text: In the last two fiscal years, the Company has not experienced any material cybersecurity incidents. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors - "Cybersecurity Breaches and other Disruptions to our Information Technology Systems", which is incorporated by reference into this Item 1C.


text: The Board regularly receives reports from our executive officers and third parties on cybersecurity matters. In addition, the Board receives reports addressing cybersecurity as part of our overall enterprise risk management program and to the extent cybersecurity matters are addressed in regular business updates.

companyName: Marvion Inc.

ticker: MVNC

secItem: Item 1C


text: Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. These individuals' expertise in IT and cybersecurity generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. They are informed by their respective cybersecurity teams about, and monitor, the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above.


text: Cybersecurity incident" means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through our information systems that jeopardizes the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: IIOT-OXYS, Inc.

ticker: ITOX


text: Cybersecurity threat" means any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: Information systems" means electronic information resources, owned or used by us, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of our information to maintain or support our operations.


text: Risk Management and Strategy Our website is monitored by a third party to check if our website is secure. We are prepared to inform all parties necessary if any breach of cyber-security were to happen. We have never had this problem and so we have never had to inform consultants, auditors, or other third parties.

stage1Category: Risk Management Process

stage1Method: unanimous


text: We have never had a breach of cyber-security at any point in our past. The risk to us of cybersecurity threats is in data storage of customer questions and emails. A breach of customers' data could negatively materially affect our public trust and could result in loss of customers and revenue.

stage1Category: Strategy Integration


text: Our board of directors has no specific processes for monitoring cybersecurity within the Company. There is no subcommittee specifically for monitoring cybersecurity in the company.


text: Our management monitors our websites and online accounts frequently to manage risks associated with cyber-security risks. Our management communicates with our board on matters of cybersecurity but, has not had to inform them of any breaches thus far.


text: Risk Management and Cybersecurity We are committed to robust cybersecurity measures to protect our data and systems. Our policies include regular risk assessments, employee training, and incident response plans. The board oversees our cybersecurity strategy, ensuring appropriate risk mitigation. Technical controls like firewalls and encryption safeguard our information, while continuous monitoring allows prompt incident response. In case of a cybersecurity incident, we have established procedures for reporting, investigating, and mitigating impacts, with timely disclosure to stakeholders.

companyName: LEGEND SPICES, INC.


text: We use, store, and process limited data related to our operations. As of the date of this filing, we have not yet implemented a formal cybersecurity risk management program designed to identify, assess, and mitigate risks from cybersecurity threats. We intend to implement a cybersecurity risk management program as our business operations and technology infrastructure evolve.

companyName: Natics Corp.

ticker: NTCS


text: Cyber Risk Management and Strategy We plan to implement and maintain a cybersecurity risk management program under the oversight of our Board of Directors. Once implemented, this program will include systematic processes for identifying, assessing, and mitigating cybersecurity risks and will be integrated into our overall risk management processes. We intend to adopt a risk-based approach to managing cyber threats, supported by commonly used cybersecurity technologies, such as cloud-based monitoring and threat detection tools.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing.


text: As part of this effort, we also intend to implement controls to assess and manage risks associated with third-party service providers who may have access to our systems or data. This may include review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.

stage1Category: Third-Party Risk


text: We expect to regularly evaluate and enhance our cybersecurity policies and procedures in response to emerging threats or developments affecting our industry.

stage1Method: majority


text: In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: risk management is an important part of the Company's overall risk management efforts. We maintain a comprehensive enterprise-wide information security program that comprises policies and controls designed to identify, safeguard against, detect, respond to, mitigate and manage reasonably foreseeable cybersecurity risks and threats. Our approach utilizes diverse security tools to prevent, identify, investigate, resolve and recover from vulnerabilities and security incidents. These include, but are not limited to, internal reporting, monitoring and detection tools. We use a collaborative, enterprise-wide strategy to address cybersecurity risks and allocate significant resources to our cybersecurity and risk management processes, which efforts are intended to adapt to the evolving cybersecurity landscape and promptly address emerging threats. Our cybersecurity risk management program aligns with the National Institute of Standards and Technology (NIST) framework and is organized into five key functions: identification, protection, detection, response and recovery. We regularly assess the threat landscape and employ a layered cybersecurity strategy to prevent, detect and mitigate threats.

companyName: Dalrada Technology Group, Inc.

ticker: DHTI


text: We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our security controls include: Network


text: traffic monitoring and filtering of Sentinelone to protect against phishing attacks hardening hardening barriers to hardware access of on prem hardware firewall in order to keep less secure hardware such as printers and scanners on their own VLAN to minimize attack vectors Board


text: of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters. The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities. Any significant cybersecurity matters, including those related to incidents, are escalated to the Board of Directors.

stage1Category: Board Governance


text: We face cybersecurity threats in the ordinary course of our business and have faced cybersecurity threats and breach attempts in the past. Such threats and breach attempts have not materially affected our business, strategy, results of operations or financial condition. At any given time, however, we may face known or unknown cybersecurity risks and threats that cannot be fully prevented or mitigated, and we may discover vulnerabilities in our cybersecurity programs. Therefore, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: Risk Management and Strategy We identify and address cybersecurity threats and risks related to our business with an approach that includes assessments by our management and use of an outside consultant to manage our information technology. In addition, we rely on operating systems and software from established and reliable third-party service providers to provide security. We have employee policies in place designed to reduce risk of cyber-attacks and educate employees on protocol in the event of a potential cybersecurity incident.

companyName: Sonoma Pharmaceuticals, Inc.

ticker: SNOA


text: Currently we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations or financial condition or are reasonably likely to have such a material effect. However, cyber-attacks are increasing in frequency, sophistication and intensity, and despite our ongoing efforts we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. Please refer to "Risk Factors" in Part I, Item 1A of this Governance


text: The Board of Directors takes an active role, as a whole, in overseeing management regarding our Company's risks, including cybersecurity risks. Our management, including our Chief Executive Officer and our Chief Financial Officer, keeps the Board of Directors apprised of significant risks facing our Company and the approach being taken to understand, manage, and mitigate such risks, including with respect to potential cybersecurity threats.


text: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, information related to our clinical trials, and information of our employees, or Information Systems and Data.

companyName: AETHLON MEDICAL INC

ticker: AEMD


text: The Company's Chief Financial Officer, with assistance from our third-party cybersecurity vendors, is responsible for identifying, assessing, and managing our cybersecurity threats and risks. Together, they identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example, automated tools, evaluating our and our industry's risk profile, conducting real-time monitoring of certain systems, and implementing escalation protocols with our third-party cybersecurity vendors.

stage1Category: Management Role


text: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: an incident response plan; incident detection and response tools; encryption of certain sensitive data and certain data on mobile systems; certain access controls enforcing the principle of need-to-know encryption of certain sensitive data and certain data on mobile systems; physical security measures; asset management, tracking and disposal; monitoring of certain systems; and employee training.


text: Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, cybersecurity risk is addressed through our quality management system and processes and overseen by our audit committee of the board of directors. We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including, for example, professional services firms, including legal counsel and certain cybersecurity service providers.


text: use third-party service providers to perform a variety of functions throughout our business, such as hosting companies and contract research organizations. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program includes conducting a risk assessment for certain vendors.


text: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including " If our information technology systems, or those of third parties with whom we work, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to: regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences. "


text: Our board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The board of directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the Chief Executive Officer, and Chief Financial Officer.


text: The CFO is responsible for hiring appropriate personnel (including selecting third-party cybersecurity vendors), helping to integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities to relevant personnel. The CFO is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including CFO/CEO. The CFO/CEO work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to the audit committee of the board of directors for certain cybersecurity incidents.


text: The audit committee receives periodic reports from the CFO concerning our significant cybersecurity threats and risk and the processes we have implemented to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.


text: the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect our clients, customers, employees, and vendor information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: Stemtech Corp

ticker: STEK


text: cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats.


text: & COO and CEO are responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside consulting firm to monitor activity and advise the company of cybersecurity protocols.


text: undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including an annual risk review, policy reviews and revisions. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a cybersecurity incident by the administering of local and cloud based back up of files. and emails.


text: We engaged and used the advice of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers have recommended periodic evaluations of the work stations.


text: FMA/2FA, this is our first AND most important first line of defense, no one should have MFA bypassed or disabled, with no exceptions.


text: Email Banner for external emails. This banner assists us to identify any phishing / impersonation email and cannot be bypassed.


text: Conditional Access Policy (CAP): Rejects connections to Exchange Online from un-authorized countries. We are further enhancing this control by implementing ACL's (access lists) in our CRM and ERP systems and any other mission critical platform. ALL platforms should have MFA enforced, any platform not supporting MFA in 2024 is deemed high-risk and immediately replaced as it is obsolete and poses high-risk to the Company.


text: date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation and cause existing Independent Business Partners (IBPs or distributors) / customers to discontinue, as well as prevent us from attracting new clients / customers. and / or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.


text: In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.

companyName: Orion Bliss Corp.

ticker: ORIB


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: King Resources, Inc.

ticker: KRFG


text: Our cybersecurity risk management program is aligned to the Company's business strategy. It shares common methodologies, reporting channels and governance processes that apply to the other areas of enterprise risk, including legal, compliance, strategic, operational, and financial risk. Key elements of our cybersecurity risk management program include: risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise information technology environment; a security team principally responsible for managing our cybersecurity risk assessment processes and our response to cybersecurity incidents;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security procedures;


text: training and awareness programs for team members that include periodic and ongoing assessments to drive adoption and awareness of cybersecurity processes and procedures;


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and a third-party risk management process for service providers, suppliers, and vendors.


text: In the last two fiscal years, the Company has not experienced any material cybersecurity incidents. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors - "Cybersecurity Breaches and other Disruptions to our Information Technology Systems", which is incorporated by reference into this Item 1C.


text: The Board regularly receives reports from our executive officers and third parties on cybersecurity matters. In addition, the Board receives reports addressing cybersecurity as part of our overall enterprise risk management program and to the extent cybersecurity matters are addressed in regular business updates.


text: Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. These individuals' expertise in IT and cybersecurity generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. They are informed by their respective cybersecurity teams about, and monitor, the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above.


text: Risk Management and Strategy We acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: VitaNova Life Sciences Corp

ticker: VNOV

stage1Category: None/Other


text: As a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.


text: Third-party cyber readiness assessments are conducted on a recurring basis and third-party tools are utilized to identify potential vulnerabilities. In addition to the third-party cybersecurity framework referenced above, regular cyber security reviews are conducted with internal audit.

companyName: Playa Hotels & Resorts N.V.


text: Given our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.


text: We are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: In addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.


text: Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats.


text: We recognize the critical importance of maintaining the trust and confidence of business partners and employees toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. Our Board is actively involved in oversight of our risk management activities, and cybersecurity represents an important element of our overall approach to risk management. In general, we seek to address cybersecurity risks by utilizing reputable third party vendors and service providers to manage and maintain our information systems and assets in accordance with strong cybersecurity policies, standards, processes and practices, and by preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: PharmaCyte Biotech, Inc.

ticker: PMCB


text: We consider risks from cybersecurity threats alongside other company risks as part of our overall risk assessment process. We face risks related to cybersecurity such as unauthorized access, cybersecurity attacks and other security incidents, including as perpetrated by hackers and unintentional damage or disruption to hardware and software systems, loss of data, and misappropriation of confidential information. To identify and assess material risks from cybersecurity threats, we maintain policies to ensure our systems are effective and prepared for information security risks. For example, our PharmaCyte Information Security Policy, which applies to all employees, contractors and third parties granted access to our systems and provides guidelines for maintaining information security, including safeguarding personal and company-issued digital devices, learning to detect phishing and other attacks, restricting data transfer, and ensuring the judicious use of the internet and social media. We also maintain a more general Risk Management Strategy that sets forth our procedures for identifying, assessing, responding to, monitoring, and reporting risks, including any cyber-related risks.


text: Our approach to addressing cybersecurity threat risks also includes mitigating risk associated with our use of third-party service providers. For example, when we enter into contracts with third-party collaborators or vendors pursuant to which sensitive business or personal data will be shared or accessible, we include provisions safeguarding the protection of confidential information. We also utilize a third-party service provider to maintain our information systems and assets and to employ technical safeguards that are designed to protect our information systems from cybersecurity threats.


text: Our incident response plan coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable legal obligations and mitigate damage to our business and reputation. We maintain an Information Security Incident Response form that directs a detector of any incident to report such incident to our Information Security Officer, whom we contract through a third-party service provider. Following notice of any such incident, our Information Security Officer would then work with our Chief Financial Officer and our Board to establish an appropriate response plan and to determine the materiality of the incident and any disclosure obligations.


text: As discussed in more detail under "Cybersecurity Governance" below, our Board provides oversight of our risk management and strategy processes.


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading "We may be unable to adequately protect our information systems from cyberattacks, which could result in the disclosure of confidential or proprietary information, including personal data, damage our reputation, and subject us to significant financial and legal exposure," which disclosures are incorporated by reference herein.


text: Cybersecurity Governance; Management Cybersecurity is part of our overall risk management processes. In general, our Board oversees risk management activities designed and implemented by our management, and considers specific risks, including, for example, risks associated with our strategic plan, business operations, and capital structure. Any cybersecurity incident that occurs would be brought to the immediate attention of the Board.


text: Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by a contracted third-party Information Security Officer. Such individual has over 25 years of experience in information technology, including over 14 years of experience in cybersecurity, and has a master's degree in cybersecurity. Our Information Security Officer is informed about and monitors our cybersecurity risk through his participation in the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan.


text: Inc. has implemented basic but targeted cybersecurity risk management measures appropriate for its early-stage operations and limited digital footprint. As a digital marketplace operating in a primarily cloud-based environment, the Company's exposure to cybersecurity threats is continuously monitored by executive management.

companyName: Mercalot Inc.


text: The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage. These vendors maintain their own cybersecurity programs, which include network protection, access controls, and incident response procedures. While Mercalot Inc. does not yet employ a dedicated IT security team, its directors are actively involved in overseeing operational and technological risk, including cybersecurity.


text: Executive management, consisting of the Chief Executive Officer and the Board, is responsible for identifying, evaluating, and responding to potential cyber risks. The Company periodically reviews its internal systems and third-party vendor protocols to assess vulnerabilities and ensure secure handling of sensitive business information.


text: To date, Mercalot Inc. has not experienced any material cybersecurity incidents, and no specific threat has materially affected or is reasonably likely to materially affect the Company's business strategy, operations, or financial condition. However, the Company recognizes that its reliance on cloud infrastructure and digital communication tools poses an ongoing cybersecurity risk and will continue to assess and strengthen controls as operations scale. Management plans to formalize its cybersecurity policies and implement internal training protocols as the business grows.


text: any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: Risk Management and Strategy We maintain a technology and cybersecurity program, which includes information security, as part of our overall risk management process with the aim that our information systems, including those of our vendors and other third-parties, will be resilient, effective, and capable of safeguarding against emerging risks and cybersecurity threats. A key element of our technology and cybersecurity program strategy is fostering training and awareness for our employees.

companyName: Cardiff Lexington Corp

ticker: CDIX


text: Our technology and cybersecurity program focuses on the defense, rapid detection and rapid remediation of cybersecurity threats and incidents. Our program also includes cybersecurity policies and a crisis response and management plan that is intended to allow rapid management and response and appropriate communication of cybersecurity threats and incidents.


text: Our cybersecurity crisis management plan sets forth the items, procedures, and actions we expect to address and follow in the event of a cybersecurity incident, including detection, response, mitigation and remediation. When a potential threat or incident is identified, our cyber security incident response team will assign a risk level classification and initiate the escalation and other steps called for by our plan. All incidents that are initially assessed by the cybersecurity incident response team as potentially high-risk are escalated promptly to our Chief Executive Officer, who will determine whether and what elements of our cybersecurity crisis response and management plan should be activated, including escalation to other senior management. Our Chief Executive Officer will inform our board of directors of cybersecurity incidents, as appropriate, considering a variety of factors, including financial, operational, legal, or reputational impact.


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: We are committed to appropriate cybersecurity governance and oversight. Our board of directors oversees management's processes for identifying and mitigating risks, including cybersecurity and information security risks. Our audit committee oversees risks related to cybersecurity and reports to the full board regarding its activities, including those related to cybersecurity.


text: Our board of directors meets regularly with our executive management and receives updates on the status and overall effectiveness of our technology and cybersecurity program, relevant information technology operations, any changes in material cybersecurity risks and any significant cybersecurity incidents consistent with our technology and cybersecurity program. The board also discusses with executive management the steps management has taken to monitor and mitigate privacy, data security, and cybersecurity risk exposures, our information governance policies and programs, and major legislative and regulatory developments that could materially impact our exposure regarding privacy, data security risk, and cybersecurity. The board of directors considers cybersecurity as part of our business strategy, financial planning, and capital allocation.


text: For additional information on our cybersecurity risks, please see Item 1A " Risk Factors—Risks Related to Our Business and Structure—A cyber security incident could cause a violation of HIPAA, breach of member privacy, or other negative impacts."


text: Cybersecurity Risk Management, Strategy, and Governance The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. The Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that the Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.

companyName: Palisades Venture Inc.


text: During the year ended December 31, 2024, we did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.


text: Risk Management and Strategy We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: LANTRONIX INC

ticker: LTRX


text: We leverage guidance from the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"), which provides an outline of enterprise security processes and controls, to inform the design and assessment of our cybersecurity risk management program. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.


text: As part of our risk management process, we may engage third-party experts to help identify and assess risks from cybersecurity threats. Our risk management process also encompasses cybersecurity risks associated with our use of third-party service providers.


text: Our cybersecurity risk management program includes: risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services and our broader IT environment; evaluations of our readiness to assess, respond and, as applicable, recover from potential cybersecurity incidents;


text: periodic tabletop exercises to simulate a response to a cybersecurity incident and use the findings to improve our processes, technologies and incident response plan;


text: the use of external service providers, where appropriate, to assess, test, or otherwise assist with the aspects of our security controls;


text: cybersecurity training to educate our employees, consultants and other users about their individual responsibilities regarding our IT systems and data; weekly briefings on cybersecurity incidents, threats, and related matters;


text: a third-party risk management process for service providers, suppliers and vendors who have access to our critical systems and information; and cybersecurity risk insurance that provides protection against certain potential costs and losses arising from a cybersecurity incident.


text: As of the date of this report, we do not believe that known risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, we can give no assurance that we have detected or protected against all such cybersecurity incidents or threats or that we will not experience such an incident in the future. Further details about the cybersecurity risks we face are described under the heading " Risks Related to Technology, Cybersecurity and Intellectual Property, " included as part of our risk factor disclosures in Part I,


text: We have not experienced a cybersecurity incident that had a material impact on our business strategy, results of operations, or financial condition. We continue to monitor potential cybersecurity threats and incorporate findings into our risk management strategies.

companyName: Zeo ScientifiX, Inc.

ticker: ZEOX


text: The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage. These vendors maintain their own cybersecurity programs, which include network protection, access controls, and incident response procedures. While Londax Corp. does not yet employ a dedicated IT security team, its directors are actively involved in overseeing operational and technological risk, including cybersecurity.

companyName: Londax Corp.

ticker: LDXC


text: Executive management, consisting of the Chief Executive Officer and the Board, is responsible for identifying, evaluating, and responding to potential cyber risks. The Company periodically reviews its internal systems and third-party vendor protocols to assess vulnerabilities and ensure secure handling of sensitive business information.


text: To date, Londax Corp. has not experienced any material cybersecurity incidents, and no specific threat has materially affected or is reasonably likely to materially affect the Company's business strategy, operations, or financial condition. However, the Company recognizes that its reliance on cloud infrastructure and digital communication tools poses an ongoing cybersecurity risk and will continue to assess and strengthen controls as operations scale. Management plans to formalize its cybersecurity policies and implement internal training protocols as the business grows.


text: As of May 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: The Company has implemented processes designed to identify, assess, and manage material risks from cybersecurity threats. These include system monitoring, vulnerability assessments, employee training, and incident response planning. The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage, and these vendors maintain their own cybersecurity programs, including network protection, access controls, and incident response procedures.

companyName: DeltaSoft Corp


text: Our Board of Directors oversees cybersecurity risk as part of its overall risk management responsibilities, and management provides periodic updates on cybersecurity matters. The Company has adopted an incident response plan to ensure timely detection, containment, and remediation of potential threats. During the fiscal year ended March 31, 2025, the Company did not experience any material cybersecurity incidents.


text: Information Technology are committed to using technology to improve our competitive position. We depend on a variety of information systems and technologies (including cloud technologies) to manage the operations of our growing customer base. Our core business systems consist mostly of purchased and licensed software programs that integrate together and with our web-based radio automation systems.

companyName: Transglobal Management Group, Inc.

ticker: TMGI


text: manage data security and privacy at the highest levels. Our Chief Executive Officer (CEO) is actively engaged in oversight of cybersecurity and IT infrastructure and works with outsourced vendors to manage all network operations. Our vendors keep our CEO informed on cybersecurity and privacy matters throughout the year. We have strengthened our data protection capabilities through investments in our infrastructure hardware and software. During the fiscal year ended May 31, 2025, the Company did no t experience any material cybersecurity incidents.


text: did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.

companyName: Neolara Corp.


text: We are an early-stage company with limited operations, yet we recognize that we are subject to various cybersecurity risks that could adversely affect our business. Cyberattacks on companies around the world continue to increase, which cause operational failures, compromised sensitive corporate or customer data, and/or result in significant financial damages. These attacks occur over the internet, through malware, viruses or attachments to e-mails, or through inside actors with access to systems within the organization.

companyName: GenFlat Holdings, Inc.

ticker: GFLT


text: Risk Management and Strategy As part of our overall risk management, we focus on a comprehensive approach to identifying, preventing and mitigating cybersecurity threats and incidents. We deploy technical safeguards that are designed to protect our Company's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which we evaluate and improve on a periodic basis.


text: The manner in which we store and/or transmit sensitive data in connection with our research and development and our day-to-day operations. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees and violation of data privacy or security laws.

companyName: Cavitation Technologies, Inc.

ticker: CVAT


text: Our Chief Executive officer is the sole member of our Board of Directors, and he is responsible for oversight of cybersecurity risk. Our Chief Executive Officer, along with our President is responsible for the ongoing managing and assessing of our cybersecurity practices and reporting on such practices and risks. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Board of Directors and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken. We believe we are appropriately staffed (as supported by IT consultants and service providers, as needed) to support a healthy cybersecurity posture given our Company's size and scope.


text: To date, there have been no risks identified from cybersecurity threats or previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect our Company. However, despite all of the above aforementioned efforts, a cyberattack, if it occurred, could cause system operational problems, compromise important data or systems or result in an unintended release of confidential information. See "Item 1A. Risk Factors" for additional discussion of cybersecurity risks impacting our Company.


text: Cybersecurity risk management is an integral part of our overall enterprise risk management program. The Company manages cybersecurity and data protection through a continuously evolving program. Our cybersecurity risk management program is designed to provide a framework for assessing, identifying and managing cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers, and to facilitate coordination across different departments of our Company. Our processes include steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat, including whether the cybersecurity threat is associated with a third-party service provider, and implementing cybersecurity countermeasures and mitigation strategies and informing management and the board of directors of material cybersecurity threats and incidents.

companyName: FRANKLIN WIRELESS CORP

ticker: FKWL


text: The Board of Directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage and mitigate those risks. The Audit Committee of the Board of Directors (the "Audit Committee") has been designated to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our management.


text: The Board of Directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects. While none of our directors has formal professional certifications in cybersecurity, several members of the Board have experience overseeing information technology and enterprise risk management in prior executive or board roles. The Board receives periodic updates on cybersecurity matters as part of its overall risk oversight responsibilities. Day-to-day responsibility for identifying and managing cybersecurity risks rests with our Director of IT Security & Future Solutions and his information security team. The team is responsible for monitoring our networks, systems, and data, implementing technical safeguards, conducting employee training, and coordinating incident response procedures.


text: Management provides regular reports to the Audit Committee, generally on an annual basis, or more frequently as needed covering: the Company's cybersecurity strategy and policies, recent threat environment developments, and any cybersecurity incidents and responses.


text: In addition, in the event of a significant cybersecurity incident, the Chief Operating Officer will promptly inform the Chief Executive Officer and General Counsel, who in turn will notify the Chair of the Audit Committee and the Board as appropriate.


text: Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects. We ordinarily do not engage assessors, consultants, auditors or other third parties in connection with such oversight.


text: As of June 30, 2025, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon.


text: Our CISO has over 23 years of information technology experience. He has held technology positions across various areas — including infrastructure management, application management, architecture, operations, and cybersecurity — and brings expertise from Farmers Insurance and Zurich Insurance.

companyName: Vistra Corp.

ticker: VST


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified through review by our internal information technology governance, risk and compliance policies. To defend, detect and respond to cybersecurity incidents, we, among other things: may conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes.


text: Our risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from our vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party risks when handling and/or processing our employee, business or customer data.


text: Risk Management and Strategy As a company selling products, including those for defense applications, we may be the target of cyber-attacks from a variety of threat actors. Cybersecurity threats include attacks on, or other attempts to infiltrate, our information technology (IT) infrastructure and the IT infrastructure of our customers, suppliers, subcontractors and other third parties, attempting to gain unauthorized access to our confidential or other proprietary information, classified information, or information relating to our employees, customers, and other third parties, or to disrupt our systems or the systems of our customers, suppliers, subcontractors, and other third parties. Cybersecurity threats also include attempts to infiltrate our products or services, including attacks targeting the security, confidentiality, integrity and/or availability of the hardware, software and information installed, stored or transmitted in our products, including after the purchase of those products and when they are incorporated into third-party products, facilities, or infrastructure. Our Cybersecurity Program.

companyName: PRECISION OPTICS CORPORATION, INC.

ticker: POCI


text: Our products and services are normally classified as EAR 99 by the U.S. government, but our defense customers generally require compliance with the International Traffic in Arms Regulation ("ITAR"). Moreover, our products sold for defense applications are integrated with our customers' products and these customers may provide us with Controlled Unclassified Information (CUI) that requires, safeguarding and dissemination controls in accordance with laws, regulations, or Government-wide policies. Given the nature of our business and the cybersecurity risks we face, we have instituted cybersecurity measures for identifying, assessing, and managing cybersecurity risks, which include material risks from cybersecurity threats to our internal systems, our products, services and programs for customers, and our supply chain.


text: The goals of our enterprise cybersecurity program align with the National Institute of Standards and Technology (NIST) standards, among others. The program includes processes and controls for the deployment of new IT systems by the Company and controls over new and existing system operations. We, or contracted third parties, monitor and conduct regular testing of these controls and systems, including vulnerability management through active discovery and testing to regularly assess patching and configuration status. In addition, we require our employees to complete data security training, and we regularly conduct simulated phishing and cyber-related communications. Incident Response.


text: Our cybersecurity program includes monitoring for potential security threats that may lead to vulnerabilities. We evaluate and assign severity levels to incidents, escalate and engage an incident response team based on severity, and manage and mitigate the related risks. Incidents are reported internally to members of senior management and/or the Board of Directors as appropriate based on severity and incident type and are also analyzed for external reporting requirements. Our incident response process is also designed to coordinate functions to enable continuity of essential business operation in the event of a cyber crisis. Third Party Service Providers.


text: We engage third party service providers to expand the capabilities and capacity of our cybersecurity program, including for design, monitoring and testing of the program's risk prevention and protection measures, and process execution including incident detection, investigation, analysis and response, eradication, and recovery.


text: Our Chief Financial Officer and Vice President of Engineering meet regularly with third party service providers to review their performance and progress towards our cybersecurity initiatives. Program Assessment.


text: We continuously evaluate and seek to improve and mature our cybersecurity processes against government standards. Our cybersecurity program is regularly assessed through management self-evaluation and ongoing monitoring procedures to evaluate our program effectiveness, including assessments associated with internal controls over financial reporting as well as vulnerability management through active discovery and testing to validate patching and configuration. As cybersecurity threats are continuously evolving, we also periodically engage with third parties to perform maturity assessments of our program to identify potential risk areas and improvement opportunities. This includes assessment of our overall program, policies and processes, compliance with regulatory requirements and an overall assessment of key vulnerabilities. We use these assessments to supplement our own evaluation of the overall health of our program and target improvement areas.


text: Board Oversight and Management's Role Our Board of Directors has primary oversight responsibility for enterprise cybersecurity risks. The Audit Committee also considers enterprise cybersecurity risks in connection with its financial and compliance risk oversight role. The Chief Financial Officer regularly reports to the Board of Directors on the status of the Company's cybersecurity program and provides the Board with the annual assessment by a third party on the Company's cybersecurity program.


text: Risk management and strategy Cybersecurity risk management is an important part of the Company's overall risk management efforts. We maintain a comprehensive enterprise-wide information security program that comprises policies and controls designed to identify, safeguard against, detect, respond to, mitigate and manage reasonably foreseeable cybersecurity risks and threats. Our approach utilizes diverse security tools to prevent, identify, investigate, resolve and recover from vulnerabilities and security incidents. These include, but are not limited to, internal reporting, monitoring and detection tools. We use a collaborative, enterprise-wide strategy to address cybersecurity risks and allocate significant resources to our cybersecurity and risk management processes, which efforts are intended to adapt to the evolving cybersecurity landscape and promptly address emerging threats.

companyName: Dalrada Technology Group, Inc.

ticker: DHTI


text: Our cybersecurity risk management program aligns with the National Institute of Standards and Technology (NIST) framework and is organized into five key functions: identification, protection, detection, response and recovery. We regularly assess the threat landscape and employ a layered cybersecurity strategy to prevent, detect and mitigate threats.


text: We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our security controls include: Network traffic monitoring and filtering Usage of Sentinelone Proofpoint to protect against phishing attacks OS/Hardware hardening OS/Software hardening Physical barriers to hardware access


text: Usage of on prem hardware firewall VLANs in order to keep less secure hardware such as printers and scanners on their own VLAN to minimize attack vectors Our Board of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters. The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities. Any significant cybersecurity matters, including those related to incidents, are escalated to the Board of Directors.


text: We face cybersecurity threats in the ordinary course of our business and have faced cybersecurity threats and breach attempts in the past. Such threats and breach attempts have not materially affected our business, strategy, results of operations or financial condition. At any given time, however, we may face known or unknown cybersecurity risks and threats that cannot be fully prevented or mitigated, and we may discover vulnerabilities in our cybersecurity programs. Therefore, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: Cybersecurity: Risk Management and Strategy We have developed and implemented a cybersecurity risk management program that is designed to protect the confidentiality, integrity, and availability of the Company's data and systems. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Tianci International, Inc.

ticker: CIIT


text: Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.


text: A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;


text: A security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;


text: The use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;


text: Cybersecurity awareness training of our employees, incident response personnel, and senior management; and A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: Additionally, the Company assesses and manages cybersecurity threats associated with its third party service providers' information technology systems that could compromise the Company's information security or data. Identified cybersecurity threats are communicated to management for review, response and mitigation as appropriate.


text: As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Cybersecurity: Governance Our Board of Directors considers cybersecurity risk within the Board's risk oversight function. The board of directors has charged management with responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system controls and security. The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management program.


text: Our Corporate Controller reviews the efficacy of our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the Company's financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls, including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment of the Company's internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company's internal controls. Copies of the Corporate Controller's report are also given to the CEO/CFO and made available to members of the Board of Directors. Copies of the auditor's report are delivered to the members of the Board of Directors, which reviews and is responsible to cause a remediation of any material inadequacies in the controls environment.


text: Our Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding the Company's cybersecurity program.


text: Cybersecurity risk management is an integral part of our overall enterprise risk management program. The Company manages cybersecurity and data protection through a continuously evolving program. Our cybersecurity risk management program is designed to provide a framework for assessing, identifying and managing cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers, and to facilitate coordination across different departments of our Company. Our processes include steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat, including whether the cybersecurity threat is associated with a third-party service provider, and implementing cybersecurity countermeasures and mitigation strategies and informing management and the board of directors of material cybersecurity threats and incidents.

companyName: iPower Inc.

ticker: IPW


text: The board of directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage and mitigate those risks. The audit committee of the board of directors (the "Audit Committee") has been designated by our board of directors to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our management. The board of directors also receives periodic updates from management and the Audit Committee on cybersecurity risks. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes designed to ensure that such potential cybersecurity risk exposures are monitored, putting in place mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Executive Officer. Management regularly updates the Audit Committee on our cybersecurity programs, which includes cybersecurity risks and mitigation strategies, vulnerability management, and on-going cybersecurity projects.


text: of June 30, 2025, we did not identify any cybersecurity incidents that materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. It is possible that we may not implement appropriate controls if we do not detect a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate the risks. Even when a risk is detected, disruptive events may not always be immediately and thoroughly interpreted and acted upon. For more information about these risks, please see "Risk Factors - Risks Related to our Business and Products" in Item 1A of this Form10-K.


text: We use, store and process data for and about our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2025.

companyName: Exousia Bio, Inc.

ticker: LMMY


text: We maintain an incident response plan with a cross-functional team comprised of members of the information technology department, senior management and other appropriate individuals. The team is responsible for assessing and managing the cybersecurity incident response process and taking necessary corrective actions to mitigate and/or eliminate any issues. In connection with our new digital asset treasury strategy, we intend to appoint a Chief Information Security Officer in Fiscal 2026.

companyName: Forward Industries, Inc.

ticker: FWDI


text: Under the oversight of the Board of Directors (since we do not currently have an Audit Committee), we intend to implement and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes would be integrated into our overall risk management processes. We intend to implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify and address cybersecurity risks. In support of this approach, it is expected that we would have a third-party security consultant implement processes to assess, identify and manage security risks to our company, including in the pillar areas of security and compliance, application security, infrastructure security and data privacy. This process, once implemented, would include regular compliance and critical system access reviews. In addition, we intend to conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office and Google enterprise to provide protection against cybersecurity threats.


text: Further, we intend to put processes in place that would evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that would have access to our data, including a review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: Part of our intended program would be ongoing evaluation and enhancement of our systems, controls and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition.


text: The Company recognizes the importance of managing cybersecurity risks to protect its information systems and data. We do not currently engage any third-party cybersecurity service providers.

companyName: Naploy Corp.


text: During the fiscal year ended July 31, 2025, the Company did not experience any material cybersecurity incidents that affected our operations, financial condition, or results.


text: The Company is committed to continuously improving its cybersecurity safeguards as part of overall risk management and will update these disclosures should circumstances change.


text: Cybersecurity risk management is part of the Company's overall risk management. Our cybersecurity risk management is designed to provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers. We rely on the cybersecurity protections of many of our third-party service providers. Our primary third-party service providers, utilize two (2) factor authorization as well as login and password protections with email verifications.

companyName: Guru App Factory Corp

ticker: GAFC


text: Our Board has overall oversight responsibility for our risk management, including our cybersecurity risk management. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored. We have not experienced any cybersecurity incidents in fiscal year 2025.


text: Despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.


text: We recognize the importance of developing, implementing and maintaining cybersecurity measures to safeguard our information and operational technologies and protect the confidentiality, integrity and availability of our data. Our business is dependent upon our computer systems, devices, software and networks to collect, process and store the data necessary to conduct almost all aspects of our business.


text: We have designed our cybersecurity procedures based on the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"). We have used NIST CSF as a guide to help identify, assess and manage cybersecurity risks relative to our business, but this does not imply that our cybersecurity program meets any particular technical standard, specification or requirement.


text: We have processes in place to assess, identify, manage and address material cybersecurity threats and incidents. These include, among other things, annual and ongoing security awareness training for employees, mechanisms to detect and monitor unusual network activity, use of encryption and authentication technologies, penetration testing and containment and incident response tools. We regularly assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities.


text: Our control over the security posture of and ability to monitor the cybersecurity practices of third-party vendors and service providers, including Galaxy Digital and any digital asset custodians, exchanges, or validators we utilize, is limited and there can be no assurance that we can prevent, mitigate or remediate the risk of any compromise or failure in the cybersecurity infrastructure owned or controlled by third parties. Given our significant digital asset holdings, any cybersecurity breach affecting our third-party service providers could have a material adverse effect on our business, financial condition, and results of operations.


text: As of the filing date of this Annual Report on Form 10-K, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or incidents or provide assurances that we have not experienced an undetected cybersecurity incident. For more information about these risks, see "Item 1A – Risk Factors."


text: Our Board of Directors has overall responsibility for the oversight of risk management, including cybersecurity risks. The Board of Directors receives periodic briefings on cybersecurity matters, including key risks to the Company, recent developments and risk mitigation activities from management.


text: Our information technology team is responsible for assessing and maintaining our cybersecurity risk management program and may engage third-party experts on an as-needed basis for risk assessment and system enhancements. Our information technology team are experienced information systems security professionals with many years of experience in the information technology field and various degrees and cybersecurity-related certifications.


text: The Company faces risks from cybersecurity incidents that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. Cybersecurity incidents may target and compromise our systems, as well as confidential consumer, employer, and agent information that we store and manage in connection with some of our services. Any cybersecurity incidents affecting our computer networks, databases, third-party services or facilities could lead to potential interruptions of our operations or our ability to manage and report our operating results. Cybersecurity incidents may also result in the inappropriate use or disclosure of personal information, which could adversely affect consumers' confidence in our or our agents' business and expose us to liabilities. As a result, we are required to expend significant capital and other resources to protect us against these security breaches or to alleviate problems caused by these breaches. Intermex has experienced, and may continue to experience, cybersecurity threats in the normal course of its business. To date, however, these events have not had a material adverse effect on the Company's business, financial condition, results of operations, cash flows or reputation. See Item 1A. Risk Factors for additional information on how risks could materially affect the Company.

companyName: International Money Express, Inc.

ticker: IMXI


text: To mitigate cybersecurity risks, the Company has designed and implemented a Cybersecurity and Information Security Program ("Cybersecurity Program"), which is managed and executed by our Chief Information Security Officer ("CISO"). Our CISO has over 20 years of experience in information technology and cybersecurity primarily focused in the financial services industry. Our CISO is an experienced professional in technology, security, risk management, and compliance principles related to most United States and global financial services related regulations. Also, our CISO holds and maintains an active Certified Information Systems Security Professional certification as well as other relevant technical certifications. The Board of Directors of the Company (the "Board") generally oversees management's processes for identifying and mitigating risks we are exposed to, including cybersecurity risks, to help align our risk exposure with our strategic objectives, and has delegated specific oversight of cybersecurity risk management to the Board's Audit Committee. At least on a quarterly basis, or more frequently as may be warranted, the Board and the Audit Committee are apprised of cybersecurity incidents, if any, and initiatives related to any identified heightened risks. In addition, the CISO provides a comprehensive annual report on cybersecurity as well as quarterly updates to the Audit Committee, the Board and Internal Technology Steering Committee ("IT Steering Committee"), which is composed of members from our Executive Management team and key Information Technology ("IT") personnel.


text: The foundation of our Cybersecurity Program is based on recognized best practices and standards for cybersecurity and information technology that include the Center of Internet Security ("CIS") Controls Framework. The CIS Critical Security Controls Framework is a prioritized set of safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are mapped to and referenced by multiple legal, regulatory, and policy frameworks. This framework is employed to guide cybersecurity investments similar to third party audits and risk assessments. Our Cybersecurity Program employs a practical risk-based approach with a focus on addressing risk factors with the highest possible impact, high levels of likelihood, and least amount of existing compensating controls. Key risk factors, along with action plans and a status of identified matters are communicated to Executive Management, the Audit Committee and the Board as part of the CISO's quarterly updates. We have created and continually update, as required, a detailed cybersecurity incident response plan, which outlines the steps to be followed from incident detection to eradication, recovery and notification and which we implement in the event of a cybersecurity incident.


text: We recognize that threat actors frequently target employees to gain unauthorized access to information systems. Therefore, each of our associates is required to complete information security and data privacy training on an annual basis to reinforce awareness of cybersecurity risks to the organization.

companyName: Playa Hotels & Resorts N.V.


text: The Company engages a third party to perform an annual cybersecurity audit, which attests compliance with our Cybersecurity Program and industry best practices. The results of the third-party audit and internal vulnerability reviews are used by the CISO to guide investments in cybersecurity capabilities, solutions, and services to reduce the Company's exposure to cybersecurity risks. To aid managing, prioritizing and remediating any identified cybersecurity, software engineering, and IT infrastructure risks, the Company has implemented a risk register. The risk register is maintained by the IT Department and the status of remediation efforts is communicated to management during the quarterly meetings of the IT Steering Committee. Any significant, control failure, weakness or cybersecurity incident is reported by the CISO to the Company's incident response team and prioritized for remediation in accordance with our cybersecurity incident response plan. In addition to the third-party audit, we perform ongoing vulnerability reviews and conduct annual penetration testing of both external and internal systems. These tests are conducted by qualified external consultants and all findings are reported to the CISO and any deficiency is tracked until it has been fully remediated. A risk assessment is conducted regularly against NIST and CIS frameworks to determine gaps in controls that exposes the Company to a risk level that requires mitigation efforts. The Company requires in depth security monitoring continuous and real-time, detection of, and responses to cybersecurity threats and has partnered with industry leading managed service providers to accomplish this objective. Our cybersecurity partners maintain continuous security operations centers, threat intelligence, response capabilities, and incident response services. These services are tested for effectiveness annually as part of the internal penetration testing process. As mentioned above, the Company has implemented an incident response plan and incident response team that meets at least annually to assess breach scenarios and improve our response capabilities. All findings from testing, vulnerability analysis, breach scenarios, and event detection are reported quarterly by the CISO to the IT Steering Committee and Audit Committee.


text: The Company faces risks from cybersecurity incidents that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. Cybersecurity incidents may target and compromise our systems, as well as confidential consumer, employer, and agent information that we store and manage in connection with some of our services. Any cybersecurity incidents affecting our computer networks, databases, third-party services or facilities could lead to potential interruptions of our operations or our ability to manage and report our operating results. Cybersecurity incidents may also result in the inappropriate use or disclosure of personal information, which could adversely affect consumers' confidence in our or our agents' or digital partners' business and expose us to liabilities. As a result, we are required to expend significant capital and other resources to protect us against these security breaches or to alleviate problems caused by these breaches. Intermex has experienced, and may continue to experience, cybersecurity threats in the normal course of its business. To date, however, these events have not had a material adverse effect on the Company's business, financial condition, results of operations, cash flows or reputation. See Item 1A. Risk Factors for additional information on how risks could materially affect the Company.


text: The foundation of our Cybersecurity Program is based on recognized best practices and standards for cybersecurity and information technology that include the Center of Internet Security ("CIS") Controls Framework. The CIS Critical Security Controls Framework is a prioritized set of safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are mapped to and referenced by multiple legal, regulatory, and policy frameworks. This framework is employed to guide cybersecurity investments similar to third party audits and risk assessments. Our Cybersecurity Program employs a practical risk-based approach with a focus on addressing risk factors with the highest possible impact, high levels of likelihood, and least amount of existing compensating controls. Key risk factors, along with action plans and a status of identified matters are communicated to Executive Management, the Audit Committee and the Board as part of the CISO's quarterly updates. We have created and continually update, as required, a detailed cybersecurity incident response plan, which outlines the steps to be followed from incident detection to eradication, recovery and notification and which we will implement in the event of a cybersecurity incident, including the determination of materiality of cybersecurity incidents to ensure accurate and timely disclosures of those events in accordance with current regulatory requirements.


text: Cybersecurity Governance Cybersecurity is an important part of our risk management processes and an area of focus for our board of directors and management. Our Audit Committee is responsible for the oversight of risks from cybersecurity threats. Members of the Audit Committee receive updates at least annually from senior management, including leaders from the CTO, internal audit and legal teams regarding matters of cybersecurity. This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. Our board of directors also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.

companyName: CNL Strategic Capital, LLC


text: The Company engages a third party to perform an annual cybersecurity audit, which attests compliance with our Cybersecurity Program and industry best practices. The results of the third-party audit and internal vulnerability reviews are used by the CISO to guide investments in cybersecurity capabilities, solutions, and services to reduce the Company's exposure to cybersecurity risks. To aid managing, prioritizing and remediating any identified cybersecurity, software engineering, and IT infrastructure risks, the Company has implemented a risk register. The risk register is maintained by the IT Department and the status of remediation efforts is communicated to management during the quarterly meetings of the IT Steering Committee. Any significant, control failure, weakness or cybersecurity incident is reported by the CISO to the Company's incident response team and prioritized for remediation in accordance with our cybersecurity incident response plan. In addition to the third-party audit, we perform ongoing vulnerability reviews and conduct annual penetration testing of certain external and internal systems based on selected criteria as determined by Management in conjunction with external consultants. These tests are conducted by qualified external consultants and all findings are reported to the CISO and any deficiency is tracked until it has been fully remediated. A risk assessment is conducted regularly based on NIST and CIS frameworks to determine gaps in controls that exposes the Company to a risk level that requires mitigation efforts. The Company requires in depth security monitoring continuous and real-time, detection of, and responses to cybersecurity threats and has partnered with industry leading managed service providers to accomplish this objective. Our cybersecurity partners maintain continuous security operations centers, threat intelligence, response capabilities, and incident response services. These services are tested for effectiveness annually as part of the internal penetration testing process. As mentioned above, the Company has implemented an incident response plan and incident response team that meets at least annually to assess breach scenarios and improve our response capabilities. All findings from testing, vulnerability analysis, breach scenarios, and event detection are reported quarterly by the CISO to the IT Steering Committee and Audit Committee.


text: Cybersecurity Risk Management and Strategy We have no employees and are externally managed by the Manager, an affiliate of the Sponsor. The Manager is responsible for the overall management of our activities, subject to oversight by our board of directors.


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to customers, reputational damage adversely affecting customer or investor confidence and violation of data privacy or security laws. Our Sponsor maintains an enterprise-wide cybersecurity program to protect and defend against and manage foreseeable cybersecurity risks and threats, including for the Company. The cybersecurity program is administered by the Sponsor's Chief Technology Officer ("CTO"), who has adopted the National Institute of Standards and Technology ("NIST") Cybersecurity Framework. Based on the NIST standards, our cybersecurity program breaks down its efforts to manage cybersecurity risk into five (5) pillars: identify, protect, detect, respond and recover.


text: Identifying and assessing cybersecurity risk as well as protecting us and our businesses from such risk is integrated into our overall risk management systems and processes as well as specifically addressed in our enterprise-wide cybersecurity program. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including threat intelligence collaboration and advisory mediums, third-party due diligence and risk assessments when determining the selection, oversight and engagement of third-party service providers, application security evaluations and annual penetration tests as well as management risk and compliance reviews. The foregoing combines with periodic review and analysis of third-party service provider system and organizational controls, internal network intrusion prevention systems, vulnerability assessments, access management, data loss prevention, remote access control, mandatory cybersecurity awareness training and random phishing campaigns with additional requisite training, if applicable, to identify and protect against cybersecurity risk.


text: Any potential cybersecurity compromise, whether direct or indirect, is analyzed and documented by the securities operations team (the "SO Team") and escalated to the cybersecurity incident response team ("CSIRT") as necessary. The SO Team is comprised of cybersecurity professionals and the CSIRT is comprised of certain of the Sponsor's and Company's executives from legal, corporate communications, IT, compliance, finance, and risk management.


text: Security events and data incidents are evaluated, ranked by severity and prioritized for response and remediation. Incidents are evaluated to determine materiality as well as operational and business impact and reviewed for privacy impact. Materiality is determined by considering qualitative and quantitative factors. The CSIRT team also conducts tabletop exercises to simulate responses to cybersecurity incidents. The Sponsor's team of cybersecurity professionals then collaborate with technical and business stakeholders across our business units to further analyze the risk to the company, and form detection, mitigation and remediation strategies.


text: Recovery and restoration from a cybersecurity incident can vary depending on type of attack and materiality of assets and information affected.


text: As of the date of this filing, we do not believe that our business strategy, results of operations or financial conditions have been materially affected by any risks from cybersecurity threats for the reporting period covered by this report. However, institutions like us, and our service providers, have experienced cybersecurity events and data incidents in the past and will likely continue to be the target of cyberattacks and intrusions. For additional information on the cybersecurity risks we face, see "Part 1, Item 1A. Risk Factors–Risks Related to Our Business—We could be negatively impacted by cybersecurity attacks."


text: Information technology and data security, particularly cybersecurity, are areas of focus for our board of directors and its audit committee. We employ a multi-layered security model that leverages risk-based controls with a focus on protecting our residents' and associates' data. We follow a cloud-first approach to enable efficient scaling, robust business continuity, and access to the latest technology innovations.

companyName: Invitation Homes Inc.

ticker: INVH


text: The cybersecurity risk management and strategy processes are overseen by the Sponsor's cybersecurity committee which consists of the Company's chief financial officer and general counsel, and the CTO, legal, risk management, and compliance teams. Such individuals have an average of over 15 years of prior work experience in various roles involving information technology, including security, auditing, and compliance. These individuals are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to the Audit Committee on any appropriate items.


text: Our cybersecurity risk management program aims to protect and preserve the confidentiality, integrity, and continued availability of our residents' and associates' data and includes controls and procedures for the identification, containment, and remediation of cyber threats.


text: Cybersecurity Risk Management Program and Strategy We understand the importance of maintaining a robust cybersecurity program to assess, identify, and manage the material risks associated with cybersecurity threats.

companyName: Brighthouse Financial, Inc.

ticker: BHF


text: Managing Cybersecurity Risks; Cybersecurity Risk Management Strategy Our cybersecurity risk management program is integrated into the Company's enterprise risk management framework, and our strategy focuses on implementing effective and efficient processes, technologies, and controls to assess, identify, and manage cybersecurity risks. Our cybersecurity program is designed to be aligned with the National Institute of Standards and Technology ("NIST") framework, which organizes the management of cybersecurity risks into five categories: identify, protect, detect, respond, and recover.