and identify material risks from cybersecurity threats nor any board committee or subcommittee responsible for the oversight of risks from cybersecurity threats.

companyName: THEGLOBE COM INC

ticker: TGLO


text: Cybersecurity Risk Management and Strategy The Bank is subject to ongoing cybersecurity incident and threat risk. A cybersecurity incident is an unauthorized occurrence, or a series of related unauthorized occurrences, through the Bank's information systems that jeopardizes the confidentiality, integrity, or availability of the Bank's information systems or any information residing therein. Cybersecurity threats are potential unauthorized occurrences on or conducted through the Bank's information systems that may result in adverse effects on the confidentiality, integrity, or availability of information systems or any information residing therein. Information systems are any electronic information resources, owned or used by the Bank, including physical or virtual infrastructure controlled by such information resources, or their components, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of the Bank's information to maintain or support the Bank's operations. Please refer to "Risk Factors — Failure, breach, or cyberattack of the information systems of the FHLBNY could disrupt the FHLBNY's business or result in significant losses or reputational damage" in Part I, Section 1A of this Form 10-K for a description of cybersecurity incident and threat risk. The Bank has implemented processes for assessing, identifying, and managing material risks from cybersecurity threats or incidents that may directly or indirectly impact the Bank's business strategy, results of operations, or financial condition.

companyName: Federal Home Loan Bank of New York


text: Cybersecurity risk management is part of the Bank's Enterprise Risk Management program, which includes specific controls for the mitigation, monitoring and reporting associated with those risks. The program is supported by a robust set of policies and procedures, skilled staff, layered technical defenses, employee training, and oversight of third parties.


text: The Bank's Information Security Policy establishes administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of Bank information in accordance with the Gramm-Leach-Bliley Act, the interagency guidelines issued thereunder, and other applicable laws and regulations. The Technology Committee of the Board of Directors ("Board") also annually reviews and approves the Bank's Information Security Policy.


text: The Bank's cyber incident response plan determines how cybersecurity threats and incidents are identified, classified, and escalated, including for the purposes of reporting, and providing relevant information to the Board. The cyber incident response plan also stipulates management assessment of the materiality of each identified threat or incident for the purposes of such reporting.


text: The Bank's business continuity program is designed to ensure that necessary resources are in place to protect the Bank from potential loss during a disruption, which includes the unavailability of information technology assets due to unintentional occurrences like weather-related events, fire, power loss, and technical incidents such as hardware failures. The business continuity program is overseen by the Technology Committee of the Board and includes, among other items, business impact analysis for developing effective plans, including disaster recovery plans, to respond, recover, resume, and restore technology assets critical to the Bank's operations. Elements of this plan may be leveraged in support of recovery from a cyber incident that disables critical infrastructure.


text: The Bank's cyber incident response plan includes third-party cybersecurity incidents and threats. The Bank undertakes due diligence of third-party systems with which the Bank will interact, in addition to requiring data protection covenants in its vendor agreements. The Bank's vendor risk management program includes regular reviews and oversight of these service providers, including performance and technological reviews and escalation of any unsatisfactory reviews.


text: During the period covered by this report, risks from cybersecurity threats did not have a material impact on the Bank's strategy, results of operations, or financial condition. The Bank has experienced minor cybersecurity incidents in the past, though none that have had a material effect on the Bank's financial condition or results of operations.


text: Cybersecurity Governance The Bank's Board devotes significant time and attention to data and systems protection, including protection from cybersecurity and information security risk. The Board oversees the Bank's information security program through setting of policies and principles including the Bank's Information Security Policy and Enterprise Risk Management program. The Board also oversees management's approach to staffing, policies, processes, and practices to gauge and address cybersecurity and information security risk.


text: The Risk Committee of the Board has oversight of the Bank's Risk Management Program, which includes risks from cybersecurity threats within cybersecurity risk management. The Technology Committee of the Board has responsibility for the strategic design, direction and oversight of the Bank's information and cybersecurity program.


text: The Bank's Information Security Department is led by the Bank's Chief Information Security Officer ("CISO"). The CISO reports to the Chief Information Officer ("CIO"), with an open line of communication to the Bank President. The Bank also has an internal cross-functional committee – the internal Technology and Operations Committee –which is responsible for, among other activities, overseeing information and cybersecurity risks and the steps taken by management to understand and mitigate such risk. This Committee reports to the Bank's Management Committee.


text: The Bank's Technology and Operations Committee is made up of members of the Bank's leadership, including the Bank's CIO, CISO, other information technology and information security leadership, and leadership representatives from the Bank's operational risk, information security, information technology, operations, and other departments throughout the Bank.


text: The Bank has an Information Security Department comprised of specialized professionals that is responsible for the day-to-day, hands-on management of cybersecurity risk and that handles the processes and procedures to mitigate and implement protective, proactive and reactive measures to protect the Bank against those risks. The Bank's Information Security Department is responsible for developing, documenting, and approving the Bank's technical information security control standards, guidelines, and procedures designed to preserve the confidentiality, integrity, and availability of the Bank's information technology assets and data under the Bank's control.


text: The Technology and Operations Committee receives regular and prompt information from the Information Security Department as reported by the CISO, who in turn provides periodic, regular and prompt reporting to the Management Committee on topics such as threat intelligence, major cybersecurity risk areas, technologies and best practices, and any cybersecurity incidents that may have impacted the Bank.


text: The Board receives prompt and timely information from the Bank's CISO on any cybersecurity or information security incident that may pose significant risk to the Bank and continues to receive regular reports on each such incident until its conclusion. The Bank's Board also receives regular presentations and reports throughout the year on cybersecurity and information security risk. These presentations and reports address a broad range of topics, including updates on technology trends, regulatory developments, legal issues, policies and practices, information security resources and organization, the threat environment and vulnerability assessments, and specific and ongoing efforts to prevent, detect, and respond to internal and external incidents and critical threats. At least quarterly, the Board discusses cybersecurity and information security risks with the Bank's CIO and CISO.


text: For information about risks from cybersecurity threats, see the Windstream Prospectus, under the caption "Risk Factors—Risks Related to the Merger—Cybersecurity incidents could have a material adverse effect on New Uniti's business, results of operations and financial condition."

companyName: Uniti Group Inc.

ticker: UNIT


text: The information required by Item 106 of Regulation S-K is included throughout the Prospectus and is incorporated by reference herein.


text: Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives updates from the Company's Chief Compliance Officer ("CCO") regarding the overall state of the Investment Adviser 's cybersecurity program and cybersecurity incidents impacting the Company, if any.

companyName: Brightwood Capital Corp I


text: Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from the Company's Chief Compliance Officer and Adviser's Director of IT regarding the overall state of the Adviser's cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and any cybersecurity incidents impacting the Company.

companyName: Stone Point Credit Corp


text: Management's Role in Cybersecurity Risk Management The Adviser's Director of IT and internal cybersecurity team are responsible for the cybersecurity program applicable to the Company (including enterprise-wide cybersecurity strategy, policies, standards, engineering, architecture, and processes), and along with the Company's CCO, are responsible for assessing and managing material risks from cybersecurity threats that impact the Company. The Adviser's Director of IT has more than 25 years of experience advising on and managing risks from cybersecurity. The Adviser's Director of IT works closely with Company management to administrator, assess, discuss, and prioritize the Company's cybersecurity efforts. The Company's Chief Compliance Officer oversees the Company's oversight function generally and relies on the Adviser's Director of IT to assist with assessing and managing material risks from cybersecurity threats. The Company's Chief Compliance Officer has been responsible for this oversight function as Chief Compliance Officer since his appointment and has worked in the financial services industry for more than 15 years, during which time the Chief Compliance Officer has gained expertise in assessing and managing risk applicable to the Company.


text: The Company's management is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with information technology, legal and compliance personnel of the Adviser.


text: For purposes of Item 106 of Regulation S-K, "cybersecurity threat" means any potential unauthorized occurrence on or conducted through a company's information systems that may result in adverse effects on the confidentiality, integrity or availability of a company's information systems or any information residing therein.

companyName: Emeren Group Ltd


text: A "cybersecurity incident" means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through a company's information systems that jeopardizes the confidentiality, integrity or availability of a company's information systems or any information residing therein.


text: The term "information systems" means electronic information resources, owned or used by the company, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination or disposition of the company's information to maintain or support the company's operations.


text: Governance: As discussed in more detail under the heading "Governance," The Board's oversight of cybersecurity risk management is supported by the Risk Management Committee of the Board (the "Risk Management Committee"), which regularly interacts with the Company's ERM function, other members of management and relevant management committees and councils, including management's Cybersecurity Council.


text: The Company engages in the periodic assessment and testing of the Company's policies, standards, processes and practices that are designed to address cybersecurity threats and incidents. These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. The Company regularly engages third parties to perform assessments on our cybersecurity measures, including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness. The results of such assessments, audits and reviews are reported to the Risk Management Committee and the Board, and the Company adjusts its cybersecurity policies, standards, processes and practices as necessary based on the information provided by these assessments, audits and reviews.


text: The Board, in coordination with the Risk Management Committee, oversees the Company's ERM process, including the management of risks arising from cybersecurity threats. The Board and the Risk Management Committee each receive regular presentations and reports on cybersecurity risks, which address a wide range of topics including recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to the Company's peers and third parties. The Board and the Risk Management Committee also receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed. On an annual basis, the Board and the Risk Management Committee discuss the Company's approach to cybersecurity risk management with the members of the Cybersecurity Council (Risk Management Team), which includes the Company's Information Technology Engineer ("IT Engineer"), Compliance Officer and Chief Financial Officer ("CFO"). The Risk Management Team continuously monitors cybersecurity risks and implements updates to enhance the Company's IT security framework. Additionally, the Compliance Officer issues quarterly reminders to all employees regarding cybersecurity practices and wire fraud prevention measures.


text: The IT Engineer, in coordination with the Cybersecurity Council, which includes our Chief Executive Officer ("CEO"), CFO and Compliance Director works collaboratively across the Company to implement a program designed to protect the Company's information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents in accordance with the Company's incident response and recovery plans. To facilitate the success of the Company's cybersecurity risk management program, multidisciplinary teams throughout the Company are deployed to address cybersecurity threats and to respond to cybersecurity incidents. Through ongoing communications with these teams, the IT Engineer and the Cybersecurity Council monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and report such threats and incidents to the Risk Management Committee when appropriate.


text: The Company's IT Engineer, CEO, CFO and Compliance Director each hold undergraduate and graduate degrees in their respective fields, and each have over 25 years of experience managing risks at the Company and at similar companies, including risks arising from cybersecurity threats.


text: Previous cybersecurity incidents have not materially affected us, including our business strategy, results of operations or financial condition. However, risks from cybersecurity threats could harm our business and could have a material adverse effect on our business, prospects, liquidity, financial condition and results of operations. See "Information system failures, cyber incidents or breaches in security could adversely affect us" under Item 1A. Risk Factors for a discussion of cybersecurity risks.


text: Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to maintain the security, confidentiality, integrity, and availability of our business systems and confidential information, including personal information and intellectual property. Our cybersecurity program includes systems and processes for assessing, identifying and managing material risks from cybersecurity threats and include maintenance and monitoring of information security policies aligned with Information Technology controls; user and employee awareness of cyber policies and practices; information systems configuration management; infrastructure security systems; and cyber threat operations with continuous monitoring and threat hunting. This program includes processes to oversee and identify material risks from cybersecurity threats associated with our use of third party service providers. We also engage a range of third party experts in connection with various security implementation, and maintenance activities related to our cybersecurity program.

companyName: CYPHERPUNK TECHNOLOGIES INC.

ticker: CYPH


text: The Fund has processes in place to assess, identify, and manage material risks from cybersecurity threats. The Fund's business is dependent on the communications and information systems of the Adviser and other third-party service providers. The Adviser manages the Fund's day-to-day operations and has implemented a cybersecurity program that applies to the Fund and its operations.

companyName: Stone Point Credit Income Fund


text: Cybersecurity Program Overview The Adviser has instituted a cybersecurity program designed to identify, assess, and mitigate cyber risks applicable to the Fund. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Fund relies. The Adviser actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Fund.


text: The Fund relies on the Adviser to engage external experts, including cybersecurity assessors, consultants, and auditors to evaluate cybersecurity measures and risk management processes, including those applicable to the Fund. The Fund relies on the Adviser's risk management program and processes, which include cyber risk assessments.


text: The Fund depends on and engages various third parties, including suppliers, vendors, and service providers, to operate its business. The Fund relies on the expertise of information technology, legal and compliance personnel of the Adviser when identifying and overseeing risks from cybersecurity threats associated with our use of such entities.


text: Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from the Fund's Chief Compliance Officer and Adviser's Director of IT regarding the overall state of the Adviser's cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and any cybersecurity incidents impacting the Fund.


text: Management's Role in Cybersecurity Risk Management The Adviser's Director of IT and internal cybersecurity team are responsible for the cybersecurity program applicable to the Fund (including enterprise-wide cybersecurity strategy, policies, standards, engineering, architecture, and processes), and along with the Fund's Chief Compliance Officer, are responsible for assessing and managing material risks from cybersecurity threats that impact the Fund. The Adviser's Director of IT has 25 years of experience advising on and managing risks from cybersecurity. The Adviser's Director of IT works closely Fund management to administrator, assess, discuss, and prioritize the Fund's cybersecurity efforts. The Fund's Chief Compliance Officer oversees the Fund's oversight function generally and relies on the Adviser's Director of IT to assist with assessing and managing material risks from cybersecurity threats. The Fund's Chief Compliance Officer has been responsible for this oversight function as Chief Compliance Officer to the Fund since his appointment and has worked in the financial services industry for more than 15 years, during which time the Chief Compliance Officer has gained expertise in assessing and managing risk applicable to the Fund.


text: The Fund's management is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Fund, including through the receipt of notifications from service providers and reliance on communications with information technology, legal and compliance personnel of the Adviser.


text: Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats on the Fund are assessed on an ongoing basis, and how such risks could materially affect the Fund's business strategy, operational results, and financial condition are regularly evaluated as part of the Adviser's program. During the reporting period, the Fund has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Fund believes have materially affected, or are reasonably likely to materially affect, the Fund, including its business strategy, operational results, and financial condition.


text: Cybersecurity Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws as well as overall business continuation risk.

companyName: Journey Medical Corp

ticker: DERM


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, operations, privacy and compliance issues are identified and addressed through a multi-faceted approach. To defend, detect and respond to cybersecurity incidents, we, among other things: conduct proactive privacy and cybersecurity reviews of systems and applications, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes. We also engage third-party cybersecurity consultants to help us oversee cybersecurity threats both internally and in relation to our third-party service providers, including in connection with the foregoing activities. Our third-party cybersecurity consultants work to mitigate cybersecurity risks by executing all-inclusive security procedures, including but not limited to continuous employee education and training, assessing risks, monitoring systems, implementing security controls, and responding to incidents. This is done in a variety of manners including assessing the strength of outside vendors, suppliers and business partners that may have access to the Company's data and systems, setting up strong access controls in the form of firewalls and encryption, continuous monitoring of data for suspicious activity and other threats, security audits and extensive training.


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading " Our business and operations would suffer in the event of computer system failures, cyber-attacks, or deficiencies in our or third parties' cybersecurity " in our risk factor disclosures in Item 1A of this Annual Report on Form 10-K.


text: Cybersecurity Governance Cybersecurity is an important part of our risk management processes and an area of focus for our management. Our Chief Financial Officer ("CFO") oversees the leaders from our information security, compliance and legal teams who are responsible for our cybersecurity risk management and strategy processes. Our CFO, together with these individuals, also oversee the work of our third-party consultants. These individuals have significant prior business experience in compliance and risk management. Specifically, our CFO has more than 25 years of experience in all aspects of corporate controllership including managing operating and organizational risk developing, executing and maintaining robust internal control environments, including cybersecurity risk and cash controls as part of several pharmaceutical company operations. Our CFO, as well as our management team, are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to our audit committee and overall board of directors on any appropriate items.


text: Our executive management is responsible for the oversight of risks from cybersecurity threats. Members of our board of directors receive periodic updates from our executive management team regarding matters of cybersecurity. This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. Any urgent cybersecurity threats are immediately flagged and reported to the board of directors.


text: As previously discussed in "Item 1. Business," the Partnership is managed by GPB, through its affiliation with Highline under supervision and direction of the Receiver. Among the services provided to the Partnership under the MSA is a cybersecurity risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. This program was integrated within the Partnership's enterprise risk management system as administered and overseen by Highline under supervision and direction of the Receiver and addresses the corporate information technology environment.

companyName: GPB Holdings II, LP


text: The underlying controls of the cyber risk management program that the Partnership currently has in place are based on recognized best practices and standards for cybersecurity and information technology, including the International Organization Standardization ("ISO") 27001 Information Security Management System Requirements.


text: Highline partners with cybersecurity companies and organizations, leveraging third-party technology and expertise, including secure cloud storage solutions, firewalls and monitoring software. Highline engages with these partners and their technology to monitor and maintain the performance and effectiveness of its corporate information environment.


text: The Receiver currently oversees the Partnership's cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. Highline's cybersecurity specialist briefs the Chief Executive Officer, who presents to the Receiver as necessary on the effectiveness of the Partnership's cyber risk management program and any potential cybersecurity threats.


text: The Partnership faces risks from cybersecurity threats that could have an adverse effect on its implementation of the Receivership Order, including liquidation and winding down, as well as its financial reporting. The Partnership has experienced, and may continue to experience cyber incidents in the normal course of its business. However, prior cybersecurity incidents have not been determined to have been material to the Partnership's business, financial condition, results of operations, or cash flows. See "Item 1A. Risk Factors - Risks Related to the Partnership and Receivership Order". Breaches in our data security systems or in systems used by our vendor partners, including cyber-attacks or unauthorized data distribution by employees or affiliated vendors, or disruptions to access and connectivity of our information systems could impact our operations or result in the loss or misuse of customers' proprietary information" for more information about the cybersecurity risks the Partnership faces.


text: As previously discussed in "Item 1. Business" the Partnership is managed by GPB, through its affiliation with Highline under supervision and direction of the Receiver. Among the services provided to the Partnership under the MSA is a cybersecurity risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. This program was integrated within the Partnership's enterprise risk management system as administered and overseen by Highline under supervision and direction of the Receiver and addresses the corporate information technology environment.

companyName: GPB Automotive Portfolio, LP


text: Governance and Oversight: Our Board of Directors and senior management are actively involved in overseeing our cybersecurity policies and practices and managing those responsible for coordinating and implementing cybersecurity initiatives across the organization. Our Board of Directors receives updates from senior management on cybersecurity-related news events, developments in technology-related risks, threats and vulnerabilities that could pertain to the Company, and discusses with senior management updates to the Company's risk-management responses and strategies.

companyName: INTERLINK ELECTRONICS INC

ticker: LINK


text: Ransomware attacks, in particular, have become more frequent and severe, potentially resulting in the encryption or theft of critical data, operational disruptions, and financial losses. A successful ransomware attack on our systems or those of our vendors could lead to prolonged business interruptions, regulatory fines, reputational damage, and substantial remediation costs. While we employ security measures designed to detect, prevent, and respond to such threats, no system is entirely immune from cyberattacks.


text: We recognize the critical importance of maintaining the trust and confidence of investors, business partners and employees toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. Our board of directors is involved in oversight of our risk management activities, and cybersecurity represents an important element of our overall approach to risk management. Our cybersecurity policies, standards, processes and practices are based on recognized frameworks established by the National Institute of Standards and Technology ("NIST") and the International Organization for Standardization ("ISO"). In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security, and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: TMC the metals Co Inc.

ticker: TMC


text: To mitigate these risks, we have implemented technology solutions that are designed to recognize anomalous activity and behavior on systems used by our employees, alongside other technical safeguards including: Web Application Firewalls (WAF) Endpoint protection and response Security Event and Incident Management (SIEM) Identity and Access management (IAM)


text: We identify our cybersecurity threat risks by comparing our processes to standards set by the NIST and the ISO specifically basing our policies and procedures on ISO 27001 guidelines.


text: Our processes also address cybersecurity threat risks associated with our use of third-party service providers, including our suppliers and manufacturers or who have access to employee data or our systems. In addition, cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence. Additionally, we generally require those third parties that could introduce significant cybersecurity risk to us to agree by contract to manage their cybersecurity risks in specified ways, and to agree to be subject to cybersecurity audits, which we conduct as appropriate.


text: Our incident response plan coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable legal obligations and mitigate damage to our business and reputation. We maintain an Information Security Incident Response form that directs a detector of any incident to report such incident to our Information Security Officer, whom we contract through a third-party service provider. Following notice of any such incident, our Information Security Officer would then work with our Chief Financial Officer and our Board to establish an appropriate response plan and to determine the materiality of the incident and any disclosure obligations.

companyName: TAO Synergies Inc.

ticker: TAOX


text: Risk Management and Strategy As an externally managed company, our day-to-day operations are managed by our Adviser and our executive officers under the oversight of our board of directors. We rely on IT systems, data hosting and other hardware and software platforms which are hosted by EQT, the parent company of our Advisor. As such, we are reliant on EQT for assessing, identifying and managing cybersecurity risk as part of its and our overall Risk Management Framework.

companyName: EQT Exeter Real Estate Income Trust, Inc.


text: Cybersecurity risk is an important and continuously evolving focus for us, EQT, and EQT's affiliates. EQT maintains a cybersecurity program as part of its and our Risk Management Framework, including policies and procedures designed to protect its systems, operations, and the data utilized and entrusted to it, including by EQRT, from anticipated threats or hazards. EQT utilizes a variety of protective measures as a part of its and our cybersecurity program. These measures include:


text: Risk Identification: EQT utilizes a combination of internal processes and third-party services to identify potential information security vulnerabilities and threats. This includes threat intelligence, vulnerability management and various security assessments.


text: Risk Assessment: Identified risks are assessed and ranked on at least an annual basis using a likelihood and impact assessment as part of EQT's enterprise risk framework. In addition, the security team has an information security risk management process in place, through which risks are continuously assessed, managed and reported upon.


text: Risk Management: Risks are managed based on their severity in relation to the established risk appetite. EQT has in place several risk-mitigating controls, blending preventative, detective, and reactive measures with an emphasis on identity verification, least privilege, micro-segmentation, and a strong security culture. To this foundation, EQT adds critical components like data protection endpoint security, secure configurations, advanced monitoring and threat detection, robust incident and business continuity plans for effective response. EQT continuously modifies its controls in line with its and our current risk landscape.


text: Incident Management: EQT has implemented a security incident response plan for prompt and effective handling of cyber incidents. This plan is executed by a tiered response team: a 24/7 Security Operations Center serves as the first line of defense, followed by EQT's internal security team as the second tier, and an expert incident response and forensics firm as the third. Additional support from external legal counsel is available when necessary. The strategy ensures collaboration with key functions like Risk, Regulatory & Compliance, Corporate Legal and Communications. Detailed playbooks within the plan outline specific actions for various security incident types. At the corporate level, an incident reporting and management process involves EQT's Chief Information Security Officer ("CISO"). Should an incident pertain to cybersecurity, it activates the security incident response plan.


text: IT General Controls ("ITGCs"): EQT has implemented an ITGC framework to ensure the integrity and security of its systems. This framework ensures that access to systems is appropriately granted, monitored and maintained. It also ensures that changes to systems are reviewed, approved and implemented in a controlled manner. Additionally, the framework encompasses other critical security measures including data backup procedures and ongoing monitoring to safeguard operations.


text: Ongoing Testing: EQT's comprehensive program encompasses a range of measures and enterprise-level drills. This includes conducting phishing test campaigns, mandatory annual training, annual penetration tests, and disaster recovery tests to ensure EQT's systems resilience. At the enterprise level, EQT also holds an annual tabletop exercise for EQT's core and extended crisis management teams, simulating various hypothetical scenarios to assess our preparedness and response strategies.


text: EQT's technology systems and those of its, the Adviser's and our third-party service providers are vital for sustaining our operations and strategic initiatives. To manage the risks inherent in these vendor relationships effectively, EQT has established a series of processes. EQT and the Adviser engage only with third parties that align with our stringent cybersecurity standards, demanding that these providers demonstrate strong capabilities in key areas such as data protection, incident preparedness, continuity, and vendor risk management. Adopting a risk-based strategy allows EQT to prioritize its efforts, focusing on the most critical vendors to ensure its attention is directed where it is most needed. In regards to EQT's most critical vendors, EQT requires substantial and credible third-party assurances, such as Service Organization Control Type 2 certifications ("SOC 2") and International Organization for Standardization ("ISO") certifications, ensuring they meet its high cybersecurity standards.


text: Further, the contracts for EQRT, the Adviser and EQT include stringent data protection and liability clauses in the event of a breach.


text: Governance and Oversight EQT's cybersecurity governance structure is led by the CISO, responsible for EQT's cybersecurity program. The CISO has 15 years of experience working with cybersecurity, business continuity, risk management and technology across several industries and holds a Master and a Bachelor of Computer Science and Engineering. The CISO heads the Security and Platform Engineering Team ("SPET") of dedicated information security professionals and platform engineers, concentrating on the security and stability of the technical platform. SPET collaborates closely with other technology teams, such as the EQT information technology operations team. The CISO reports to the Information Security Steering Committee (the "Steering Committee"), comprised of select Executive Committee members of EQT. The Steering Committee receives quarterly updates from the CISO. Furthermore, the CISO also reports annually to EQT's Audit Committee and twice a year to a member of EQT's board appointed to oversee cybersecurity risk. In addition, the Group Risk Function reports to the Risk Committee at least three times per year.


text: At the EQRT level, oversight of cybersecurity is the responsibility of our board of directors, receiving at least annual updates on EQT's cybersecurity program and receiving prompt notice regarding any material cybersecurity incidents that are relevant to EQRT, as well as ongoing updates regarding such incidents. EQT's cybersecurity program and processes also provide incident escalation to our Chief Financial Officer for any security incidents that meet pre-established reporting thresholds. EQRT's Chief Financial Officer determines if any cybersecurity events have taken place at the EQRT level and assesses whether those events are material to EQRT based on quantitative and qualitative criteria determined by EQRT's management, supported by external advisors. When determining the materiality of a cybersecurity event, EQRT considers the actual and potential impact on the EQRT operations, strategy, performance, cash flows and financial condition. EQRT adheres to EQT's Incident Handling Playbook and employee awareness training requirements.


text: Both EQT and our Adviser remain committed to adopting the highest cybersecurity standards and practices, continuously enhancing their cybersecurity capabilities, and prioritizing the safeguarding of company and customer data from potential threats. In the last fiscal year, EQT and EQRT have not experienced any cybersecurity incidents that have materially affected us or are reasonably likely to have materially affected our operations, strategy, performance, cash flows or financial health. See Part I, Item 1A, "Risk Factors—Risks Related to Our Organization Structure—Cybersecurity risks and cyber incidents may adversely affect our business by causing a disruption to our operations, a compromise or corruption of our confidential information and/or damage to our business relationships, all of which could negatively impact our business, financial condition and operating results."


text: Risk Management and Strategy As an externally managed company, the Company's day-to-day operations are managed by the Adviser and our executive officers under the oversight of our Board of Trustees. Our executive officers are senior New Mountain Capital professionals and our Adviser is a subsidiary of New Mountain Capital. As such, we rely on the cybersecurity policies and procedures implemented by New Mountain Capital. Below are details New Mountain Capital has provided to us regarding its cybersecurity program that are relevant to us.

companyName: New Mountain Net Lease Trust


text: New Mountain Capital has processes in place for assessing, identifying, and managing material risks from potential unauthorized occurrences on or through our electronic information systems that could adversely affect the confidentiality, integrity, or availability of our information systems or the information residing on those systems. These include a wide variety of controls, processes, systems, and tools that are designed to prevent, detect, or mitigate data loss, theft, misuse, unauthorized access, or other security incidents or vulnerabilities affecting our data. Pursuant to New Mountain Capital's Information Security Program, the New Mountain Capital Information Technology Steering Committee ("ITSC") is responsible for the development, evolution, and implementation of policies and technical measures to reasonably prevent security incidents. At times New Mountain Capital may also engage assessors, consultants, auditors, or other third parties to assist with assessing, identifying, and managing cybersecurity risks.


text: New Mountain Capital uses processes to oversee and identify material risks from cybersecurity threats, including those associated with the use of third-party service providers. Additionally, New Mountain Capital uses systems and processes designed to reduce the impact of a security incident at a third-party service provider. As part of its risk management process, New Mountain Capital also maintains an incident response plan that is utilized when cybersecurity incidents impacting us, our Investment Adviser, or our Administrator are detected. New Mountain Capital also requires that all employees, including employees of the Investment Adviser and Administrator, complete interactive security awareness training on an annual basis.


text: Material Impact of Cybersecurity Risks As of the date of this report, we are not aware of any material risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. However, future incidents could have a material impact on our business. Additional information about cybersecurity risks we face is discussed in "Item 1A. Risk Factors," under the heading "Cybersecurity risks could result in the loss of data, interruptions in our business, damage to our reputation and subject us to regulatory actions, increased costs and financial losses, each of which could materially adversely affect our business and results of operations," which should be read in conjunction with the information above.


text: Cybersecurity Governance Our cybersecurity risks and associated mitigations are evaluated by the Adviser and the ITSC as needed, but no less frequently than annually. Management and representatives of the ITSC periodically report to our Board of Trustees on developments to the information security and cybersecurity risks we face. Reports include, among other things, an overview of New Mountain Capital's controls and procedures related to assessing, identifying, and managing risks related to cybersecurity threats, oversight of third-party service providers and related cybersecurity threats, and management's evaluation of cybersecurity risks material to us.


text: Our Board of Trustees is responsible for understanding the primary risks to our business. The audit committee of our Board of Trustees is responsible for reviewing the Adviser's IT security controls with management and evaluating the adequacy of our and the Adviser's IT security program, compliance and controls with management.


text: As part of our cybersecurity procedures, we leverage a number of security tools, including but not limited to email filters, firewalls, and antivirus protection. As part of the assessment of the protections we have in place to mitigate risks from cybersecurity threats, we have also in the past engaged a third-party consultant to conduct a risk assessment of our systems. In addition, we test certain of our applications for vulnerabilities. In an effort to raise cybersecurity awareness, we work with an external partner to send email notices to our employees regarding cybersecurity best practices.

companyName: BRAINSTORM CELL THERAPEUTICS INC.

ticker: BCLI


text: We work to mitigate risks from cybersecurity threats stemming from third-party vendors by providing them with access only to systems that they need to provide services to us. In addition, we have developed, and continue to develop, processes regarding vendor management.


text: KULR's Chief Technology Officer ("CTO"), in conjunction with our third-party providers, is responsible for assessing and managing KULR's cyber risk management program, informs senior Management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents, and supervises such efforts. In addition, KULR has made additional investment into cybersecurity by hiring an on-premises Information Technology ("IT") Manager who will dedicate time weekly to supporting the development of KULR cyber related policies and working on enforcement with 3 rd party managed solutions providers.

companyName: KULR Technology Group, Inc.

ticker: KULR


text: The Board of Directors oversees Management's processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives. Management briefs the Board of Directors on our cybersecurity and information security posture, and the Board of Directors is apprised of cybersecurity incidents at quarterly Board of Directors meetings.


text: We maintain a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. This program is integrated within the Company's enterprise risk management system and addresses both the corporate information technology ("IT") environment and customer-facing products. The underlying controls of the cyber risk management program are based on recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF"). We conduct an annual assessment of our practices and standards against the NIST CSF. KULR is actively engaged with third-party specialists to update policies and institute controls that would ensure Cybersecurity Maturity Model Certification ("CMMC") level 2 compliance.


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, risk and compliance reviews, and meetings with KULR executives. To defend, detect and respond to cybersecurity incidents, we, among other things: conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data policies, perform vulnerability testing using external third-party tools and techniques to test security controls, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes.


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our trust account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our initial public offering. In addition to our own cybersecurity risks, any proposed business combination target, such as Nidar, may have been subject to, or may in the future be subject to, cybersecurity incidents.

companyName: Cartica Acquisition Corp

ticker: CRTAF


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face material cybersecurity threats. However, we do depend on the digital technologies of third parties, including information systems, infrastructure and cloud applications and services, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. In the event of a cybersecurity incident impacting us, the management team will report to our board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

companyName: Translational Development Acquisition Corp.

ticker: TDAC


text: Cybersecurity Management and Strategy Our business operations depend on the availability, integrity, and secure processing, storage, and transmission of confidential and sensitive information, including personal information, digitally and through interconnected systems, including those of our vendors, service providers, and other third parties on which we rely. We understand the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats, and as such, have implemented and maintain a cybersecurity risk management program to assess, identify and manage risks from cybersecurity threats. This program is integrated into our overall enterprise risk management process, and is embedded in our operating procedures, internal controls, and information systems. We also maintain a third-party security program to identify, prioritize, assess, mitigate and remediate third-party risks involving our vendors and service providers. However, we rely on the third parties to implement security programs commensurate with their risk, and we cannot ensure in all circumstances that their efforts will be successful.

companyName: 5&2 Studios, Inc.


text: Conduct periodic vulnerability assessments and mitigate vulnerabilities for our systems and processes that include sensitive data Conduct regular security awareness trainings and phishing simulation attacks for our employees Maintain cybersecurity risk insurance that provides an aggregate insurance policy coverage amount for protection against covered losses arising from a cybersecurity incident Perform periodic gap analyses to review our cybersecurity controls for gaps and implement the closure actions;


text: Regularly review and update at least annually our standard policies and procedures related to information technology and analyze those policies against the standards and controls set by organizations such as the National Institute of Standards and Technology cybersecurity framework and the International Organization for Standardization;


text: Maintain a dedicated cybersecurity team under the direction of our Chief Information Security Officer (the "CISO"), each of whom has expertise related to data and network security, data governance and risk management;


text: Maintain, and we require our third-party service providers to maintain, security controls designed to ensure the confidentiality, integrity, and availability of our information systems and the confidential and sensitive information we maintain and process, or which is processed on our behalf;


text: Maintain policies that require the escalation of any suspected or actual material cybersecurity incidents to our Board of Directors, and Have prepared and regularly review and test our business continuity, disaster recovery and other back-up plans, including as they relate to cybersecurity incidents.


text: Our incident response plan coordinates the activities that we take to prepare to respond and recover from cybersecurity incidents, which include processes to triage, assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage.


text: While we, our business partners and affiliates, and our vendors and service providers are regularly exposed to malicious technology-related events and threats, none of these threats or incidents, either individually or in the aggregate of related occurrences, have had a material impact on our service, systems, business, financial condition, or results of operation of our business in the period covered by this report. In determining materiality, cybersecurity incidents are reviewed not only for potential financial impacts, which could include potential legal and regulatory penalties, stolen assets or funds, system damage, forensic and remediation costs, lost client revenue or litigation costs, but also the breadth and sensitivity of data exposure, data exfiltration, impacts on the ability to operate our business or provide our services, client dissatisfaction, and loss of investor confidence. Any significant disruption to our service or access to our systems could adversely affect our business, results of operation and reputation. Further, a penetration of our systems or a third-party's systems or other misappropriation or misuse of personal information or other sensitive information could subject us to business, regulatory, litigation and reputation risk, which could have a negative effect on our business, financial condition, and results of operations. See "Risk Factors – Cybersecurity." Any significant disruption or unauthorized access to our computer systems or those of third parties that we utilize in our operations, including those relating to cybersecurity or arising from cybersecurity incidents or attacks, could result in a loss or degradation of service, unauthorized disclosure of data, including corporation information, or theft of intellectual property, including digital content assets, which could adversely impact our business."


text: Management has implemented risk management structures, policies, and procedures, and manages our risk exposure on a day-to-day basis. We have a cybersecurity organization within our operations department that focuses on current and emerging cybersecurity matters, which is overseen by our CISO. Senior management, including our CISO, regularly report to our Board, which actively oversees our risk management activities, including those related to cybersecurity. Our CISO is well qualified in the field of cybersecurity. These qualifications include years of experience in the IT and cybersecurity industry. The CISO works closely with key stakeholders, including internal committees such as the Finance and Audit Committee of the Board, in order to manage cybersecurity and information security risk. Our internal team, supplemented by outside cybersecurity advisors, is responsible for the testing and audit of our information-technology internal controls. In addition, leaders from our finance, legal and operations teams participate in incident response training designed to enhance our ability to respond to cybersecurity incidents quickly, efficiently and with the appropriate degree of urgency. The Finance and Audit Committee provides oversight relative to senior management's handling of cybersecurity risks.


text: Our Board actively oversees our risk management activities both directly and through its committees and considers various risk topics throughout the year, including cybersecurity and information security risk management and controls. As part of its oversight function, the Board oversees the Company's risk assessment and risk management policies, including related to cybersecurity and the data protection program, and performs reviews and assessments of the primary operational and regulatory risks facing the Company, their relative magnitude and management's plan for mitigating these risks. At least annually, our CISO reports to the full Board with a comprehensive report addressing a broad range of topics, including significant cybersecurity incidents that have occurred since the last update, the status of projects and initiatives to update our cybersecurity policies and practices, and ongoing efforts to prevent, detect, and respond to internal and external critical threats.


text: As a blank check company, we have no business operations. Since our initial public offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and as noted in Item 1A. Risk Factors of this Annual Report, any sophisticated and deliberate attacks on, or security breaches in, our systems or infrastructure, or the systems or infrastructure of third parties or the cloud, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Due to our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in Item 1A. Risk Factors of this Annual Report. We have not encountered any cybersecurity incidents since our initial public offering.

companyName: Cartesian Growth Corp II

ticker: RENEF


text: Risk Management and Strategy We maintain a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. The underlying processes and controls of our program incorporate recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF"). The program is subject to annual risk assessment by a third-party consultant to ensure compliance with the standards of the NIST CSF and to identify, quantify and categorize material cyber risks. In addition, with the assistance of the consultant, we have developed a risk mitigation plan to address cyber risks, and where necessary, remediate potential vulnerabilities.

companyName: Sachem Capital Corp.

ticker: SACH


text: Under this program, we employ additional key practices including, but not limited to, maintenance of an information technology ("IT") assets inventory, quarterly vulnerability testing, identity access management controls including restricted access of privileged accounts, physical security measures at our offices, maintenance of firewalls and anti-malware tools, ongoing cybersecurity user awareness training, industry-standard encryption protocols, and critical data backups.


text: Our cybersecurity partners, including a technology consultant and other relevant third-party service providers, are a key part of our cybersecurity risk management strategy and infrastructure. We partner with industry recognized cybersecurity providers leveraging third-party technology and expertise and engage with these partners to maintain the performance and effectiveness of IT assets, data, and services. The cybersecurity partners provide services including, but not limited to, systems inventory management, vulnerability testing, user management, capacity monitoring, network protection, remote access management, data backups management, infrastructure maintenance, and cyber risk advisory, assessment and remediation. We also maintain a disaster recovery plan to help us quickly recover from an incident during a disruption and help mitigate the impact of certain cybersecurity risks.


text: We are in the process of formalizing the Audit Committee 's responsibilities to oversee our cybersecurity risk exposure and the steps taken by management to monitor and mitigate cybersecurity risks. Once these responsibilities have been established, the cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk advisory services will brief the Audit Committee on cyber vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, the emerging threat landscape, and new cyber risks on at least an annual basis. This will include updates on our processes to prevent, detect, and mitigate cyber incidents. In addition, material cybersecurity risks and/or events, should they occur, will be reviewed by the Board, at least annually, as part of our corporate risk oversight processes.


text: Risk Management and Strategy The Company relies heavily on its information systems, and the availability and integrity of these systems is essential to conducting its business and operations. As a producer of oil and natural gas, the Company faces various security threats, including cybersecurity threats, to gain unauthorized access to its sensitive information or to render its information or systems unusable, and threats to the security of its facilities and infrastructure or third-party facilities and infrastructure, such as gathering and processing and other facilities, and pipelines. This risk may be heightened as a result of an increased remote working environment, similar to the one created by the COVID-19 outbreak in 2020. The potential for such security threats subjects its operations to increased risks that could have a material adverse effect on its business, financial condition, results of operations and cash flows.

companyName: New ERA Energy & Digital, Inc.

ticker: NUAI


text: As the Company implements various procedures and controls to monitor and mitigate such security threats and to increase security for its information, systems, facilities and infrastructure it may result in increased costs. Moreover, there can be no assurance that such procedures and controls will be sufficient to prevent security breaches from occurring. If any of these security breaches were to occur, they could lead to losses of, or damage to, sensitive information or facilities, infrastructure and systems essential to its business and operations, as well as data corruption, communication interruptions or other disruptions to its operations, which, in turn, could have a material adverse effect on its business, financial position, results of operations and cash flows.


text: The Company is in the process of developing an information security program to address risks from cybersecurity threats. Management plans to engage a reputable third party with the appropriate expertise in IT and cybersecurity to develop these programs.


text: The Company may not be able to fully, continuously, and effectively implement appropriate security controls as intended. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate risks. And events, when detected by security tools or third parties, may not always be immediately understood or acted upon.


text: Our Board is responsible for the oversight of cybersecurity risk management. The Board may assign this oversight a committee of the Board.


text: The Company's senior leadership is responsible for developing appropriate cybersecurity programs, including as may be required by applicable law or regulation. During this process, these individuals may utilize third parties with the appropriate expertise in IT and cybersecurity to develop these programs.


text: We operate in the biotechnology sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft fraud extortion harm to employees or customers violation of privacy laws and other litigation and legal risk and reputational risk. We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems. We use various tools and methodologies to manage cybersecurity risk that are tested on a regular cadence. We also monitor and evaluate our cybersecurity posture and performance on an ongoing basis through regular vulnerability scans, penetration tests and threat intelligence feeds. We require third-party service providers with access to personal, confidential or proprietary information to implement and maintain comprehensive cybersecurity practices consistent with applicable legal standards and industry best practices. Our business depends on the availability, reliability, and security of our information systems, networks, data, and intellectual property. Any disruption, compromise, or breach of our systems or data due to a cybersecurity threat or incident could adversely affect our operations, customer service, product development, and competitive position. They may also result in a breach of our contractual obligations or legal duties to protect the privacy and confidentiality of our stakeholders. Such a breach could expose us to business interruption, lost revenue, ransom payments, remediation costs, liabilities to affected parties, cybersecurity protection costs, lost assets, litigation, regulatory scrutiny and actions, reputational harm, customer dissatisfaction, harm to our vendor relationships, or loss of market share. The Board has delegated primary responsibility for the oversight of cybersecurity matters to members of management who are responsible for implementing and maintaining our cybersecurity and data protection practices. Management reports to the Board at least annually on data protection and cybersecurity matters and reviews, and more frequently as needed. The Company is currently in the process of implementing a more formalized cybersecurity program.

companyName: NORTHWEST BIOTHERAPEUTICS INC

ticker: NWBO


text: We employ a variety of security tools and components to monitor, identify and block cybersecurity threats. In the event of a cybersecurity incident, the Company has an incident response team (IRT) whose role is to respond quickly and effectively. The IRT utilizes an incident response plan for the implementation of the its incident response capabilities that provides (i) a definition of "reportable incidents/events", and (ii) "metrics" for evaluating the IRT's response capabilities and effectiveness. The checklist is periodically reviewed by the IT Department for lessons learned from both mock and actual incidents, and to assure compliance with most current industry best practices and latest regulatory developments. The incident response plan includes processes through which cybersecurity incidents are escalated to the Company's executive officers. To improve preparedness for a cybersecurity incident, we conduct tabletop exercises at least annually. These exercises are conducted by internal personnel.

companyName: Binah Capital Group, Inc.

ticker: BCG


text: Cybersecurity Risk Management and Strategy Entero Therapeutics, Inc. has established a comprehensive cybersecurity risk management program aimed at safeguarding the confidentiality, integrity, and availability of our essential systems and information. Central to our cybersecurity efforts is a robust incident response plan designed to address potential cyber incidents swiftly and effectively.

companyName: GridAI Technologies Corp.

ticker: GRDX


text: Our cybersecurity framework is integrated into Entero's broader enterprise risk management strategy, sharing methodologies, reporting mechanisms, and governance structures with other risk domains including legal, compliance, strategic, operational, and financial risks. Conducting risk assessments to pinpoint material cybersecurity threats to our critical systems, data, products, services, and overall IT infrastructure;


text: While we are regularly subject to cybersecurity attacks, ransomware and other security breaches, we have not experienced any material cybersecurity incidents or a series of related unauthorized occurrences for the year ended December 31, 2024. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.

companyName: HYPERION DEFI, INC.

ticker: HYPD


text: Our assessment and management of material risks from cybersecurity threats are integrated into the company's overall risk management processes. For example, the information technology department, security and compliance team and product development department work with management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business; and our senior management, such as our chief executive officer, evaluates material risks from cybersecurity threats against our overall business objectives and reports to our board of directors, which evaluates our overall enterprise risk.

companyName: Moatable, Inc.

ticker: MTBLY


text: Our board of directors recognizes the critical importance of cybersecurity in safeguarding our company's assets, reputation, and customer trust. Our board of directors addresses our company's cybersecurity risk management as part of its general oversight function. The board of directors is responsible for overseeing our cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by certain management members, including our chief technology officer for Lofty and Trucker Path, our virtual chief information security officer, and our global IT manager.


text: Organizations are frequently confronted with a broad range of cybersecurity threats, ranging from uncoordinated, individual attempts to gain unauthorized access to an organization's information technology environment to sophisticated and targeted cyberattacks sponsored by foreign governments and criminal enterprises. The Company maintains general cybersecurity policies and procedures to assess, identify, and manage cyber threats, and has designated personnel to implement and maintain these policies and procedures, subject to oversight by our management.

companyName: ScanTech AI Systems Inc.

ticker: STAI


text: The Company's cybersecurity policies, standards, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats and responding to cybersecurity incidents are based on recognized frameworks established by industry standards. The Company has established and maintains incident response and recovery plans to address potential cybersecurity incidents. It has implemented a range of technical, physical, and administrative security controls to mitigate cybersecurity threats, including measures specifically focused on network security, data protection, and safeguarding information that, if compromised, could adversely affect the public interest or the Company.


text: The Company's employees are also required to sign confidentiality agreements in an effort to, among other things, help to ensure cybersecurity. The Company has taken measures to better ensure that key employees are aware of data security threats (including cybersecurity threats), and Company security policies and procedures, as appropriate. Improper or illegitimate use of the Company's information system resources or violation of the Company's information security policies and procedures may result in disciplinary action.


text: The Company relies on third-party service providers for critical or key infrastructure and solutions across various Company operations. Cybersecurity incidents that impact third-party service providers have significantly increased in recent years and represent a continuing risk to the Company. The Company has sought to mitigate this risk through specific cybersecurity controls, designed to assess the business and security controls implemented by key information services to the Company. The management assess the Company's cybersecurity threats and the measures implemented by the Company in an effort to mitigate and prevent cyberattacks.


text: As of the date of this Annual Report on Form 10-K, the Company is not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: We maintain robust and comprehensive processes, procedures and controls to protect and secure our information systems and data infrastructure from cybersecurity threats. Our cybersecurity program is led by our Vice President of Technology, who functions as our chief information security officer (" CISO "). Our CISO has over 20 years of experience in information technology leadership and information security, serving in roles of increasing responsibility within private and public companies. Our cybersecurity program interfaces with other functional areas within the Company, including but not limited to our business segments and information technology (" IT ") and legal departments, as well as external third-party partners, to identify and understand potential cybersecurity threats, including those associated with any third-party service providers we may use. We regularly assess and update our processes, procedures and management techniques in light of ongoing cybersecurity developments. We also have a cybersecurity specific risk assessment process, which helps identify our cybersecurity threat risks by comparing our processes to standards set by the International Organization for Standardization (" ISO ").

companyName: Reservoir Media, Inc.

ticker: RSVR


text: Our cybersecurity risk program is integrated into our overall enterprise risk management assessment, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program. Internally, the CISO coordinates oversight of reviewing security alerts, identifying and monitoring ongoing and potential cybersecurity threats, evaluating strategic business impacts of cybersecurity threats and developing programs and initiatives to educate our employees regarding cybersecurity. The CISO also manages our Incident Response Team, which includes a team comprised of executives from various cross - functional management teams, internal technical support roles and external third - party service providers. The Incident Response Team will analyze and, as necessary, escalate cybersecurity incidents both internally and with third - party service providers based on type and severity of the specific incident.


text: We also require cybersecurity training for relevant employees, focusing on the appropriate protection and security of confidential company and third-party information. The IT team provides regular updates to senior management on various cybersecurity threats, assessments and findings, and the effectiveness of the Company's cyber risk management program. Our Board of Directors through the Audit Committee oversees our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. Management reports to our Disclosure Committee and Board of Directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential.


text: As of the date of this Form 10-K, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this Form 10-K. However, the sophistication of cyber threats continues to increase, and the preventative actions we have taken and continue to take to reduce the risk of cyber incidents and protect our systems and information may not successfully protect against all cyber incidents. Should any reportable cybersecurity incident arise, our management shall promptly report such matters to our Board of Directors for further action, including regarding the appropriate disclosure in accordance with SEC regulations, mitigation, and other response or actions that the Board of Directors deems appropriate. For more information on how cybersecurity risk may materially affect our business strategy, results of operations, or financial condition, please refer to Item 1A Risk Factors–If we or our service providers do not maintain the security of information relating to our customers, employees and vendors and our music, security information breaches through cyber security attacks or otherwise could damage our reputation with customers, employees, vendors and artists, and we could incur substantial additional costs, become subject to litigation and our results of operations and financial condition could be adversely affected."