text: We regularly assess, identify, and manage material risks from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: InMed Pharmaceuticals Inc.

ticker: INM


text: We conduct risk assessments at least annually to identify cybersecurity threats. These risk assessments include identifying reasonably foreseeable potential internal and external risks, the likelihood of occurrence and any potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, controls and other safeguards we have put in place to manage such risks. Our risk management process also encompasses cybersecurity risks associated with the use of our major third-party vendors and service providers. Additionally, we maintain cyber coverage through our insurance carrier to mitigate risks associated with cybersecurity incidents, subject to customary terms and exclusions.

secItem: Item 1C


text: Following these risk assessments, we design, implement, and maintain reasonable safeguards to minimize the identified risks; reasonably address any identified gaps in existing safeguards; update existing safeguards as necessary; and monitor the effectiveness of our safeguards. Moreover, we remain committed to investing in the development and improvement of our security processes and controls, as well as maintaining our technology infrastructure. These processes include a plan for notifying, informing, consulting, analyzing, and communicating any risks or incidents to a range of internal stakeholders, including executive management and the Board of Directors, as well as external stakeholders, as deemed necessary and appropriate based on the circumstances. We believe we have allocated adequate resources related to our cybersecurity risk management processes and have designated our Chief Financial Officer with the responsibility of managing the cybersecurity risk assessment and mitigation process.


text: As part of our overall risk management program, we provide required training to employees in high risk areas on cybersecurity and will distribute standard operating procedures to all employees. For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition, please refer to Item 1A, "Risk Factors," in this Annual Report.


text: One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks arising from cybersecurity threats. Our Chief Financial Officer and Chief Operating Officer are primarily responsible for assessing and managing material risks from cybersecurity threats on a day to day basis. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our management team is additionally responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole. The Company additionally utilizes the assistance of a third-party service provider, an information technology solutions service provider located in Richmond, BC, for purposes of broadly managing its cybersecurity risks.


text: Risk Management and strategy As part of our broader risk management system and processes, we maintain procedures for identifying, assessing, and managing material risks from cybersecurity threats that is designed to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: Lakeside Holding Ltd

ticker: LSH


text: We track and log security incidents across our company and our customers to remediate and resolve any such incidents. Significant incidents, if any, shall be reviewed by chief executive officer and chief operating officer, with the assistance from our information technology department, to assess and determine its materiality or potentiality of becoming material. Our senior management makes the final materiality determinations and disclosure and other compliance decisions.


text: As of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Our board of directors does not have a standing risk management committee, but rather directly administers its oversight function as a whole. Our board of directors will (i) lead in a direction that minimizes the risk of unauthorized and malicious use, disclosure, potential theft, alteration or damaging effects of our operations while concurrently enabling the sharing of information in cyberspace, and (ii) ensure that risks to the confidentiality, integrity or availability of Company-owned information assets are managed appropriately, and (iii) review disclosure concerning cybersecurity matters in our annual report on 10-K presented by our chief executive officer, chief financial officer, and other personnel in charge of cybersecurity matters.


text: Cybersecurity Risk Management and Strategy The Company regards information and data as valuable assets. As a result, we have implemented safeguards to protect corporate informational and data assets. Associated and established technology resources maintain the integrity, availability, and privacy of confidential information of the respective assets. Additionally, we maintain a similar risk-based approach to our third-party vendors including identifying and overseeing cybersecurity risks they present.

companyName: Kentucky First Federal Bancorp

ticker: KFFB


text: Integration into Overall Risk Management System The Company employs comprehensive methodologies for risk assessment and diligently identifies and evaluates potential cybersecurity threats and vulnerabilities across our systems, networks and data assets. This process involves regular examinations of emerging threats, conducting penetration tests, vulnerability scanning and thorough analysis of industry-specific risks.


text: The Company continues to expand investments in information technology security, including continuous end-user training, layered defenses, identifying and protecting critical assets, strengthening monitoring and alerting.


text: The Company's Information Security Officer ("ISO") is responsible for completing additional mandatory training to understand the processes, procedures, and technical requirements for securing information assets across the Company.


text: The Company has developed an Incident Response Plan to guide its actions in responding to real and suspected information security incidents. This includes unlawful, unauthorized, or unacceptable actions that involve a computer system or a computer network such as Distributed Denial of Service attacks, Corporate Account Takeover schemes, or ransomware. Cybersecurity threats that are identified and deemed material are escalated and communicated directly to the Incident Response Team, in collaboration with relevant information technology personnel, insurance providers, legal counsels and when necessary, external cybersecurity firms specializing in forensic investigations.


text: The Company sets forth enterprise-wide coordinated responses to identified threats, ensuring timely mitigation and remediation, and facilitating awareness and communication. Tabletop exercises are held regularly at the senior and executive management levels to validate roles and responsibilities, and response protocols respective to cybersecurity threats.


text: Third-party Access The Company has a fully integrated third-party risk management program to identify, assess, monitor and mitigate risks associated with third-party relationships, including cybersecurity risks. Under the program, risk ratings are assigned to each of the vendors based on an assessment of the vendor and its access to networks, systems, and confidential information. An assessment is conducted on each vendor to identify and measure the risks from cybersecurity threats that could impact our customer's data and our environment. Third parties that have access to our systems or customer data must have appropriate technical and organizational security measures and security control principles based on commercially acceptable security standards, and we require third parties in this class to agree by contract to manage their cybersecurity risks.


text: Material Cybersecurity Threat Risks The Company has not experienced any material losses relating to cybersecurity threats or incidents for the year ended June 30, 2024. We are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition. Although we have a robust cybersecurity program that is designed to assess, identify, and manage material risks from cybersecurity threats, we cannot provide absolute surety that we have properly identified or mitigated all vulnerabilities or risks of incidents. The Company, and the third parties that the Company engages, are subject to constant and evolving threats of attack and cybersecurity incidents may be more difficult to detect for periods of time.


text: A cybersecurity incident could harm our business strategy, results of operations, financial condition, reputation, and/or subject us to regulatory actions or litigation which may result in fines, judgments or indictments.


text: Cybersecurity Governance The Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Board has oversight responsibilities to ensure effective governance in managing these risks because it recognizes the significance of these threats to our operational integrity, shareholder and customer confidence and reputation.


text: Board of Directors Oversight The Board is responsible for the oversight of cybersecurity risk management and is composed of members with expertise in risk management, technology, and finance, thereby equipping them to manage and prevent cybersecurity risks effectively.


text: Management's Role in Managing Risk The ISO plays a pivotal role in informing the Board of Directors on cybersecurity risks. The ISO, other information security staff, and members of senior management meet regularly as the Technology Steering Committee. Reports of their meetings are shared with the boards of our subsidiary banks. Committee reports provide comprehensive briefings to both the Board and the Audit Committee as part of managements reporting. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies;


text: Incident reports and issues identified from any cybersecurity events; and standards. In addition to our regularly scheduled Board meetings, the ISO regularly communicates with senior staff regarding emerging or potential cybersecurity risks. They discuss any significant developments in the cybersecurity domain, which when reported to the Board, ensures the Board's oversight is proactive and responsive. The Board actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. This involvement ensures that cybersecurity considerations are integrated into the broader strategic objectives of the Company. The Board closely reviews these reports of the Bank's cybersecurity posture and the effectiveness of its risk management strategies prior to approval. This review helps in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.


text: Cyber Risk Management Personnel The ISO directly reports to the CEO. The ISO regularly meets with the CEO to update and discuss any cybersecurity risks and incidents affecting the Company. This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing the Company. Furthermore, all significant cybersecurity matters and strategic risk management decisions are promptly escalated to the Board of Directors, ensuring that they have an up-to-date, comprehensive understanding of and can provide guidance on critical cybersecurity issues.


text: Primary responsibility for assessing and providing strategic direction to our cybersecurity program resides with our ISO. The ISO's experience includes prior leadership roles within the Company, where they developed an expert level of understanding of the intersection between financial regulations and cloud-based technologies.


text: The ISO and other information systems staff possess in-depth knowledge and experience which are instrumental in developing and executing our cybersecurity strategies. The ISO and the Tech Steering Committee oversee our governance programs, work with our technology-focused leaders and partners to align security and compliance, and have developed our employee security awareness training program.


text: Monitoring Cybersecurity Incidents The ISO and other information security staff utilizes vendor relationships and various other internet based daily updates for the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This knowledge is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. The ISO provides structure for clear processes to ensure the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, we believe we are equipped with a well-defined Incident Response Plan that is adequately resourced. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevent future incidents.


text: We use, store and process data for and about our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2024.

companyName: bowmo, Inc.


text: Under the oversight of the Board of Directors (since we do not currently have an Audit Committee), we intend to implement and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes would be integrated into our overall risk management processes. We intend to implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify and address cybersecurity risks. In support of this approach, it is expected that we would have a third-party security consultant implement processes to assess, identify and manage security risks to our company, including in the pillar areas of security and compliance, application security, infrastructure security and data privacy. This process, once implemented, would include regular compliance and critical system access reviews. In addition, we intend to conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office, and Google enterprise to provide protection against cybersecurity threats.


text: Further, we intend to put processes in place that would evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that would have access to our data, including a review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: Part of our intended program would be ongoing evaluation and enhancement of our systems, controls and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition.


text: We rely upon internally and externally managed information technology systems and networks for the collection and storage of sensitive data and business information. We approach cybersecurity risks with a comprehensive risk management and governance strategy designed to assess, identify, and manage cybersecurity risks to our business.

companyName: ATECH (PARENT) RESOLUTION CORP.


text: Risk Management and Strategy Our cybersecurity program is designed to detect cybersecurity threats and vulnerabilities, protect our information systems from such threats, and ensure the confidentiality, integrity, and availability of systems and information used, owned, or managed by us. Our focus is on protecting sensitive information, such as the personal information of our customers and employees, and confidential business information that a competitor or a malicious actor could leverage.


text: Our cybersecurity program has several components, including the adoption of information security protocols, standards, and guidelines consistent with industry best practices; engaging third-party service providers to conduct security assessments; performing periodic internal audits of our cybersecurity protocols. We adhere to the National Institute for Standards and Technology (NIST) SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) 2.0 frameworks, which provide a set of standards, guidelines, and best practices to manage cybersecurity-related risks.


text: We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and have integrated these processes into our overall risk management systems and processes. We conduct regular risk assessments to identify cybersecurity threats and assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats.


text: These risk assessments include identifying reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: Following these risk assessments, we implement and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards.


text: We have implemented technical solutions designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, antimalware and endpoint protection functionality, and access and identity controls. We regularly evaluate, monitor, and improve these solutions.


text: As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, information technology, legal, compliance and ethics, and management. Personnel at all levels and departments are made aware of our cybersecurity policies through periodic training. Further training is performed on a scheduled basis, covering cybersecurity topics and overall security hygiene, which reflect current techniques and tactics employees may encounter.


text: We have experienced incidents in the past and may experience them in the future. However, we have not experienced any cybersecurity incidents that have been determined to affect us materially, our business strategy, results of operations, or financial condition. As external events evolve, we will continue to evaluate and address these conditions as needed in our Business Continuity and Incident Response programs. For additional information regarding risks from cybersecurity threats, please refer to " Item 1A. Risk Factors – General Risks – Security breaches and other disruptions could compromise our proprietary information and expose us to liability, which would cause our business and reputation to suffer. "


text: One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole, as well as through the IT Governance Committee.


text: Our Vice President of Information Technology regularly reports to our IT Governance Committee, which oversees our IT strategy, programs and risks, including the cybersecurity practices, procedures and controls management used to identify, assess and manage our key cybersecurity programs and risks, ensure the protection of the confidential intellectual property, information and data of the Company and its customers and ensure compliance with applicable data protection laws and regulations. Our Vice President of Information Technology has relevant experience of more than 25 years in information technology and cyber and information security, and he oversees our cybersecurity policies and processes, including those described in "Risk Management and Strategy" above. He also holds multiple certifications including Computer Information Systems Security Professional (CISSP), Certified in Information Systems Management (CISM), Certified in Information Systems Audit (CISA), Certified in Risk and Information Systems Control (CRISC), and CompTIA Advanced Security Practitioner (CASP+). Our Vice President of Information Technology monitors and stays informed about prevention, detection, mitigation, and remediation efforts through regular communication and reporting from our IT department, and through the use of technological tools and software and results from third party assessments.


text: Our Vice President of Information Technology provides quarterly briefings to the IT Governance Committee regarding our company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, and activities of third parties. Our IT Governance Committee provides regular updates to the Board of Directors on such reports.


text: Management and Strategy have established cybersecurity risk assessment procedures to ensure effectiveness in cybersecurity management, strategy and governance and reporting cybersecurity risks. The process is in alignment with our strategic objectives and risk appetite.

companyName: Singularity Future Technology Ltd.

ticker: SGLY


text: strive to manage cybersecurity risks and protect sensitive information through various means, such as technical safeguards, procedural requirements, close monitoring on our corporate network. We may engage assessors, consultants, auditors, or other third parties to enhance our cyber security risk management processes. Any cybersecurity incidents are closely monitored for their potential impact on our business of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Board oversees the Company's cybersecurity risks management and reviews management reports on material cybersecurity risks and issues on an as-needed basis. The chief executive officer (the "CEO") and the chief financial officer (the "CFO")


text: are responsible for discussing material cybersecurity incidents or threats with specific constituencies before sign-off, ensuring thorough review of information and disclosures. The CEO and CFO are also responsible for assessing, identifying and managing material risks from cybersecurity threats to our company and monitoring the prevention, detection, mitigation and remediation of material cybersecurity incident, maintaining oversight of the disclosure in the periodic reports (including our annual reports on Form 10-K) of the Company.


text: As of June 30, 2024, we did not establish policies and processes for assessing, identifying, and managing material risk from cybersecurity threats.

companyName: Foxx Development Holdings Inc.

ticker: FOXX


text: In connection with the Closing, on September 24, 2024, our Board of Directors approved our Cybersecurity Incident Response Policy (the "Cybersecurity Policy"), We have integrated the processes as described in the Cybersecurity Policy into our overall risk management systems and processes According to the Cybersecurity Policy, we routinely assess material risks from cybersecurity threats that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. Pursuant to the Cybersecurity Policy, we conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: Following these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate high-level personnel, including our Chief Technology Officer ("CTO"), James Liao, to manage the risk assessment and mitigation process.


text: We may engage consultants and other third parties as needed in connection with our risk assessment policies and processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.


text: We require third-party service providers to certify their ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of their security measures that may affect the Company.


text: As part of our overall risk management strategies, we also conduct cybersecurity trainings for personnel at all levels and in all departments.


text: One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board of Directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function primarily through the Audit Committee.


text: Our CIO provides periodic briefings to the Audit Committee regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity policies and procedures, activities of third parties, and the like.


text: Our CTO, James Liao, and senior vice president of the Operating Subsidiary, Ruobing Yu, constitute our cybersecurity incident management team and are primarily responsible to assess and manage our material risks from cybersecurity threats. Our CTO has over 25 years in consumer electronics and telecommunication sectors and has a professional background in computer science and engineering, which enables him to oversee our IT systems efficiently.


text: As part of the executive team reporting to the Board, our CTO oversees our cybersecurity policies and processes, including those described in "Risk Management" above. The processes by which our CTO is informed of and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents include log review from IT and operations teams or reports received from network systems and applications if any unusual activity occurs, such as email system notification of items opened that could be malicious.


text: Risk Management and Strategy We have implemented and maintain various information security processes and technologies designed to identify, assess and manage material risks from cybersecurity threats to our computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property and confidential information that is proprietary, strategic, or competitive in nature ("Information Systems and Data").

companyName: ENZO BIOCHEM INC


text: Our Senior VP of Global IT and System Operations, IT Security Officer and the information security team, in conjunction with our legal team and third-party service providers, help identify, assess and manage our cybersecurity threats and risks. Our Senior VP of Global IT and System Operations, IT Security Officer and the information security team identify and assess risks from cybersecurity threats by continuously monitoring and evaluating our threat environment using various methods, including, for example: conducting vulnerability assessments to identify vulnerabilities, conducting scans of corporate devices and network infrastructure, analyzing reports of potential, known and identified threats and actors, using automated and manual tools to monitor for, identify, or evaluate threats and risks, conducting audits and threat assessments, and utilize third party managed detection and response (MDR) 24/7/365 cybersecurity vendor services that help identify cybersecurity threats, using third party threat assessments and external intelligence feeds, and evaluating our company's and our industry's risk profile.


text: We implement and maintain technical, physical, and organizational measures, processes, and policies that are designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: dedicated cybersecurity staff, an incident response plan and policy, a vulnerability management policy, risk assessment process, processes and policies to address access to systems and networks, physical security protocols, processes for asset management, encryption of certain Company data, systems and networks, penetration testing, IT risk assessments and employee training. We also maintain cybersecurity insurance.


text: Our assessment and management of risks from cybersecurity threats are integrated into our overall risk management processes. For example, cybersecurity risk is identified and addressed as a component of our general risk management strategy. We have also established a cybersecurity committee consisting of our Senior VP of Global IT and System Operations, IT Security Officer, information security team, and other senior leaders to oversee our cybersecurity risk management process and strategies to mitigate cybersecurity threats.


text: We use third-party service providers to assist us from time to time to identify, assess, and manage risks from cybersecurity threats, including professional services firms, cybersecurity consultants, managed cybersecurity service providers and penetration testing firms.


text: We have a vendor management program to manage cybersecurity risks associated with our use of certain service providers. The program includes, depending on the nature of the services and the identity of the service provider, completion of security questionnaires, review of the service provider's written security program, and imposition of cybersecurity-related contractual obligations on the provider.


text: For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Item 1A. Risk Factors of this Form 10-K, including " Cybersecurity risks and the failure to maintain the confidentiality, integrity, and availability of our computer hardware, software and internet applications and related tools and functions could result in dam age to the Company's reputation and/or subject the Company to costs, fines, or lawsuits", and " We rely on network and information systems and other technology whose failure or misuse could cause, and has caused, a disruption of services or loss or improper disclosure of personal data, business information, including intellectual property, or other confidential information, resulting in increased costs, loss of revenue or other harm to our business."


text: Our Board addresses the Company's cybersecurity risk management as part of its general oversight function. The Board is responsible for overseeing our cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by our Senior VP of Global IT and System Operations and IT Security Officer.


text: Our Senior VP of Global IT and System Operations in conjunction with the IT Security Officer implements programs and policy recommendations to integrate cybersecurity risk considerations into our overall risk management strategy and works with the information security team to communicate key priorities. Our Senior VP of Global IT and System Operations and IT Security Officer are responsible for helping to prepare the Company for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our incident response plan is designed to escalate certain cybersecurity incidents to members of our incident response team and members of management depending on the circumstances, including executive management and the Board. Our Senior VP of Global IT and System Operations, IT Security Officer and information security team work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to the Governance and Compliance Committee ("the Committee") for certain cybersecurity incidents. The Committee periodically evaluates overall business continuity, compliance, regulatory, quality and safety systems effectiveness.


text: The Committee includes, but is not limited to, the Company's IT Security Officer, Data Privacy Officer, Safety Officer, and Senior VP of Global IT and System Operations.


text: The Committee is updated during the quarterly Committee meetings by the Senior VP of Global IT and System Operations and the IT Security Officer concerning the Company's significant cybersecurity threats and risk and the processes we have implemented to address them. The Committee also receives reports, summaries or presentations related to cybersecurity threats, risk and mitigation. The Company's Senior VP of Commercial Operations, General Counsel, Chief Financial Officer and Chief Executive Officer may also participate in Committee meetings and will receive updates from the Committee as appropriate.


text: Cybersecurity Risk Management and Strategy Our company recognizes the critical importance of cybersecurity in our digital operations and has established a risk management program to address both internal and external cybersecurity threats. Despite our comprehensive efforts and critical resource allocation, we acknowledge the challenges posed by the evolving nature of cyber threats and the limitations in fully mitigating these risks. We have not observed any significant impacts from known cybersecurity threats or previous incidents on our operational, strategic, or financial aspects. Nevertheless, given the unpredictable nature of cyber threats, we cannot assure complete immunity against potential future impacts.

companyName: ATIF Holdings Ltd

ticker: ZBAI


text: The likelihood of cybersecurity incidents is influenced by frequency risk factors. External factors include market trends in cybercrime, technological advancements in hacking methods, and geopolitical developments. Internal factors are shaped by our policies, the effectiveness of employee training, and robustness of system updates and maintenance procedures. External cybersecurity incidents events may include and are not limited to service disruptions due to email borne threat activities, ransomware, or denial of service attacks against us or our suppliers, while internal events may comprise of internal threats, subcontractors, or governance failures among other events.


text: Cybersecurity incident response plans are regularly updated to include structured processes encompassing identification, containment, eradication, recovery, and post-incident review. Continuous monitoring of systems and networks allows for the detection and response to potential cybersecurity threats. Response capabilities are regularly reviewed to align with the evolving cyber threat landscape and processes are fully integrated into our broader risk management system.


text: Criteria used to determine the materiality of an incident includes, but is not limited to, evaluating the scope, nature, type, systems, data, operational impact, and pervasiveness of the incident. This approach involves continuous oversight and improvement based on evolving cyber threats. Materiality also considers both quantitative and qualitative factors in determining impact.


text: Third-party engagement processes include risk evaluation across various domains such as cybersecurity, data privacy, supply chain, and regulatory compliance. We are committed to transparently disclosing material and unauthorized cybersecurity incidents involving third-party service providers, considering factors like operational technology system damages, information breaches, and interconnected attacks exploiting vulnerabilities.


text: Cybersecurity Governance Our Board of Directors plays a pivotal role in overseeing the organization's preparedness for cyber threats. This involves a comprehensive understanding of our risk profile, ensuring appropriate cybersecurity controls are in place, regularly reviewing the effectiveness of these measures, and maintaining a robust incident response plan. The Board's involvement extends beyond compliance and budget approvals to active participation in continuous cybersecurity strategy improvement.


text: We recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect our data's confidentiality, integrity, and availability. We have implemented, including testing software and our computer systems, our facilities, systems and procedures, from cybersecurity threats. We assess risks arising from cybersecurity threats against our information systems that may result in adverse effects on our information systems or any information residing therein. We conduct periodic assessments to identify such cybersecurity threats.

companyName: MULIANG VIAGOO TECHNOLOGY, INC.


text: Management is responsible for identifying and assessing material risks for the business on an ongoing basis, including in relation to cybersecurity. Our Chief Executive Officer oversees our information technology department which monitors the prevention, detection, mitigation, and remediation of cyber incidents, if any.


text: have not encountered cybersecurity risks, threats, or incidents that have materially affected or are reasonably likely to materially affect the Company, our business strategy, results of operations, or financial condition during the financial year ended December 31, 2023.


text: Cybersecurity: Risk Management and Strategy We have developed and implemented a cybersecurity risk management program that is designed to protect the confidentiality, integrity, and availability of the Company's data and systems. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Maitong Sunshine Cultural Development Co., Ltd

ticker: MGSD


text: Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.


text: A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;


text: A security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;


text: The use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;


text: Cybersecurity awareness training of our employees, incident response personnel, and senior management; and A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: Additionally, the Company assesses and manages cybersecurity threats associated with its third party service providers' information technology systems that could compromise the Company's information security or data. Identified cybersecurity threats are communicated to management for review, response and mitigation as appropriate.


text: As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Cybersecurity: Governance Our Board of Directors considers cybersecurity risk within the Board's risk oversight function. The board of directors has charged management with responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system controls and security. The Board oversees management's implementation of our cybersecurity risk management program.


text: Our Chief Financial Officer reviews the efficacy of our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the Company's financial statements.


text: Our Chief Financial Officer reports to our CEO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO and CFO provide prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding the Company's cybersecurity program.


text: cybersecurity program is designed to identify, assess, and manage material risks from cybersecurity threats. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which we rely. We engage external experts, including cybersecurity assessors and consultants, to evaluate cybersecurity measures and risk management processes. We engage and depend on service providers to actively monitor the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats. Our finance and compliance personnel identify and oversee risks from cybersecurity threats associated with our use of such service providers.

companyName: PhenixFIN Corp

ticker: PFX


text: Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from our Chief Executive Officer and our Chief Compliance Officer, regarding the overall state of our cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents.


text: management, including our Chief Executive Officer and Chief Compliance Officer, is responsible for assessing and managing material risks from cybersecurity threats. Members of Company management possess relevant expertise in various disciplines that are key to effectively managing such risks, such as regulatory compliance and corporate governance and rely on third-party service providers to provide expertise with respect to information technology and cybersecurity. Our management is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents, primarily through the receipt of notifications from service providers.


text: potential impact of risks from cybersecurity threats are assessed regularly, including how such risks could materially affect our business strategy, operational results, and financial condition. During the reporting period, we have not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that we believe have materially affected, or are reasonably likely to materially affect, us, including our business strategy, operational results, and financial condition.


text: Our corporate information technology, communication networks, enterprise applications, accounting and financial reporting platforms, and related systems are necessary for the operation of our business. We use these systems, among others, to manage our product development, to communicate internally and externally, to operate our accounting and record-keeping functions, to store and access data including sensitive patient data and for many other key aspects of our business. Our business operations rely on the secure collection, storage, transmission, and other processing of proprietary, confidential, and sensitive data.

companyName: NEUROONE MEDICAL TECHNOLOGIES Corp

ticker: NMTC


text: Our Chief Financial Officer leads our information security organization (overseeing work done by a third party IT services company) and reports to the Chief Executive Officer and Board of Directors of any material information regarding such cybersecurity matters.


text: Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K.


text: These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees, customers or patients, violation of data privacy or security laws, litigation, and legal, financial and reputational risk.


text: In coordination with third-party consultants, we have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical systems and data. Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards, and/or policies designed to manage and mitigate material risks from cybersecurity threats to our information systems and data, including risk assessments, incident detection and response, vulnerability management, disaster recovery and business continuity plans, internal controls within our accounting and financial reporting functions, encryption of data, network security controls, access controls, physical security, asset management, systems monitoring, vendor risk management program and employee training. We conduct annual reviews and tests of our information security program to evaluate its effectiveness and improve our security measures and planning.


text: To operate our business, we utilize certain third-party service providers and vendors to support a variety of functions. We seek to engage reliable, reputable service providers and vendors that maintain cybersecurity programs, and we implement a vetting process to ensure that all third-party service providers and venders comply with our cybersecurity program requirements. Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider, conducting security assessments, and conducting periodic reassessments during their engagement.


text: We are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations, or financial condition.


text: Our Board of Directors holds oversight responsibility for the Company's strategy and risk management, including material risks related to cybersecurity threats. Oversight of such cybersecurity risks is executed directly by the Board of Directors. The Board receives reports and engages in regular discussions with management regarding the Company's significant risk exposures resulting from material cybersecurity threats and the measures implemented to monitor and reasonably manage these risks.


text: Cybersecurity risk management and strategy Our cybersecurity risk management is based on recognized cybersecurity industry frameworks and standards, including those of the National Institute of Standards and Technology, the Center for Internet Security Controls, and the International Organization for Standardization. We use these frameworks, together with information collected from internal assessments, to develop policies for the use of our information assets (for example, TI business information and information resources such as mobile phones, computers and workstations), access to specific intellectual property or technologies, and protection of personal information. We protect these information assets through industry-standard techniques, such as multifactor authentication and malware defenses. We also work with internal stakeholders across the company to integrate foundational cybersecurity principles throughout our organization's operations, including the employment of multiple layers of cybersecurity defenses, restricted access based on business needs, and integrity of our business information. Throughout the year, we also regularly train our employees on cybersecurity awareness, confidential information protection and simulated phishing attacks.

companyName: Rafael Holdings, Inc.

ticker: RFL


text: Our cybersecurity risk management extends to risks associated with our use of third-party service providers. For instance, we conduct risk and compliance assessments of third-party service providers that request access to our information assets.


text: Our cybersecurity risk management is an important part of our comprehensive business continuity program and enterprise risk management. Our global information security team periodically engages with a cross-functional group of subject matter experts and leaders to assess and refine our cybersecurity risk posture and preparedness. For example, we regularly evaluate and update contingency strategies for our business in the event that a portion of our information resources were to be unavailable due to a cybersecurity incident. We practice our response to potential cybersecurity incidents through regular tabletop exercises, threat hunting and red team exercises.


text: The board of directors, as a whole, has oversight responsibility for our strategic and operational risks. The audit committee assists the board of directors with this responsibility by reviewing and discussing our risk assessment and risk management practices, including cybersecurity risks, with members of management. The audit committee, in turn, periodically reports on its review with the board of directors. Management is responsible for day-to-day assessment and management of cybersecurity risks and reports regularly to the audit committee.


text: Cybersecurity Risk Management and Strategy We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers, and violation of data privacy or security laws.

companyName: Toughbuilt Industries, Inc


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy, and compliance issues are identified and addressed through a multi-faceted approach including third-party assessments, internal IT Audits, IT security, governance, risk, and compliance reviews. To defend, detect, and respond to cybersecurity incidents, we, among other things: conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data policies, perform penetration testing using external third-party tools and techniques to test security controls, conduct employee training, monitor emerging laws and regulations related to data protection and information security (including our consumer products) and implement appropriate changes.


text: We have implemented incident response and breach management processes. In the event of an incident, the Cybersecurity team assesses, among other factors, safety impact, supply chain and manufacturing disruption, data and personal information loss, business operations disruption, projected cost, and potential for reputational harm, with support from external technical, legal and law enforcement support, as appropriate.


text: Security events and data incidents are evaluated, ranked by severity, and prioritized for response and remediation. Incidents are evaluated to determine materiality as well as operational, business, and privacy impact.


text: We occasionally engage third parties and consultants to assess our internal cybersecurity programs and compliance with applicable practices and standards.


text: Our risk management program also assesses third-party risks, and we perform third-party risk management to identify and mitigate risks from third parties such as vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers when handling and/or processing our employee, business, or customer data. In addition to new vendor onboarding, we perform risk management during third-party cybersecurity compromise incidents to identify and mitigate risks to us from third-party incidents.


text: Because we develop, process, store, and transmit large amounts of data, including confidential, classified, sensitive, proprietary, and business and personal information, failure to prevent or mitigate data loss, theft, misuse, unauthorized access, or other security breaches or vulnerabilities affecting our systems could: expose us or our customers to a risk of loss, disclosure, or misuse of such information; adversely affect our operating results; result in litigation, liability, or regulatory action (including under laws related to privacy, data use, data protection, data security, network security, and consumer protection); deter customers or sellers from using our products, and services; and otherwise harm our business and reputation. We use third-party technology and systems for a variety of reasons, including, without limitation, encryption and authentication technology, employee email, content delivery to customers, back-office support, and other functions. Although we have developed systems and processes that are designed to protect our data and prevent such incidents, including systems and processes designed to reduce the impact of a security breach at a third-party vendor or customer, such measures cannot provide absolute security and may fail to operate as intended or be circumvented.


text: Cybersecurity Governance Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management. Our Audit Committee is responsible for the oversight of risks from cybersecurity threats. Members of the Audit Committee receive updates every quarter from senior management, including leaders from our Information Security, Product Security, Compliance, and Legal teams regarding matters of cybersecurity. This includes existing and new cybersecurity risks, the status of how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any), and the status of key information security initiatives.


text: Our cybersecurity risk management and strategy processes are overseen by leaders from our Information Technology, Information Security, Product Security, Compliance, and Legal teams.


text: Such individuals have extensive prior work experience in various roles involving information technology, including security, auditing, compliance, systems, and programming. These individuals are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to the Audit Committee.


text: The Company acknowledges the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition, and reputation.


text: As a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team, or specific protocols to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan, or engaged with external cybersecurity consultants for assessments or services.


text: Given our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyber-attacks, data breaches, and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs, and negatively impact our reputation among customers and partners.


text: The Company is in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments, and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity, and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and the Company will continue to assess and update our cybersecurity measures in response to emerging threats.


text: For a discussion of potential cybersecurity risks affecting the Company, please refer to Item 1A - Risk Factors - Risks Related to IT in this report.


text: We are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk.

companyName: Eureka Acquisition Corp

ticker: EURK


text: We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our management is generally responsible for assessing and managing any cybersecurity threats. If and when any reportable cybersecurity incident arises, our management shall promptly report such matters to our board of directors for further actions, including regarding the appropriate disclosure, mitigation, or other response or actions that the board deems appropriate to take. As of the date of this report, we have not encountered any cybersecurity incidents since our IPO.


text: Risk Management and Strategy The Company has established processes to assess, identify, and manage risks from cybersecurity threats as part of our broader enterprise-wide risk management system and processes, which is overseen by our Board of Directors through our Audit Committee, along with our executive management.

companyName: Citius Pharmaceuticals, Inc.

ticker: CTXR


text: Our cybersecurity program focuses on all areas of our business, including cloud-based environments, devices used by employees and contractors, facilities, networks, applications, vendors, disaster recovery, business continuity and controls and safeguards enabled through business processes and tools. We continuously monitor for unauthorized access to our information technology systems and identify potential security threats through various automated detection solutions. To protect the security of our information infrastructure and protect our systems and information from unauthorized access, we draw on the knowledge and insights of an external information technology consultant who acts as our primary IT administrator and employ an array of third-party tools and technologies.


text: As of the date of this Annual Report, we have not encountered any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition. For more information on our cybersecurity related risks, see "Risk Factors - Risks Related to Our Business and Our Industry" included elsewhere in this Annual Report on Form 10-K.


text: The Board of Directors is responsible for overseeing our enterprise risk management program. The Audit Committee of the Board of Directors has been designated by the Board to oversee cybersecurity risks and our processes to identify, prioritize, assess, manage, and mitigate those risks. The Audit Committee receives updates on cybersecurity and information technology matters and related risk exposures from our Chief Financial Officer.


text: The Chief Financial Officer oversees the operation of our cybersecurity program and has 10 years of executive experience overseeing risk management and internal controls. The Chief Financial Officer is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through the Chief Financial Officer's oversight of the Company's information technology function and supervision of the Company's IT administrator.


companyName: CITIUS ONCOLOGY, INC.

ticker: CTOR


text: The Board of Directors is responsible for overseeing our enterprise risk management program. The Audit Committee of the Board of Directors has been designated by the Board to oversee cybersecurity risks and our processes to identify, prioritize, assess, manage, and mitigate those risks. The Audit Committee receives updates on cybersecurity and information technology matters and related risk exposures from our Chief Financial Officer ("CFO").


text: The CFO oversees the operation of our cybersecurity program and has 10 years of executive experience overseeing risk management and internal controls. The CFO is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through the CFO's oversight of the Company's information technology function and supervision of the Company's IT administrator.


text: To meet our business objectives, we rely on both internal information technology (IT) systems and networks, and those of third parties and their vendors, to process and store sensitive data, including confidential research, business plans, financial information, intellectual property, and personal data of ours and our customers that may be subject to legal protection, and promote the continuity of our Company's business operations.

companyName: NightFood Holdings, Inc.

ticker: NGTF


text: In the ordinary course of our business, we receive, process, use, store, and share digitally certain data, including user data as well as confidential, sensitive, proprietary, and personal information.


text: Maintaining the integrity and availability of our IT systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to our operations and business strategy. We plan to develop and implement information securities policies and incident response plans to evaluate, identify, and handle material risks associated with cybersecurity threats.


text: There can be no assurances that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or are effective in protecting our systems and information.


text: As of the date of this report, we are not aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, results of operations, or financial condition.


text: We recognize the importance of assessing, identifying, and managing risks from cybersecurity threats. Our approach to cybersecurity risk management is aligned with our risk profile and business. We follow a formal, documented process to assess the data protection practices of certain third-party vendors that handle sensitive information on our behalf.

companyName: Amesite Inc.

ticker: AMST


text: Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us or our business strategy, results of operations or financial condition, we could, from time to time, experience threats and security incidents relating to our and our third-party vendors' information systems. For more information, please see the section entitled "Risk Factors"


text: Our board of directors has oversight over cybersecurity risks. Our management provides periodic presentations to the board of directors on our cybersecurity program, including updates on cybersecurity risks and related cybersecurity strategy, as applicable. The management provides updates regarding our cybersecurity program to the board of directors when material.


text: While we have not experienced any material cybersecurity threats or incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents.


text: of September 30, 2024, we did not establish policies and processes for assessing, identifying, and managing material risk from cybersecurity have integrated the processes of assessing, identifying, and managing material risk from cybersecurity threats into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Zhuoxun Hongtu Inc.


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards, and regularly monitor the effectiveness of our safeguards. Our Vice President, Mr. Peng, is designated to manage the risk assessment and mitigation process.


text: may engage consultants and other third parties as needed in connection with our risk assessment policies and processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards.


text: require third-party service providers to certify their ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of their security measures that may affect the Company.


text: part of our overall risk management strategies, we also conduct cybersecurity trainings for personnel at all levels and in all departments.


text: of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Mr. Yi, as sole director of our Board of Directors, is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Mr. Peng, our Vice President, provides periodic briefings to Mr. Yi regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity policies and procedures, activities of third parties, and the like.


text: Peng has more two decades of experience working in IT and technology companies. Before assuming his current positions as chief product officer and VP of our Company, Mr. Peng served as General Manager of Beijing Xuri Yuanfan Technology Development Co., Ltd., an internet solution company, from July 2006 to June 2016. From September 2002 to June 2006, Mr. Peng served as manager of the technology department at Beijing Shidai Saibo Technology Development Co., Ltd., an IT solution company. Earlier in his career, Mr. Peng started at Beijing Jinhaihang Electronic Technology Co., Ltd., serving as a technical support engineer for the company's education software businesses, from March 2000 to August 2002. Therefore, Mr. Peng has intimate knowledge of IT and cybersecurity issues and our operations.


text: part of the executive team reporting to the Board, Mr. Peng oversees our cybersecurity policies and processes, including those described in "Risk Management" above. The processes by which Mr. Peng is informed of and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents include log review from IT and operations teams or reports received from network systems and applications if any unusual activity occurs, such as email system notification of items opened that could be malicious.


text: We operate in the medical devices sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. Both our executive management team and our board of directors are involved in the assessment, identification, and management of such risks, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: Dror Ortho-Design, Inc.

ticker: DROR


text: Our executive management team is responsible for day-to-day assessment, identification and management of material risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. The individuals currently serving in these roles are our Chief Executive Officer and Chief Technology Officer. The executive management team monitors current events in order to remain aware of current cybersecurity threats and is informed of cybersecurity incidents as they arise by our frontline personnel.


text: The executive management team is also responsible for overseeing and identifying risks from cybersecurity threats associated with our use of any third-party service providers.


text: Our board of directors is responsible for oversight of risks from cybersecurity threats in conjunction with our executive management team. Our board of directors receives updates from our management team with respect to risks from cybersecurity threats and are notified of any new significant cybersecurity threats or incidents as they arise. Additionally, our board of directors considers risks from cybersecurity threats as part of its overall assessment of risk management, including its general oversight of the Company's business strategy, risk management policies, and financials.


text: To date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our business strategy, results of operations or financial condition, and we are not aware of any cybersecurity incidents that are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. For further information regarding the risks associated with cybersecurity incidents, see "Risk Factors—Security breaches, data breaches, cyber-attacks, other cybersecurity incidents or the failure to comply with privacy, security and data protection laws could materially impact our operations, patient care could suffer, we could be liable for damages, and our business, operations and reputation could be harmed" in Item 1A of this Annual Report on Form 10 K.


text: Cybersecurity Risk Management and Strategy In the normal course of business, we may collect and store customer information, and certain sensitive company information, including proprietary and confidential business information.

companyName: NYIAX, INC.


text: To protect this information, our existing cybersecurity policies require continuous monitoring, network security measures, and encryption of data. We maintain various protections designed to safeguard against cyberattacks, including firewalls, key-based authentication, and virtual private networks. We protect against business interruption by backing up our major systems.


text: Our cybersecurity program is led by our CTO, alongside the CEO, and includes but is not limited to: IT security policies and practices, security risk assessment and mitigations, software vulnerability checks and updates, regular access certificate rotations - all designed to protect the privacy and security of the sensitive information and continuation of business.


text: Given the size of the company, we do not have a specific committee dedicated to cybersecurity oversight. Instead, all board members participate in the review and monitoring of these risks. The CTO and the CEO inform the board of directors on information security and cybersecurity matters as needed.


text: Despite the implementation of our cybersecurity program, our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences for the business. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security. None.


text: We are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates.

companyName: CN Healthy Food Tech Group Corp.

ticker: UCFI


text: Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.


text: Risk Management and Strategy Our Information Security team manages our Information Security Program, which is focused on assessing, identifying, and managing cyber risk and information security threats. We evaluate cybersecurity risk on an ongoing basis, and it is a risk monitored through our overall enterprise risk management program, including by the executive leadership and our Board of Directors (the "Board"), as described below under the sub-heading " Governance."

companyName: Jasper Therapeutics, Inc.

ticker: JSPR


text: To proactively manage cybersecurity risk in our organization, our management team has instituted an Information Technology Security Policy that is available to all employees through our Quality Management System. We also conduct regular cybersecurity awareness and training campaigns for existing employees. Stakeholders can access Jasper's Information Technology helpdesk 24/7 online or by phone, to report any security incidents for escalation.


text: To proactively identify, mitigate, and prepare for potential cybersecurity incidents, we maintain a cyber incident response plan with formalized workflows and playbooks. We conduct simulation exercises involving employees at various levels of the organization. We also periodically engage external partners to conduct annual audits of our systems and test our Information Technology infrastructure. Through these channels and others, we work to proactively identify potential vulnerabilities in our information security system. We recognize that we are exposed to cybersecurity threats associated with our use of third-party service providers. To minimize the risk and vulnerabilities to our own systems stemming from such use, our Information Security team identifies, and addresses known cybersecurity threats and incidents at third-party service providers on a continuous basis. In addition, we strive to minimize cybersecurity risks when we first select or renew a vendor by including cybersecurity risk as part of our overall vendor evaluation and due diligence process.


text: Our risks associated with cybersecurity threats are set forth under " Risk Factors " in Part I, Item 1A in this report. Except as set forth therein, risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition.


text: The Board, in coordination with the Audit Committee of the Board (the "Audit Committee"), oversees our risk management program, including the management of cybersecurity threats.


text: The Board and the Audit Committee each receive regular presentations and reports on developments in the cybersecurity space, including risk management practices, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends, and information security issues encountered by our peers and third parties. The Board and the Audit Committee also receive prompt and timely information regarding any cybersecurity risk that meets pre-established reporting thresholds, as well as ongoing updates regarding any such risk. On an annual basis, the Board and the Audit Committee discuss our approach to overseeing cybersecurity threats with our CFO and other members of senior management. Our CEO, CFO and other members of our senior management collectively have several decades of experience managing risk at our company or similar companies and assessing cybersecurity threats.


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.

companyName: SURGE COMPONENTS INC

ticker: SPRS


text: Key elements of our cybersecurity risk management program include but are not limited to, risk assessments designed to help identify material risks from cybersecurity threats to our critical systems, information, services, and our broader enterprise IT environment;


text: individuals, including employees and external third party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; a cybersecurity insurance policy in place to help mitigate monetary losses of a potential cybersecurity attack.


text: Our management team is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.


text: Members of our management team have prior work experience in supervising and implementing cybersecurity risk mitigation efforts in highly-regulated industries. Our internal cybersecurity personnel and retained external cybersecurity consultants also have a breadth of expertise across core cybersecurity disciplines including governance, risk, compliance, and security architecture.


text: Our management team takes steps to stay informed and monitors efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment Our Board considers cybersecurity risk as part of its risk oversight function and receives regular updates from the management team on our cybersecurity risks and in addition, management updates the Board where it deems appropriate, regarding any cybersecurity incidents it considers to be significant or potentially significant.


text: is responsible for overseeing the Company's risk management program and cybersecurity is a critical element of this program. Management is responsible for the day-to-day administration of the Company's risk management program and its cybersecurity policies, processes, and practices. The Company's cybersecurity policies, standards, processes, and practices are based on recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and other applicable industry standards and are fully integrated into the Company's overall risk management processes. In general, the Company seeks to address material cybersecurity threats through a company-wide approach that addresses the confidentiality, integrity, and availability of the Company's information systems or the information that the Company collects and stores, by assessing, identifying and managing cybersecurity issues as they occur.

companyName: Kayne Anderson BDC, Inc.

ticker: KBDC


text: Identification and Reporting: The Company has implemented a comprehensive, cross-functional approach to assessing, identifying and managing material cybersecurity threats and incidents. The Company's program includes controls and procedures to properly identify, classify and escalate certain cybersecurity incidents to provide management visibility and obtain direction from management as to the public disclosure and reporting of material incidents in a timely manner.


text: Technical Safeguards: The Company implements technical safeguards that are designed to protect the Company's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence, as well as assistance from third party experts where necessary.


text: Incident Response and Recovery Planning: The Company has established and maintains comprehensive incident response, business continuity, and disaster recovery plans designed to address the Company's response to a cybersecurity incident. The Company conducts regular tabletop exercises to test these plans and ensure personnel are familiar with their roles in a response scenario.


text: Third-Party Risk Management: The Company maintains a comprehensive, risk-based approach to identifying and overseeing material cybersecurity threats presented by third parties, including vendors, service providers, and other external users of the Company's systems, as well as the systems of third parties that could adversely impact our business in the event of a material cybersecurity incident affecting those third-party systems, including any outside consultants who advise on the Company's cybersecurity systems.


text: Education and Awareness: The Company provides regular, mandatory training for all levels of employees regarding cybersecurity threats as a means to equip the Company's employees with effective tools to address cybersecurity threats, and to communicate the Company's evolving information security policies, standards, processes, and practices.


text: The Company conducts periodic assessment and testing of the Company's policies, standards, processes, and practices in a manner intended to address cybersecurity threats and events.


text: This includes penetration testing of network infrastructure and phishing tests targeting the Adviser's employees. The results of such assessments and reviews are evaluated by management and reported to the Board, and the Company adjusts its cybersecurity policies, standards, processes, and practices as necessary based on the information provided by these assessments and reviews.


text: The Board, in coordination with the Adviser, oversees the Company's risk management program, including the management of cybersecurity threats. The Board receives regular updates and reports on developments in the cybersecurity space, including risk management practices, recent developments, vulnerability assessments, third-party and independent reviews, the threat environment, and information security issues encountered by the Company'. The Board also receives prompt and timely information regarding any cybersecurity risk that meets pre-established reporting thresholds, as well as ongoing updates regarding any such risk. On an annual basis, the Board and the Adviser discuss the Company's approach to overseeing cybersecurity threats.


text: The Adviser has established an internal working group that includes relevant representation from senior management including the CCO, CFO, and CISO, and CTO who work collaboratively to implement a program designed to protect the Company's information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents in accordance with the Company's incident response and recovery plans. Through ongoing communication with these teams, the CISO, CTO and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time, and report such threats and incidents to the Board when appropriate.


text: of the internal working group have multiple decades of experience in information security and risk management, including assessing cybersecurity threats. Furthermore, the CTO and CISO have educational backgrounds and hold professional experience and certifications relevant to management of cybersecurity.


text: Material Effects of Cybersecurity Incidents Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: Company's Board of Directors (the "Board") is responsible for overseeing the Company's risk management program and cybersecurity is a critical element of this program. Management is responsible for the day-to-day administration of the Company's risk management program and its cybersecurity policies, processes, and practices. The Company's cybersecurity policies, standards, processes, and practices are based on recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and other applicable industry standards and are fully integrated into the Company's overall risk management processes. In general, the Company seeks to address material cybersecurity threats through a company-wide approach that addresses the confidentiality, integrity, and availability of the Company's information systems or the information that the Company collects and stores, by assessing, identifying and managing cybersecurity issues as they occur.

companyName: Kayne DL 2021, Inc.


text: The Company has implemented a comprehensive, cross-functional approach to assessing, identifying and managing material cybersecurity threats and incidents. The Company's program includes controls and procedures to properly identify, classify and escalate certain cybersecurity incidents to provide management visibility and obtain direction from management as to the public disclosure and reporting of material incidents in a timely manner.


text: The Company implements technical safeguards that are designed to protect the Company's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence, as well as assistance from third party experts where necessary.


text: The Company provides regular, mandatory training for all levels of employees regarding cybersecurity threats as a means to equip the Company's employees with effective tools to address cybersecurity threats, and to communicate the Company's evolving information security policies, standards, processes, and practices.


text: Company conducts periodic assessment and testing of the Company's policies, standards, processes, and practices in a manner intended to address cybersecurity threats and events. This includes penetration testing of network infrastructure and phishing tests targeting the Adviser's employees. The results of such assessments and reviews are evaluated by management and reported to the Board, and the Company adjusts its cybersecurity policies, standards, processes, and practices as necessary based on the information provided by these assessments and reviews.


text: Board, in coordination with the Adviser, oversees the Company's risk management program, including the management of cybersecurity threats. The Board receives regular updates and reports on developments in the cybersecurity space, including risk management practices, recent developments, vulnerability assessments, third-party and independent reviews, the threat environment, and information security issues encountered by the Company'. The Board also receives prompt and timely information regarding any cybersecurity risk that meets pre-established reporting thresholds, as well as ongoing updates regarding any such risk. On an annual basis, the Board and the Adviser discuss the Company's approach to overseeing cybersecurity threats.


text: Adviser has established an internal working group that includes relevant representation from senior management including the CCO, CFO, and CISO, and CTO who work collaboratively to implement a program designed to protect the Company's information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents in accordance with the Company's incident response and recovery plans. Through ongoing communication with these teams, the CISO, CTO and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time, and report such threats and incidents to the Board when appropriate.


text: Effects of Cybersecurity Incidents from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: Company has a dedicated internal IT department with cybersecurity engineers who oversee various aspects of cybersecurity. These engineers specialize in different areas, including ensuring security during product development, particularly in the domains of cloud management platforms and network interactions, as well as managing cybersecurity for daily office communications.

companyName: RICHTECH ROBOTICS INC.

ticker: RR


text: the event of an unexpected cybersecurity incident, the engineers immediately report to the Company's management. They are equipped with pre-established response plans to address such situations effectively and mitigate potential risks.


text: our cybersecurity risk management relies primarily on internal resources. However, as the Company continues to expand, we anticipate engaging third-party consultants to assist in enhancing our cybersecurity management processes and addressing evolving threats.


text: we do not currently have third-party collaborations, the Company plans to implement a process for selecting and evaluating third-party service providers in the future. This will include comparing services, signing security agreements, and having our internal engineers assess the third parties' achievement of security objectives.


text: the past three years, our Company has not experienced any material cybersecurity risks. To ensure robust protection against potential threats, we have implemented the following security measures: Regularly updating and changing critical passwords. modifying communication interfaces to enhance security. development tasks in a modular fashion to minimize exposure. dual-factor authentication for system access. tiered authorization levels for critical network operations. routine security training and awareness programs for employees.


text: the Company's board of directors does not oversee cybersecurity risks directly. However, plans are in place to introduce such oversight in the future. The Audit Committee of the Board will assume responsibility for cybersecurity risk oversight, with a plan to review cybersecurity matters on a quarterly basis. This initiative will ensure that the Company maintains robust oversight mechanisms to address evolving cybersecurity threats effectively.


text: responsibility for assessing and managing cybersecurity risks within the Company lies with the managers of the R&D department and the IT department. Both individuals possess relevant expertise in their respective fields, ensuring a high level of competence in identifying and mitigating cybersecurity risks. Their duties include monitoring potential threats, implementing security protocols, and responding the event of cybersecurity incidents or abnormal alerts, the relevant department managers immediately intervene and manage the situation.


text: All logs and records related to such events are preserved for future analysis. Cybersecurity testing is incorporated into every stage of product development, ensuring that vulnerabilities are identified and addressed proactively. Additionally, server security patches are regularly updated to mitigate potential threats.


text: The underlying processes and controls of our cyber risk management program incorporate recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF"). We have an annual assessment performed by a third-party specialist of the Company's cyber risk management program against the NIST CSF. The annual risk assessment identifies, quantifies, and categorizes material cyber risks. In addition, the Company, in conjunction with the third-party cyber risk management specialists develop a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the annual assessment process.

companyName: ADIAL PHARMACEUTICALS, INC.

ticker: ADIL