text: Technology and External Consultants: We use external consultants or other third-party experts and service providers, where considered appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls.


text: the past fiscal year, we have no t identified risks from known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, operating results, or financial condition. We will continue to monitor and assess our cybersecurity risk management program as well as invest in and seek to improve such systems and processes as appropriate.

companyName: Jet.AI Inc.

ticker: JTAI

secItem: Item 1C


text: If we were to experience a material cybersecurity incident in the future, such incident may have a material adverse effect on our reputation, as well as our operations, business strategy, operating results, and financial condition.


text: board of directors oversees our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. Our management reports to our board of directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Management and Strategy have an information security program designed to identify, protect, detect and respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our information systems from cybersecurity threats, we utilize various security tools that help prevent, identify, escalate, investigate, resolve, and recover from identified vulnerabilities and security incidents in a reasonably timely manner. These include, but are not limited to, internal reporting and tools for monitoring and detecting cybersecurity threats. evaluate the risks associated with technology and cybersecurity threats and monitor our information systems for potential weaknesses.

companyName: Vestand Inc.

ticker: VSTD


text: We review and test our information technology system on an as-needed basis and also utilize internal team personnel to evaluate and assess the efficacy of our information technology system and enhance our controls and procedures. The results of these assessments are reported to our Audit Committee and, from time to time, our Board of Directors.


text: of the date of this report, we are no t aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, results of operations, or financial condition.


text: Board of Directors considers cybersecurity risk as part of its risk oversight function. It has delegated oversight of cybersecurity and other information technology risks to the Audit Committee of the Board of Directors. The Audit Committee oversees the implementation of the cybersecurity risk management program.


text: Audit Committee receives periodic reports from management on potential cybersecurity risks and threats. The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity. The full Board of Directors also receives briefings from management on the cybersecurity risk management program as needed.


text: is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for our overall cybersecurity risk management program and supervises both the internal cybersecurity personnel and external cybersecurity consultants.


text: management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants; and alerts and reports produced by security tools deployed in the IT environment. Our cybersecurity incident response plan governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors. Per the resignation of Jay Kim and the appointment of Sungjoon Chae, the Company no longer has a majority independent board of directors. Per Nasdaq rules we are not required to have a majority independent board but must still comply with certain subcommittee requirements. We may in the future appoint one or more duly qualified independent directors to fill the current vacancy. See "Item 10. Directors, Executive Officers and Corporate Governance—Corporate Governance and Board Structure"


text: periodically have an annual assessment performed by a third-party specialist of our cyber risk management program. The periodic annual risk assessment identifies, quantifies, and categorizes material cyber risks. In addition, in conjunction with the third-party cyber risk management specialists we develop a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the periodic annual assessment process.

companyName: AIM ImmunoTech Inc.

ticker: AIM


text: face risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows or reputation. We acknowledge that the risk of cyber incidents is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. However, prior cybersecurity incidents have no t had a material adverse effect on our business, financial condition, results of operations, or cash flows. We proactively seek to detect and investigate unauthorized attempts and attacks against IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to our service delivery; however, potential vulnerabilities to known or unknown threats will still remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. In response to such risks, we have implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. See Item 1A. "Risk Factors" for more information on our cybersecurity risks.


text: Board of Directors oversees cybersecurity risk management in compliance with SEC guidance. Management's role includes assessing and managing material risks from cybersecurity threats, developing and implementing cybersecurity policies and procedures, and ensuring date, we have not experienced any material cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, our business operations, financial condition, or results of operations. We remain vigilant in our efforts to protect against potential threats and continually assess our cybersecurity posture to adapt to the evolving threat landscape.

companyName: HALLMARK VENTURE GROUP, INC.

ticker: HLLK


text: also require our employees to participate in cybersecurity training and awareness programs. Company's employees are expected to help safeguard the Company's information systems and to assist in the discovery and reporting of cybersecurity incidents. These programs are intended to decrease cybersecurity risks associated with human error and foster a culture of cybersecurity consciousness.

companyName: ZyVersa Therapeutics, Inc.

ticker: ZVSA


text: date, the risks from cybersecurity threats, including as a result of any previous immaterial cybersecurity incidents, have not materially affected, or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. While our insurance covers certain cybersecurity related matters, the costs related to cybersecurity threats or disruptions may not be fully insured.


text: have a cybersecurity program to identify, monitor, and mitigate cybersecurity risks. The security program consists of responsibilities for information security and incident response and is overseen by a third-party consultant with guidance from subcontracted cybersecurity vendors that our third-party consultant contracts. We consider cybersecurity risks alongside other company risks and consult with subject matter experts where necessary to identify cybersecurity risks and evaluate their nature and severity.

companyName: CEA Industries Inc.

ticker: BNC


text: third-party consultant provides and assists with implementation on a formal IT Security Policy to provide appropriate governance over information security including control requirements for change management and patching, multifactor authentication, data backup, security monitoring, and mobile device management. Management coordinates with its third-party consultant on security controls and any issues are reported to the Audit Committee. In addition, we carry insurance that provides levels of reimbursement protection against the potential losses arising from a cybersecurity incident; however, the insurance may not cover all the costs that we might incur, and we may suffer have not had any reportable cybersecurity breaches, including what we may perceive or recognize as cybersecurity incidents or credible threats during the fiscal year ended December 31, 2024. To date, as a result, there has not been any material adverse effect on our business operations or financial condition. If there is a cybersecurity attack and an infiltration of our files, data, customer data and the like, there would be a material adverse effect on our business, our reputation, our operations and financial condition. For example, our reputation would be damaged in the event of a cybersecurity infiltration. If there were a cybersecurity infiltration, we could lose access to our data which would disrupt our operations, and we even may not be able to operate. Such a loss of access might be temporary or permanent, and it might be localized or general. The level of disruption will depend on our backup systems. Our clients financial and other data could be taken and used against us reputationally or to damage our clients in different ways. In the latter instance, we may be liable for monetary damages to our clients. We may be held for cyber ransom, which would be loss to our financial resources. Our inability to operate, payment of damages, payment of ransom, and the costs of reparation of our systems, consultants and tangential expenses will all result in damage to our business and our financial resources.


text: protect against anticipated or actual cyber threats to our information and systems; and (iii) protect against unauthorized access and/or use of our information and systems. Overall cybersecurity risk reporting is integrated with our enterprise risk management program, is included in discussions with the Audit Committee of our Board of Directors and disclosed where appropriate. Our information technology and cybersecurity function is headed by our Chief Executive Officer ("CEO"), and Vice President of Information Technology, who are responsible for managerial oversight of our cybersecurity program. Our Vice President of Information Technology reports directly to our CEO.

companyName: HARROW, INC.

ticker: HROW


text: If we learn of a cybersecurity incident at a third-party service provider, our information technology department will maintain communication with that third-party service provider and communicate any cybersecurity incidents to the Vice President of Information Technology and CEO. All Harrow employees receive information security training (including data protection and fraud awareness) on an annual basis, and we use industry standard technology to monitor systems for anomalous behavior. We also require employees in certain roles to complete additional role-based, specialized cybersecurity trainings. In the event an incident were to occur, a Security Incident Response Team would be convened that consists of members from many functions, including legal counsel, the Vice President of Information Technology and the CEO.


text: Board of Directors has the ultimate oversight of the Company's risks—including cybersecurity risks—with our Audit Committee assisting the Board of Directors in its oversight of cyber and information security risks. Members of management that possess information security certifications and many years of experience work with our legal, finance and corporate governance functions to identify, define and report cybersecurity risks, policies and procedures and incident response plans. The Audit Committee receives updates on our cybersecurity program from management on a regular basis and more frequently as determined to be necessary or advisable. Updates to the Audit Committee include policies, processes, procedures and any significant developments related to the identification, mitigation and remediation of cybersecurity risks, as well as effectiveness and changes in our ability to monitor, protect, detect and respond to incidents, risk reviews and industry news briefings. The Audit Committee also ensures that management provides a cyber and information security update to the Board of Directors at least annually. Finally, in the event a material cybersecurity incident were to occur, the CEO and Vice President of Information Technology would brief the Audit Committee which would then be responsible for assessing the materiality of the incident and making the determination of materiality and any related disclosure.


text: 2024, we became aware of a cybersecurity incident that involved unauthorized access of an employee's email account. Through this unauthorized access the threat actor was able to fraudulently divert Company funds to its bank account. We detected the incident in a timeframe management believes minimized any financial, operational or reputational risk to the Company. We believe this early detection ultimately resulted in an immaterial impact to our financial results and at no point was our ability to generate revenues disrupted.


text: Management and Strategy. We employ processes for assessing, identifying, and managing material risks from cybersecurity threats that are incorporated into our overall risk management system. These items are designed to help protect our information assets from internal and external threats and protect the integrity and confidentiality of our data. Our system includes procedural and technical safeguards, response planning, and reviews of our policies. We engage various external entities, including consultants, to improve and enhance our cybersecurity processes and oversight. We provide employees and consultants with cybersecurity and prevention training including timely and relevant topics covering phishing, mobile security, and data protection and the need for reporting incidents and suspicious events immediately.

companyName: Lantern Pharma Inc.

ticker: LTRN


text: we develop and maintain systems and controls designed to prevent cybersecurity threats from occurring, and we have a process to identify and mitigate threats, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change and efforts to overcome security measures become increasingly sophisticated. Moreover, despite our efforts, the possibility of these events occurring cannot be eliminated entirely. As we outsource more of our information systems to vendors, engage in more electronic transactions with service providers and relating to patients participating in clinical trials, and rely more on cloud-based information systems, the related security risks will increase and we will need to expend additional resources to protect our technology and information systems. In addition, there can be no assurance that our internal information technology systems or those of our third-party contractors, or our consultants' efforts to implement adequate security and control measures, will be sufficient to protect us against breakdowns, service disruption, data deterioration or loss in the event of a system malfunction, or prevent data from being stolen or corrupted in the event of a cyberattack, security breach, industrial espionage attacks or insider threat attacks which could result in financial, legal, business or reputational harm.


text: Our senior management team conducts the regular assessment and management of material risks from cybersecurity threats, including review with our information technology team and third-party service providers. All employees and consultants are directed to report to our senior management any irregular or suspicious activity that could indicate a cybersecurity threat or incident. The Audit Committee of our Board of Directors evaluates our cybersecurity assessment and management policies, including quarterly discussions with our senior officers and independent registered accounting firm.


text: The cybersecurity risk management program, processes and strategy outlined in this section are limited to the personal and business information belonging to or maintained by the Company (collectively, "Confidential Information"), the Company's critical third-party systems and services supporting or used by the Company (collectively, "Critical Systems"), and service providers.

companyName: Hour Loop, Inc

ticker: HOUR


text: We will develop and implement a cybersecurity risk management program to safeguard the confidentiality, integrity, and availability of our Confidential Information and Critical Systems. Our cybersecurity risk management program will be integrated into our broader enterprise risk management framework and includes a cybersecurity incident response plan.


text: Our cybersecurity risk management risk assessments to identify material cybersecurity risks to our Confidential Information, Critical Systems and broader enterprise IT environment;


text: a dedicated security team responsible for managing (1) cybersecurity risk assessment processes, (2) security controls, and (3) response to cybersecurity incidents; cybersecurity awareness training including spear-phishing resistance for employees, and senior management;


text: a cybersecurity incident response plan outlining procedures for detecting, responding to, and mitigating cybersecurity incidents; and a vendor management policy to oversee cybersecurity risks associated with service providers.


text: identified any known cybersecurity threats, including prior incidents, that have materially affected or are reasonably likely to materially affect our operations, business strategy, results of operations, or financial condition. However, we recognize that cybersecurity threats pose ongoing risks which, if realized, could have a material adverse impact on our business, financial condition and results of operations.


text: Our executive management team, in collaboration with our managed information technology service provider, is responsible for assessing and managing cybersecurity risks to the Company, including our Confidential Information and Critical Systems. The team holds primary responsibility for our cybersecurity risk management program and works closely with our IT service provider to ensure its effective implementation.


text: Our management team meets regularly with our IT service provider to review current cybersecurity issues. These discussions may cover efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including: threat intelligence from governmental, public private, and external sources alerts and reports generated by security tools deployed in the IT environment, including a spear-phishing report. Our Board incorporates cybersecurity risks into its broader risk oversight responsibility.


text: Our Board oversees the implementation of our cybersecurity risk management program. The executive management team provides updates to the Board, as needed, on significant cybersecurity incidents. Our Board receives periodic reports from management on cybersecurity risks and the cybersecurity risk management program.


text: are committed to our goal to protect sensitive business-related and personal information, as well as our information systems. Although the size and scope of our operations is limited compared to larger global operations, we are subject to numerous and evolving cybersecurity risks that could adversely and materially affect our business, financial condition and results of operations. In that regard, we have increased our investment in information systems by upgrading outsourced services and technology platforms previously utilized.

companyName: BARFRESH FOOD GROUP INC.

ticker: BRFH


text: Management Leadership Team, with oversight from the Board of Directors, has implement ed a comprehensive cybersecurity program, including incident response process, aligned with the National Institute of Standards and Technology (NIST) Cybersecurity Framework and NIST Computer Security Incident Handling Guide (NIST SP 800-61) to assess, identify, address and manage risks from cybersecurity threats that may result in material adverse effects on the confidentiality, integrity and availability of our business and information systems.


text: Chief Financial Officer has operational responsibility for oversight of our outsourced information technology services, our information security programs, protections, and efforts, along with leading efforts for implementing, monitoring, and maintaining cybersecurity and data security strategy, policy, standards, architecture, and practices across our business. We anticipate that our outsourced services will update the Chief Financial Officer and Chief Executive Officer on these matters and work closely with these Senior Executives to oversee compliance with legal, regulatory, and contractual security requirements with the guidance of outside counsel.


text: Our Board, in coordination with the Audit Committee, will oversee the Company's enterprise risks arising from cybersecurity threats and will periodically review the measures we have implemented to identify and mitigate data protection and cybersecurity risks.


text: We have a Cybersecurity Incident Response Plan ("CSIRP") to provide the organizational and operational structure, processes, and procedures for investigating, containing, documenting and mitigating cybersecurity incidents. We have implemented a risk-based approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: We have implemented a number of security measures designed to protect our systems and data, including firewalls, antivirus and malware detection tools, patches, log monitors, and routine back-ups,. In addition, we have continued our efforts to migrate our platforms to cloud-based computing, which is designed to further strengthen our security posture.

companyName: NEXGEL, INC.

ticker: NXGL


text: Our cybersecurity risk management program includes the following: the use of external service providers, where appropriate, to assess, test, or otherwise assist with aspects of our security controls; and cybersecurity awareness training of our employees, incident response personnel, and senior management There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information. Cybersecurity Governance Our Board considers cybersecurity risks as part of its risk oversight.


text: The Board oversees management's implementation of our cybersecurity risk management program and receives updates on the cybersecurity risk management program from management at least annually. In addition, management updates the Board regarding any material or significant cybersecurity incidents, as well as incidents with lesser impact potential as necessary.


text: We align with industry-standard cybersecurity frameworks designed to protect the company and customer data from unintentional disclosure, cybersecurity events, and other threats of all severity levels. As part of our alignment with these frameworks we are in the process of implementing a Cybersecurity Incident Response Plan that outlines actions to be taken after identifying a suspected information security breach and the people responsible for managing those actions. Additionally, this plan will outline communication responsibilities during incidents of all severity levels.


text: are committed to our goal to protect sensitive business-related and personal information, as well as our information systems. Although the size and scope of our operations is limited compared to larger global operations, we are subject to numerous and evolving cybersecurity risks that could adversely and materially affect our business, financial condition, and results of operations. In that regard, we have increased our investment in information systems by hiring a Director of Technology in 2024 to replace limited outsourced services previously utilized and bolstered our IT department with other hires. In 2024 we evaluated and implemented top tier security enhancements across company data systems in the form of new virus, malware, and ransomware protections, SEIM, email and systems security protections, improved systems management, and email/phishing security training for staff. Additionally completing National Institute of Standards and Technology (NIST) 800-171a enclave assessment and requirements. We are currently working towards CMMC certification and expect to be ready for a third-party assessment sometime during the 2025 fiscal year.

companyName: VirTra, Inc

ticker: VTSI


text: Management Leadership Team, with oversight from the Board of Directors, plans to further implement a comprehensive cybersecurity program, including incident response process, aligned with the NIST Cybersecurity Framework and NIST Computer Security Incident Handling Guide (NIST SP 800-61) to assess, identify, address and manage risks from cybersecurity threats that may result in material adverse effects on the confidentiality, integrity and availability of our business and information systems.


text: We have a NIST enclave Cybersecurity Incident Response Plan ("CSIRP"), but do not currently have a company-wide CSIRP to provide the organizational and operational structure, processes, and procedures for investigating, containing, documenting and mitigating cybersecurity incidents. We expect to further implement a risk-based approach to identifying, preventing, and mitigating cybersecurity threats and incidents, while also further implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: also rely on information technology and third-party vendors to support our operations, including our secure processing of personal, confidential, sensitive, proprietary, and other types of information. Despite improved data protections and efforts to continuously improve our and our vendors' ability to protect against cyber incidents, we may not be able to fully protect all information systems from all evolving threats. Such incidents may lead to reputational harm, loss of goodwill, revenue and customer loss, legal actions, and statutory penalties, among other consequences. While we have not experienced any material cybersecurity incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents.


text: maintain programs and technologies to ensure that our information systems are effective and prepared for data privacy and cybersecurity risks, including regular oversight of our security programs for monitoring internal and external threats to ensure the confidentiality and privacy of our data. As the volume and complexity of cyber-attacks continue to evolve, we continue to enhance our security capabilities by continued investment in cyber technologies, further developing our internal cybersecurity personnel and educating our workforce regarding cyber-security and leveraging emerging technologies.

companyName: U.S. GoldMining Inc.

ticker: USGO


text: board of directors have adopted a Cybersecurity Policy to serve as a standard for setting, reviewing and implementing our cybersecurity goals, objectives and targets. Our Cybersecurity Policy serves as a framework within which risks the confidentiality, integrity or availability of our assets within our information technology network and infrastructure (" Cyberspace "), and applies to all of our directors, officers, employees, consultants and contractors. We regularly perform evaluations of our security program and continue to implement controls aligned with industry guidelines to identify threats, detect attacks and protect data. Our risk management strategy is focused on three areas: (i) technology, being our hardware and software systems; (ii) processes, being our cybersecurity reporting, testing and other processes; and (iii) people, which refers to our internal cybersecurity personnel, external service providers and individual training and human interaction within our information technology and cybersecurity processes.


text: reviewing third-party information technology service providers, our engagement process customarily includes, among other things, a review of such providers' cybersecurity measures.


text: periodically undertake cybersecurity audits, the results of which are reported to our Audit Committee. We have also implemented security monitoring programs designed to alert us of any suspicious activity and have developed an incident response program in the event of a security breach.


text: implement various training programs periodically to ensure that our employees and other personnel comply with internal processes and to enhance their cybersecurity awareness. Members of our board of directors and management overseeing our information security risk management approach are provided with opportunities for continuing education in cybersecurity and evolving cybersecurity risks in order to better understand and evaluate our preparedness.


text: also " Item 1A. Risk Factors – Risks Related to our Business and Industry – We rely on information technology systems and any inadequacy, failure, interruption or security breaches of those systems may harm our reputation and ability to effectively operate our business ".


text: board of directors oversees our Cybersecurity Policy primarily through the Audit Committee. The Audit Committee is responsible for the implementation of our oversight, programs, procedures and policies related to cybersecurity, cybersecurity risks, information security and data privacy, including reviewing our cybersecurity-related disclosures in our annual securities filings, monitoring (on an ongoing basis) the implementation and effectiveness of our Cybersecurity Policy and assessing potential risks to our Cyberspace and our risk exposure, resiliency of our processes, industry trends and best practices and any relevant cybersecurity and digital technology metrics.


text: The Audit Committee reports regularly to our board of directors concerning the matters covered under the policy and advises our board of directors of any developments that it believes should have our board of directors' consideration.


text: chief executive officer and chief financial officer oversee the details of our information security risk management approach and may appoint team leads from various departments from time to time to assist with certain aspects of our cybersecurity risk mitigation strategy.


text: is required to report to the Audit Committee on our strategy, risks, metrics and operations relating to cybersecurity and information security matters. Management is responsible for ensuring that personnel are provided with adequate resources and trainings to fully understand the guidelines and expectations for cybersecurity. Members of our management team may be asked by our chief financial officer to assist with IT security investigations in the event of a breach of our Cybersecurity Policy. Upon becoming aware of a potential violation of our policy or a breach of cybersecurity, the member of management must immediately document the violation and request the individual surrender possession of any devices that may have suffered a security breach. If any member of management that is unaware of the best course of action in dealing with an IT-related matter is required to contact our third-party IT representative.


text: of our employees, consultants and contractors are encouraged to exercise professional judgement in using computing devices and network resources connected to the Cyberspace, and are strictly prohibited from certain acts enumerated in our Cybersecurity Policy including, among other things, access for non-business purposes, disabling our security features and requirement, exporting information or technologies without consent and password sharing.


text: Violations or breaches of our Cybersecurity Policy or the associated schedules, standards or guidelines may result in suspension and/or discipline up to and including termination, in addition to administrative sanctions or legal actions.


text: our IT consulting firm, we employ continuous monitoring mechanisms to detect and respond to cybersecurity threats promptly. Reports are generated as needed for management and the Board of Directors, providing insights into our cybersecurity posture, incidents, and remediation efforts. We conduct regular assessments and testing of our controls, especially those related to the protection of financial information. The implementation and management of these processes are integrated with the Company's overall operational risk management processes that seeks to limit our exposure to unnecessary risks across our operations and is overseen by the Audit Committee of the Board of Directors.

companyName: Stardust Power Inc.

ticker: SDST


text: We maintain an incident response plan that outlines the steps to be taken in the event of a cybersecurity incident. This plan includes procedures to escalate, contain, investigate and remediate the incident, as well as to comply with any legal reporting requirements and communicate with affected stakeholders. Our employees receive regular training on cybersecurity best practices, emphasizing the protection of financial information. We foster a culture of cybersecurity awareness and responsibility throughout the organization.


text: The Board of Directors has delegated oversight of risks related to the Company's information system controls and security to the Audit Committee of the Board of Directors. Our cybersecurity program is managed by the Chief Financial Officer (CFO), who has over 20 years of business experience as well as a general familiarity with cybersecurity matters and an understanding of the potential financial impacts, disclosure obligations, and enterprise risks to the Company as they relate to cybersecurity. The CFO updates the Audit Committee on cybersecurity matters. The Audit Committee updates the full Board of Directors with respect to cybersecurity matters.


text: Although we are no t currently aware of any risks from cybersecurity threats that have materially affected us, we face risks from cybersecurity threats that could have a material adverse effect on us, including our business strategy, results of operations, or financial condition.


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs. In the past year we have implemented more stringent email monitoring and contracted with managed services companies in the US and Hungary.

companyName: Sharps Technology Inc.

ticker: STSS


text: We face risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. We acknowledge that the risk of cyber incidents is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of business. The Company has not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, financial condition, results of operations, or cash flows. We proactively seek to detect and investigate unauthorized attempts and attacks against IT assets, data, and services, and to prevent their occurrence and recurrence where practicable; however, potential vulnerabilities to known or unknown threats will still remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject the Company to additional liability and reputational harm. In response to such risks, we have implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan.


text: have developed and maintain a cybersecurity risk management program, consisting of cybersecurity policies, procedures, compliance and awareness programs to mitigate risk and to ensure compliance with security, availability and confidentiality trust principles. The cybersecurity process has been integrated into our overall risk management system and process, and is solely internally managed. Management is responsible for identifying risks that threaten achievement of the control activities stated in the management's description of the services organizations systems. Management has implemented a process for identifying relevant risks that could affect the organization's ability to provide secure and reliable service to its users. The risk assessment occurs annually, or as business needs change, and covers identification of risks that could act against the company's objectives as well as specific risks related to a compromise to the security of data. See "Item 1A. — Risk Factors — Risks Related to Our Company and Business — A material breach in security relating to our information systems and regulation related to such breaches could adversely affect us."

companyName: My Size, Inc.

ticker: MYSZ


text: corporate IT infrastructure, communication networks, and related systems are essential operational components. These systems manage product development, internal and external communications, accounting functions, data storage, and other critical operations. Our business depends on secure handling of proprietary, confidential, and sensitive data.

companyName: BioRestorative Therapies, Inc.

ticker: BRTX


text: Chief Financial Officer oversees information security efforts in conjunction with a third-party IT services company and reports material cybersecurity matters to the Chief Executive Officer and Board of Directors.


text: Management and Strategy recognize the importance of assessing, identifying, and managing cybersecurity risks. These include operational vulnerabilities, intellectual property theft, fraud, extortion, potential harm to stakeholders, regulatory compliance issues, and associated legal, financial, and partnership with external consultants, we maintain comprehensive information security processes to identify and mitigate material cybersecurity risks. Our protective measures include: Technical,


text: physical, and organizational safeguards recovery and business continuity planning encryption and network security controls restrictions and physical security measures asset management systems monitoring security training assessment to date shows that cybersecurity incidents and vulnerabilities have not materially impacted our business operations, financial performance, or strategic direction.


text: ongoing monitoring and evaluation have not identified any cybersecurity risks that are expected to significantly affect our operational capabilities, financial condition, or business objectives in the foreseeable future.


text: Company prioritizes the security of its information systems and data integrity. We have developed a cybersecurity strategy to manage and mitigate potential cybersecurity risks. Our strategy is designed to safeguard our systems and data.

companyName: SBC Medical Group Holdings Inc

ticker: SBC


text: Company's Information Systems Department is in charge of network construction and cybersecurity management. If a system failure, serious accident, or sign of such an accident is detected, the Information Systems Department reports to the CEO and other executives, who then consider countermeasures. The following are considered important cybersecurity issues, and countermeasures are being implemented.: Malware


text: infection: There is a risk of losing sales due to information leaks or system downtime caused by unauthorized access due to malware infection. We are protecting against this by introducing email training and detection products.


text: There is a risk of loss of corporate trust and sales opportunities due to system downtime or information leaks caused by the exploitation of vulnerabilities in servers, etc. We are conducting vulnerability assessments for services that are open to the public, and will continue to expand the scope of these assessments in the future.


text: If the system is infected with ransomware, there is a risk of data being encrypted, resulting in business stoppages and information leaks. We have prepared multiple backup mechanisms and recovery procedures in case of damage.


text: leaks: If data is taken from databases or other sources due to unauthorized access or internal crime, the Company's credibility will be lost, resulting in a loss of profits or the occurrence of compensation for damages.


text: of Service (DOS) attacks: There is a risk that a DOS attack could bring down our website and make it impossible to make appointments at clinics, which would have a negative impact on sales. For this reason, we have introduced a WAF to prevent malicious access and DOS attacks.


text: patches and upgrading: There is a risk that not applying patches and upgrades could leave the system vulnerable to attacks, allowing unauthorized access. We are taking measures by regularly updating the operating system and applying patches.


text: is currently no director specializing in cybersecurity. Important cybersecurity matters are reported to the board of directors, and implementations are carried out based on the Company's organizational chart, with the approval and oversight of the board of directors, CEO, and/or other executive officers, as applicable.


text: threats are monitored and prevented by the head of the Information Systems Department, and the training plan is reported to the CEO and other executives, who implement the following: are planning to conduct annual training for the entire company on cybersecurity response. are conducting recovery simulation training in the event of a system failure. are conducting email training that simulates malicious attacks.


text: Service Providers operate our business, we utilize certain third-party service providers to perform a variety of functions. We intend to use the same outsourcing partners as much as possible for consistency. We are planning to establish selection and management policies in the future.


text: Company has engaged an outside contractor to assist it in developing an information security policy and include an incident response plan. The Company is in the process of developing and implementing such policies and obtaining Service Organization Control Type 2 (SOC 2) compliance certification. The SOC II certification process involves a comprehensive assessment conducted by independent auditors to evaluate our systems and controls against established industry standards. As part of the certification process, the effectiveness of the Company's information security policies and procedures to protect against unauthorized access, breaches, and data theft are assessed. The Company expects to achieve SOC 2 certification in the second quarter of 2025.

companyName: CYBERLOQ TECHNOLOGIES, INC.

ticker: CLOQ


text: We are a shell company with no business operations. As a result, we do not consider that we face significant cybersecurity risk. Nevertheless, we employ various procedures designed to identify, protect, detect and respond to and manage reasonably foreseeable cybersecurity risks and threats given our limited operations. These include, but are not limited to, internal reporting and monitoring and detection tools. We also periodically assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities, including those that could arise from internal sources and external sources such as third-party service providers we do business with. We may in the future determine to engage an assessor(s), consultant(s), auditor(s) or other third party(s) to supplement our processes.

companyName: Yale Transaction Finders, Inc.

ticker: YTFD


text: The Board as a whole oversees our cybersecurity risk and receives reports from our management team on various potential cybersecurity matters, including areas of emerging risks, incidents and industry trends, and other areas of importance.


text: date, we have no t identified any cybersecurity threats or past incidents that have had, or are likely to have, a material impact on our company's operations, business strategy, financial performance, or results of operations.

companyName: MIRA PHARMACEUTICALS, INC.

ticker: MIRA


text: management and strategy have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and clinical trial data (Information Systems and Data).

companyName: GENELUX Corp

ticker: GNLX


text: Company engages two external cybersecurity and information technology consultants to work with the Company, including the general counsel, to help identify, assess and manage the Company's cybersecurity threats and risks, including through the use of the Company's information security risk register. This group works to identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods, including, for example: manual and automated tools, subscribing to reports and services that identify cybersecurity threats, analyzing reports of threats and actors, conducting scans of the threat environment, and conducting third-party threat assessments.


text: also use third-party service providers to perform a variety of other functions throughout our business, such as application providers, hosting companies, contract research organizations, contract manufacturing organizations, and distributors. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program includes a review of certain vendors' written security program, a risk assessment for certain vendors, and imposition of information security contractual obligations on certain vendors.


text: a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including " If our information technology systems or those third parties with whom we work or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences."


text: cybersecurity risk assessment and management processes are implemented and maintained by our Cybersecurity Risk Management Team, (which includes our General Counsel) an external cybersecurity consultant with over 15 years of experience providing cybersecurity services and training (who is also a member of the Company's Cybersecurity Risk Management Team) and an external information technology consultant.


text: Chief Executive Officer (CEO) is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities to relevant personnel. The Company's Cybersecurity Risk Management Team is responsible for developing budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: cybersecurity incident response and vulnerability management processes are designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including our Chief Financial Officer (CFO) and CEO. Our CFO and CEO work with the Company's Incident Response Team to help the Company triage, contain, mitigate and remediate cybersecurity incidents of which they are notified.


text: In addition, the Company's incident response and vulnerability management processes include reporting to the Audit Committee for certain cybersecurity incidents.


text: Board of Directors and Audit Committee receive regular reports from the Company's Cybersecurity Risk Management Team concerning the Company's significant cybersecurity threats and risk and the processes the Company has implemented to address them. The Board of Directors and Audit Committee also receive various reports, summaries and presentations related to cybersecurity threats, risk and mitigation.


text: data is dynamically backed up to mitigate against data loss. To prevent unauthorized access and data breaches, we encrypt sensitive data both in transit and at rest. We have also implemented access controls and multi-factor authentication to ensure that only authorized personnel can access sensitive information. We also utilize third-party information technology systems vendors to conduct regular network and endpoint monitoring.

companyName: Investview, Inc.

ticker: INVU


text: risk management program is comprised of, among other things, policies that are designed to identify, assess, manage, and mitigate cybersecurity risk, and is based on applicable laws and regulations, derived from industry standards and best practices. These policies are intended to identify cybersecurity threats that may be associated with both internally managed systems and systems managed by third-party service conduct risk assessments to evaluate the effectiveness of our systems and processes in addressing threats and to identify opportunities for enhancements. Additionally, we conduct privacy and cybersecurity reviews, as well as annual employee training, and monitor emerging laws and regulations related to information security and data protection. We utilize third party tools and techniques to test and enhance our security controls, perform annual cybersecurity framework assessments, conduct ongoing penetration testing of our systems, and benchmark against best practices. Our internal audit function provides an independent assessment on the overall operations of our cybersecurity program and the supporting framework.


text: board, Senior Information Officer ("SIO") and management actively assess the Company's cybersecurity and data privacy risk management practices with the goal of being proactive rather than reactive. Our SIO and management regularly review the Company's cybersecurity and data privacy risks, including our policies, controls and procedures for identifying, managing and mitigating such risks.


text: Our SIO provides management with periodic reports regarding cybersecurity and data privacy measures and procedures, the identification of security gaps and compliance with applicable cybersecurity and data privacy regulations. Management then briefs our board at scheduled meetings regarding cybersecurity and data privacy developments. Management and our SIO are responsible for day-to-day monitoring of the prevention, detection, mitigation and remediation of cybersecurity incidents.


text: In 2024, we did not identify any cybersecurity incidents or threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not be successful in eliminating all risks from cybersecurity threats and can provide no assurances that undetected cybersecurity incidents have not occurred. See Part I, Item 1A. "Risk Factors" of this Annual Report for more information regarding the cybersecurity risks we face.


text: Therefore, we have not adopted any cybersecurity risk management program or formal processes for assessing risk, which may make us susceptible to heightened cybersecurity risks. We also depend on third parties to provide certain services, and any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure that we utilize, including those of third parties, could lead to the corruption or misappropriation of our information, though we do not anticipate collecting or storing any significant confidential information related to customers, consumers, employees, or vendors. Because we expect to continue to rely on third parties, we will also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we will have no personnel or processes of our own for this purpose. Our Board is generally responsible for the oversight of risks from cybersecurity threats. In the event of a cybersecurity incident impacting us, our management team will inform our Board of Directors of the details of such incident as well as the measures taken in response to such incident. There can be no assurance that we will have sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have adverse consequences on our business and lead to financial loss.

companyName: NU RIDE INC.

ticker: NRDE


text: management of the Company is responsible for overseeing risk for the Company and has delegated to the VP, Engineering & Technology ("VPE&T") the responsibility for overseeing the cybersecurity risk management strategy for the Company. Management receives regular updates on our cybersecurity risk management process from the VPE&T. The VPE&T reviews our comprehensive cybersecurity framework, including reviewing our cybersecurity reporting protocol that provides for the notification, escalation and communication of significant cybersecurity events to the management team.

companyName: IMPACT BIOMEDICAL INC.

ticker: IBO


text: Company's cybersecurity program is overseen by our VPE&T, who is responsible for global information technology, including cybersecurity. Our VPE&T is primarily responsible for assessing and managing material risks from cybersecurity threats, including monitoring the measures used for prevention, detection, mitigation and remediation of cybersecurity incidents. The information security organization is comprised of internal IBO employees and external security suppliers who provide security monitoring and response.


text: During the year ended December 31, 2024, the Company has not identified risks from cybersecurity threats, including as a result of prior cybersecurity incidents, that have materially affected or are reasonably anticipated to materially affect the Company, including its business strategy, results of operations, or financial condition.

companyName: QHSLab, Inc.

ticker: USAQ


text: Nevertheless, the Company recognizes cybersecurity threats are ongoing and evolving. For more information on the Company's cybersecurity risks, refer to Item 1A, "Risk Factors".


text: employ processes incorporated into our overall risk management system for assessing, identifying, and managing material risks from cybersecurity threats. These items are designed to help protect our information assets from internal and external threats and protect the integrity and confidentiality of our data.

companyName: Kraig Biocraft Laboratories, Inc.

ticker: KBLB


text: we develop and maintain systems and controls designed to prevent cybersecurity threats from occurring, and we have a process to identify and mitigate threats, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change and efforts to overcome security measures become increasingly sophisticated. Moreover, despite our efforts, the possibility of these events occurring cannot be eliminated entirely. As we outsource more of our information systems to vendors, engage in more electronic transactions with service providers, and rely more on cloud-based information systems, the related security risks will increase, and we will need to expend additional resources to protect our technology and information systems. In addition, there can be no assurance that our internal information technology systems or those of our third-party contractors, or our consultants' efforts to implement adequate security and control measures, will be sufficient to protect us against breakdowns, service disruption, data deterioration or loss in the event of a system malfunction, or prevent data from being stolen or corrupted in the event of a cyberattack, security breach, industrial espionage attacks or insider threat attacks which could result in financial, legal, business or reputational of the date of this Annual Report, we are no t aware of any risks from cybersecurity threats, including because of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.


text: senior management team conducts the regular assessment and management of material risks from cybersecurity threats, including review with our third-party service providers, while our board of directors has responsibility for the oversight of risk management. All employees and consultants are directed to report to our senior management any irregular or suspicious activity that could indicate a cybersecurity threat or incident.


text: operate in the biotechnology sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems. We have implemented a risk-based approach to identify and assess cybersecurity threats that could impact our business and information systems. As part of this strategy, the Company has engaged a third-party service provider to implement comprehensive IT and cybersecurity policies, including Guardz, Cyber Essentials, and others. These initiatives are supported by detailed policies, staff training programs, and the use of advanced tools such as firewalls and VPNs to prevent cybersecurity incidents. Additionally, consultation with third-party experts has further strengthened the Company's IT framework and improved overall compliance. We require third-party service providers with access to personal, confidential or proprietary information to implement and maintain comprehensive cybersecurity practices consistent with applicable legal standards and industry best practices.

companyName: CDT Equity Inc.

ticker: CDT


text: The Company has engaged a third-party service provider to implement comprehensive IT and cybersecurity policies, including Guardz, Cyber Essentials, and others. These initiatives are supported by detailed policies and staff training programs, which have strengthened the Company's IT framework and improved compliance.


text: light of the pervasive and increasing threat from cyberattacks, the Company's Board of Directors and the Audit Committee, with input from management, assess the Company's cybersecurity threats and the measures implemented by the Company to mitigate and prevent cyberattacks. The Audit Committee consults with management regarding ongoing cybersecurity initiatives, and requests management to report to the Audit Committee or the full Board regularly on their assessment of the Company's cybersecurity program and risks.


text: recognize the importance of safeguarding the security of our computer systems, software, networks, and other technology assets. We have implemented and maintain a security risk management program that is designed to preserve the confidentiality, integrity, and continued availability of information under our ownership or care with the aim to continually improve security features in order to keep pace with the evolving cyber threat landscape.

companyName: CALLAN JMB INC.

ticker: CJMB


text: face a number of cybersecurity risks in connection with our business and recognize the growing threat within the general marketplace and our industry. Although such risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we and our vendors have, from time to time, experienced threats to and breaches of our data and systems. For more information about the cybersecurity risks we face, refer to Part I, Item 1A, Risk Factors of this annual report.


text: Management and Strategy have implemented internal controls including regular risk assessments designed to address financial, operational and information technology (including cybersecurity) risks and controls across our organization. These assessments are overseen by our Director of IT. We implement cybersecurity controls and procedures designed to address cyber risks and threats, supported by third-party technologies and security advisors and providers. We also provide cybersecurity awareness training to our employees during the onboarding process and periodically thereafter. In addition, we engage external third-party information security consultants to periodically conduct information security testing and assessments, and to evaluate our overarching information security program and specific incident response procedures. We also maintain a Cyber Incident Response Plan, which is overseen by our Director of IT and is designed to coordinate our response to information security incidents. Finally, we hold and maintain third-party insurance coverage for cybersecurity risks commensurate with industry standards for a company of our size and stage.


text: board of directors (the "Board") considers cybersecurity risk as part of its risk oversight function. While delegated to the Audit Committee, the Board directly oversees management's implementation of our cybersecurity risk management program. The Board receives regular reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. Board members receive presentations on cybersecurity topics from our Chief Information Officer. management team, including our Director of IT, is responsible for assessing and managing our material risks from cybersecurity threats.


text: Our Director of IT has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our consultant's experience includes over 15 years of design, implementation and management of cyber-security programs at various levels and organizations.


text: cybersecurity risk management program shall include: assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader security team principally responsible for managing (i) our cybersecurity risk assessment processes, (ii) our security controls, and (iii) our response to cybersecurity incidents; awareness and spear-phishing resistance training of our employees, and senior management; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and vendor management policy for service providers.

companyName: JUPITER NEUROSCIENCES, INC.

ticker: JUNS


text: identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Board oversees management's implementation of our cybersecurity risk management program. Our executive management team is responsible for updating the Board, as necessary, regarding significant cybersecurity incidents. Board also receives periodic reports from management on our cybersecurity risks and cybersecurity risk management program.


text: Risk Management and Strategy have established certain processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management strategy. Such processes include physical, procedural and technical safeguards, response methods, regular tests on our systems, and routine review of our processes to identify risks and enhance our practices. We also use technology-based tools to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs. We engage certain external parties, including consultants and computer security firms to enhance our cybersecurity oversight and provide monthly trainings to our employees. We consider the internal risk oversight programs of third-party service providers before engaging them in order to help protect our company from any related vulnerabilities. At this time, we are not aware of any material cybersecurity incidents that have impacted the Company. For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report.

companyName: Enveric Biosciences, Inc.

ticker: ENVB


text: board of directors is involved in the oversight of our risk management activities, and cybersecurity represents an important element of our overall approach to risk management. Our board of directors has delegated authority to the Audit Committee to serve as the cybersecurity oversight body, which works with the chief financial officer to assess and respond to cybersecurity threats. The chief financial officer meets with the third-party vendors regularly to discuss any issues and updates related to the Company's information technology environment and reports to the Audit Committee on a quarterly basis.


text: recognize the importance of safeguarding the security of our computer systems, software, networks, and other technology assets. We have implemented cybersecurity measures and protocols for assessing, identifying, and managing material risks from cybersecurity threats, which are integrated into our overall risk management framework. We aim to ensure a comprehensive and proactive approach to safeguarding our assets and operations.

companyName: TEN Holdings, Inc.

ticker: XHLD


text: a part of our overall risk management, the Company has engaged a third-party service provider to advise as to our maintenance of cybersecurity and risk management. The C ompany has instituted a comprehensive cybersecurity risk management program that employs various methods to monitor and assess our threat environment and risk profile. These methods include the use of manual and automated tools, conducting scans of the threat environment, evaluating our and our industry's risk profile, evaluating any threats reported to us and conducting periodic vulnerabilities assessments. We have company-wide policies and procedures in place that further enhance our ability to identify and manage cybersecurity risks. Our employees receive ongoing training under our security policies. Any incidents identified by the third-party service provider are to be reported promptly to the board of directors.


text: Our management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures and, when formally adopted, implementing and maintaining our cybersecurity program.


text: risks from cybersecurity threats have not to date materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, we may, from time to time, experience threats to and security incidents related to our data and systems. In the year ended December 31, 2024, we did no t detect any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.


text: board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our patients, business partners and employees. Our management, led by our Chief Executive Officer, is actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM").

companyName: Nakamoto Inc.

ticker: NAKA


text: Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats.


text: Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including multifactor authentication, firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: we have prevented cybersecurity threats in the past in the normal course of business and expect to continue to experience such threats from time to time, to date, none have had a material adverse effect on our business, financial condition, results of operations or cash flows.


text: have been an increasing number of cyberattacks on companies around the world, which have caused operational failures, compromised sensitive corporate or customer data, and/or resulted in significant financial damages. These attacks have occurred over the internet, through malware, viruses or attachments to e-mails, or through inside actors with access to systems within an organization.

companyName: Safe Pro Group Inc.

ticker: SPAI


text: Management and Strategy utilize third party applications and resources to support our information technology ("IT") needs. All of the applications we use are Software as a Service ("SaaS") offerings. As our applications are developed and managed by third parties, we are dependent on these providers for many functions including disaster recovery during a disaster or cyber incident. Our goal is to utilize the most secure and trusted providers for our IT needs. Our business continuity plans are evaluated against evolving security and service level standards, which includes evaluating those cybersecurity threats associated with our use of key third party service providers.


text: cybersecurity management strategy consists of utilizing a combination of preventative controls and detective controls. For instance, suspicious emails are quarantined by our email service provider and must be reviewed before they are downloaded to an individual computer. Our process and cybersecurity posture will continue to be refined.


text: operate our business, we rely upon certain third-party service providers to perform a variety of functions, such as outsourced professional services, SaaS platforms, managed services, cloud-based infrastructure, corporate productivity services, and other functions.


text: date, there have been no risks identified from cybersecurity threats or previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company. However, despite all of the above aforementioned efforts, a cyberattack, if it occurred, could cause system operational problems, disrupt service to clinical trial sites, compromise important data or systems or result in an unintended release of confidential information. See "Item 1A. Risk Factors" for additional discussion of cybersecurity risks impacting our Company.


text: Audit Committee is responsible for oversight of cybersecurity risk. Our Chief Executive Officer is the member of management responsible for managing and assessing our cybersecurity practices. Our Chief Executive Officer has over 20 years' experience as a C-Level technology executive for private and public companies. The plan for the future is that our Chief Executive Officer will report to the Audit Committee on cybersecurity on a quarterly basis. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Audit Committee and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken.


text: believe we are appropriately staffed (as supported by our outsourced IT provider) to support a healthy cybersecurity posture given our size and scope.


text: date we have not experienced any cybersecurity threats and any risks from cybersecurity threats have no t materially affected, and are not reasonably likely to materially affect, our business strategy, results of operations, or financial condition.

companyName: Blue Line Protection Group, Inc.

ticker: BLPG


text: risks from cybersecurity threats have to date no t materially affected us, our business strategy, results of operations or financial condition, we have, from time to time, experienced threats to and breaches of our and our third-party vendors' data and systems. For more information, please see Item 1A. Risk Factors, the section titled "Risk Factors—Risks Related to our Information Technology, Cybersecurity and Data Protection— Failure to maintain the security of our information and technology networks, including personal information and other client information, intellectual property and proprietary business information could materially adversely affect us." Board of Directors has oversight of the Company's cybersecurity program.

companyName: Mag Mile Capital, Inc.

ticker: MMCP


text: recognize the critical importance of maintaining the safety and security of our systems and data and have a process for overseeing and managing cybersecurity and related risks. This process is supported by both management, as well as our Board of Directors and our Science and Technology Committee. The current chair of our Science and Technology Committee is a National Association of Corporate Directors ("NACD") certified cybersecurity expert.

companyName: NORTECH SYSTEMS INC

ticker: NSYS


text: Board of Directors is responsible for overseeing our enterprise risk management activities in general, and each of our Board committees assists the Board in the role of risk oversight. The full Board receives an update on the Company's risk management process and the risk trends related to cybersecurity at least annually.


text: Science and Technology Committee specifically assists the Board in its oversight of risks related to cybersecurity. To help ensure effective oversight, the Science and Technology Committee receives reports on information security and cybersecurity from the Company's information technology managers at least four times a year.


text: Defense and Continuous Monitoring – We work to protect our computing environments and products from cybersecurity threats through multi-layered defenses and apply lessons learned from our defense and monitoring efforts to help prevent future attacks.


text: We utilize data analytics to detect anomalies and search for cyber threats. We engage third-party consultants or other advisors to assist in assessing, identifying and/or managing cybersecurity threats.


text: Risk Assessments – We conduct information security assessments before sharing or allowing the hosting of sensitive data in computing environments managed by third parties. Training and Awareness – We provide awareness training to our employees to help identify, avoid and mitigate cybersecurity threats.


text: Our employees with network access participate periodically in required training, including phishing, spear phishing and other security and awareness training.


text: Engagement – We review critical third-party systems at least annually, including the various System and Organizational Controls ("SOC") reports or perform risk assessments.


text: we have experienced cybersecurity incidents in the past, to date none have materially affected the Company or our financial position, results of operations and/or cash flows. We continue to invest in the cybersecurity and resiliency of our networks and to enhance our internal controls and processes, which are designed to help protect our systems and infrastructure, and the information they contain. For more information regarding the risks we face from cybersecurity threats, please see Item 1A. "Risk Factors. "


text: today's digital landscape, cybersecurity is a critical component of our business operations. We are committed to safeguarding information systems, data, and technology infrastructure from potential cyber threats, unauthorized access, and data loss. We have implemented robust policies, procedures, and security measures to mitigate risks, ensure compliance with applicable laws and regulations, and maintain the trust of our stakeholders.

companyName: Bubblr Inc.

ticker: BBLR


text: actively monitor and adapt to the evolving cybersecurity landscape through continuous assessment. Despite these efforts, the potential for breaches, attacks, or system failures remains a risk, which could lead to service disruptions, financial losses, legal liabilities, or reputational harm. We will continue to prioritize investments in cybersecurity to enhance our defenses and resiliency against emerging all known cases to date, the company's systems and protocols have successfully detected and mitigated these attempts with no impact on operations or data integrity.


text: This includes protecting against known and evolving threats to the security of the Company's systems and information, and against unauthorized access, compromise, or loss of data. The Cybersecurity System is managed centrally, so the same security controls, policies and procedures are implemented across the organization. The Company maintains cybersecurity policies including an Acceptable Use Policy that all system users sign to acknowledge that they understand their security responsibilities. All system users receive security awareness key element of the Company's Cybersecurity System is to mature the program to align with the Center for Internet Security (CIS)

companyName: SECURITY NATIONAL FINANCIAL CORP

ticker: SNFCA


text: Critical Security Controls security framework. CIS controls are designed based on real-world data about cyber-attacks, to ensure that the measures are effective against current threats. The framework provides a prioritized set of actions, which enables the Company to focus its efforts on the most effective defensive measures first. This prioritization helps in optimizing the use of resources for maximum impact on security. This strategy provides a structured and effective approach to cybersecurity, helping the Company to protect its assets, comply with regulations, manage risks, and improve its overall security posture.


text: addition, the Company has established procedures to ensure that management personnel are informed in a timely manner of known cybersecurity risks and incidents that may materially impact the Company's operations and that timely public disclosure is made as appropriate.


text: The Company's Cybersecurity System is led by the Chief Information Officer ("CIO") in collaboration with a third-party virtual Chief Information Security Officer ("vCISO") and other third-party cybersecurity service providers which in turn assist in monitoring the Company's exposure from significant information technology suppliers, significant software as service providers and major vendors with access to the Company's information technology systems. The Company's CIO has 10+ years of cybersecurity industry experience. Further, team members who support the Company's cybersecurity program have relevant educational and industry experience through various roles involving information technology, security, auditing, compliance, systems, and programming, as well as cybersecurity certifications such as a Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM). During the last three years, the Company has not experienced a material security breach and, as a result, the Company has no t incurred any material expenses from such a breach. Furthermore, during such time, the Company has not been penalized or paid any amount under any information security breach settlement.


text: We maintain a cyber risk management protocol designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. We have undertaken, on an annual basis, to conduct an assessment of our cyber risk management processes and controls to identify, quantify, and categorize material cyber risks. In addition, we have developed a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the annual assessment process.

companyName: Power REIT

ticker: PW


text: We employ a risk management strategy for the assessment, identification and management of material risks stemming from cybersecurity threats. Our methodologies involve a systematic evaluation of potential threats, vulnerabilities, and their potential impacts on our organization's operations, data, and systems. Our cybersecurity risk management program includes: Risk assessments designed to help identify material cybersecurity risks to our critical systems, and our IT environment; The use of external service providers to assess, test or otherwise assist with aspects of our security controls; Cybersecurity awareness training of our employees and senior management including consultation with third parties as deemed necessary;


text: A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and We design and assess our program using the National Institute Cybersecurity Framework ("NIST CSF") as a set of guiding principles.


text: Our third-party service providers are primarily responsible for the security of their own information technology environments and in certain instances we rely significantly on third-party service providers to supply and store our sensitive data in a secure manner. All of these third parties face potential risks relating to cybersecurity similar to ours which could disrupt their businesses and therefore adversely impact us. While we provide guidance and specific requirements in some cases, we do not directly control any of these parties' information technology security operations, or the amount of investment they place in guarding against cybersecurity threats. Accordingly, we are subject to any flaw or breaches to their information technology systems, or those which they operate for us, which could have a material adverse effect on our financial condition or results of operations.


text: We acknowledge that the risk of cyber incidents is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. To date, we have not had a cybersecurity incident. We proactively seek to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery; however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. See Item 1A. "Risk Factors" for more information on cybersecurity risks.


text: operate in the medical device industry, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We have initiated a risk-based approach designed to identify and assess the cybersecurity threats that could affect our business and information systems. Our strategy is to maintain a high level of risk awareness, identify critical IT assets, regularly update or replace those assets, and systematically perform vulnerability testing, and to promptly remediate deficiencies. Our cybersecurity program is aligned with industry standards and best practices, such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework.

companyName: NeuroMetrix, Inc.


text: have adopted various tools and methodologies to manage cybersecurity risk that perform testing and scrutiny on a regular cadence. We have also adopted a process of monitoring and evaluating our cybersecurity posture and performance on an ongoing basis through scheduled vulnerability scans, penetration tests and threat intelligence feeds. We require third-party service providers with access to personal, confidential or proprietary information to implement and maintain comprehensive cybersecurity practices consistent with applicable legal standards and industry best practices. business depends on the availability, reliability, and security of our information systems, networks, data, and intellectual property.


text: Board of Directors, the Audit Committee and the Cyber Committee, which is chaired by the Chief Executive Officer and staffed by the IT Director, Chief Financial Officer, Corporate Controller and other management employees, are responsible for overseeing cybersecurity risks and risk management. The Board has assigned oversight responsibility for cybersecurity to the Audit Committee, which is in regular communication with management concerning cybersecurity threats and incidents. The Audit Committee reviews management assessment of cyber controls, control testing and outcomes. The Audit Committee is responsible for keeping the Board informed of significant cybersecurity developments including incidents which might potentially have a material effect on the Company. The Cyber Committee is responsible for evaluating cyber threats, the potential effect on operations and scope of the threat. Threats or incidents which the Cyber Committee has judged to have potentially material consequences will be communicated to the Audit Committee. A meeting of the full Board of Directors, including the Audit Committee, will be convened within 48 hours of the Cyber Committee assessment. If the Board determines that the threat or incident is material, Form 8-K will be finalized and filed within four days following the determination, as required under SEC rules.


text: Such threats and breach attempts have not materially affected our business, strategy, results of operations or financial condition. At any given time, however, we may face known or unknown cybersecurity risks and threats that cannot be fully prevented or mitigated, and we may discover vulnerabilities in our cybersecurity programs. Therefore, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. For more information on the cybersecurity risks we face, please refer to "

companyName: SRx Health Solutions, Inc.

ticker: SRXH


text: A failure of one or more key information technology systems, networks or processes may materially adversely affect our ability to conduct our business." in Item 1A. " Risk Factors."


text: have no t identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For more information, please refer to Item 1A: Risk Factors for further insights into cyber attack-related risks. Board considers cybersecurity risks as part of its risk oversight function of cybersecurity and other information technology risks.

companyName: AgEagle Aerial Systems Inc.

ticker: UAVS


text: measures are to be seamlessly integrated into our broader operational risk management framework aimed at minimizing exposure to unnecessary risks across our operations. For cybersecurity, we collaborate with expert consultants and third-party service providers to implement industry-standard strategies aimed at identifying and mitigating potential threats or vulnerabilities within our systems. Additionally, the policy strategy will have a comprehensive cyber crisis response plan to manage high severity security incidents, ensuring efficient coordination across the organization. We are aware of the risks associated with third-party service providers and have implemented policies and processes to oversee and assist with managing these risks. Our management team evaluates third-party providers before engagement and monitors these providers on an ongoing basis commensurate with the level of risk and complexity of the relationship with, and the activities performed by, such providers. This approach is designed to help identify and mitigate risks related to data breaches or other cybersecurity incidents originating from third-parties in order to better protect our assets and data.


text: Chief Operating Officer oversees our information security programs, including cybersecurity initiatives, and is integrated into our Cybersecurity Incident response process. The Audit committee oversees cybersecurity risk management activities, supported by Company management, the Board of Directors, and external consultants. We assess and prioritize risks based on potential impact, implement technical controls, and monitor third-party vendors' security practices.


text: Our VPE&T, is primarily responsible for assessing and managing material risks from cybersecurity threats, including monitoring the measures used for prevention, detection, mitigation and remediation of cybersecurity incidents. The information security organization is comprised of internal IBO employees and external security suppliers who provide security monitoring and response.

companyName: DSS, INC.

ticker: DSS


text: is critical to preserving our documents and records and enabling us to reach our ultimate goals. Inasmuch as we have no current operations, no customers, no contractors, no supply chains, no current revenue stream, and only one employee, we do not face the multitude of cybersecurity threats common to most companies and most industries. We believe a cybersecurity incident would have a minimum impact on our operations.

companyName: DIAMONDHEAD CASINO CORP

ticker: DHCC


text: However, common cybersecurity threats and risks make it imperative that we maintain adequate precautions with respect to cybersecurity and, to this extent, we have industry standard security controls in place to protect our systems and our data.


text: President oversees processes for identifying and mitigating risks, including cybersecurity risks. The Company relies upon an outside third party security consultant for the security of its systems and relies upon third-party cybersecurity monitoring, alerting services, training, and use of secure cloud offerings to protect data. We have redundant systems to protect our current systems. Our outside consultant evaluates our security controls and provides overall information security strategy for the protection, detection and response capabilities used. The current consultant has extensive information technology and program management experience and evaluates our security with the ultimate goal of preventing cybersecurity incidents to the extent feasible.


text: the event of an incident, the President would immediately notify our outside consultant to take those steps required for maximum recovery.


text: The President would also apprise the Board of Directors of any cybersecurity incidents deemed to have a moderate or higher business impact, even if immaterial to us, and would timely notify the public of any material cybersecurity incident.


text: our efforts, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. Nor are we insured for damages that could result from such an incident.


text: engaged and used the advice of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers have recommended installation of Check Point Firewall and ESET Protect Advanced cloud based anti-virus, as well as site periodic evaluations of the work stations and also engaged third party consultants to prepare policies and procedures to oversee and identify the risks from cybersecurity threats associated with our use of third-party service providers and we continue to monitor that all third-party software providers remain in of the date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, and cause existing clients/customers to discontinue. As well as prevent us from attracting new clients/customers, and interfere with the progress of our clinical trials, or interfere with our efforts to pursue regulatory approvals for our product candidates, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. For further information, see "Risk Factors- Our business and operations would suffer in the event of computer system failures, cyber-attacks or deficiencies in our cyber-security " in Item 1A of this Annual Report on Form 10-K. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.

companyName: ENvue Medical, Inc.

ticker: FEED


text: are a "blank check" company whose business plan is to merge with an operating company, and, in addition, as a "shell company" we have no or nominal assets (other than cash) and no or nominal operations. Accordingly, we do no t have material information to disclose regarding our cybersecurity risk management, strategy and governance.

companyName: Stratos Renewables Corp

ticker: SRNW


text: have developed and implemented cybersecurity risk management processes intended to protect the confidentiality, integrity, and availability of our critical systems and information. While everyone at our company plays a part in managing cybersecurity risks, primary cybersecurity oversight responsibility is shared by our board of directors and senior management. Assessment Processes: We conduct regular risk assessments to proactively identify potential cybersecurity threats and vulnerabilities. These assessments involve thorough evaluations of our IT infrastructure, data systems, and processes to pinpoint areas of weakness.

companyName: Venu Holding Corp

ticker: VENU


text: for Identifying and Mitigating Threats: We follow a framework for identifying and mitigating cybersecurity threats, which outlines procedures for threat detection, incident response, and risk mitigation.


text: board of directors is charged with overall oversight of our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. However, certain members of management are to report to our board of directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential.