text: The Audit Committee of our Board of Directors oversees our cybersecurity risk management. Our Chief Financial Officer and Director of Information Technology, along with key executives, have roles in governance and facilitating alignment across our organization.


text: Compliance and Standards: We design our cybersecurity program for compliance with industry-specific and other regulations (e.g., the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA)) demonstrating our commitment to both domestic and international information security standards.

companyName: Alto Ingredients, Inc.

ticker: ALTO

secItem: Item 1C

stage1Category: Risk Management Process

stage1Method: unanimous


text: deploy technical defenses against cybersecurity risks of attack and other incidents, including firewalls, intrusion detection and prevention systems and access controls. We refine these measures based on our ongoing assessments, including cybersecurity threat intelligence updates.


text: Response and Recovery Planning: We maintain incident response and recovery frameworks, tested twice yearly through simulations and tabletop exercises, to improve our preparedness to effectively manage and mitigate cybersecurity incidents.


text: Education and Awareness: Our personnel undergo mandatory periodic training on cybersecurity threats, with updated insights into effective defense mechanisms and our evolving cybersecurity policies and practices. of Third Parties: We collaborate with external cybersecurity service providers, including auditors and consultants, to refine our cybersecurity measures.


text: These service providers carry out cybersecurity risk evaluations such as periodic assessments and vulnerability scans to pinpoint potential security flaws and suggest enhancements. In addition, we employ third-party technology and other solutions to enhance our protection against cybersecurity risks. These solutions include our use of a managed security service provider to support our in-house technology team, an endpoint detection and response, or EDR, system for ongoing surveillance, detection, and action against threats, as well as a security information and event management, or SIEM, system designed to automate the real time identification, investigation and prioritization of critical alerts.

stage1Method: majority


text: Risk Management: We use a comprehensive due diligence process to manage third-party risks, emphasizing continuous monitoring and to ensure our business partners' cybersecurity practices meet our stringent standards.

stage1Category: Third-Party Risk


text: of the filing of this report, we do not believe that any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect, Alto Ingredients, Inc.

stage1Category: Strategy Integration


text: We engage third-party services to conduct evaluations of our security controls, whether through penetration testing, independent audits, or consulting on best practices to address new challenges. We have established cybersecurity security awareness training and ongoing monitoring.

companyName: Aditxt, Inc.

ticker: ADTX


text: We take a comprehensive and forward-looking approach to cybersecurity risk management under the oversight of our Audit Committee. Management, including our Chief Financial Officer and our Director of Information Technology, provide regular updates to ensure a strategic, unified response to cybersecurity challenges. Management is notified of, and monitors, cybersecurity incidents through our EDR and SIEM systems.

stage1Category: Management Role


text: Our Director of Information Technology has over 20 years of experience in information technology and five years of experience serving directly as a Chief Information Security Officer for other organizations.


text: networks and systems are continuously monitored by a combination of third-party service providers and an internal cybersecurity team. Management is promptly notified of cybersecurity incidents. Audit Committee is promptly notified by our management of any material cybersecurity breach. Board of Directors is briefed at least annually on the state of our cybersecurity program.

stage1Category: Board Governance


text: internal cybersecurity team collaborates with external cybersecurity service providers, including auditors and consultants, to refine our cybersecurity measures. These service providers carry out cybersecurity risk evaluations such as periodic assessments and vulnerability scans to pinpoint potential security flaws and suggest enhancements.


text: Engagement and Continuous Improvement periodically evaluate our cybersecurity measures through internal and external audits and assessments to ensure our cybersecurity program is at the forefront of industry best practices. The results of these audits and assessments inform adjustments to our cybersecurity program to improve our resilience against emerging cybersecurity threats.


text: Our Director of Internal Control and Chief Financial Officer oversee our cybersecurity risk management program described in "Risk Management and Strategy" below. While the Board of Directors has overall responsibility for risk oversight, it is supported in this regard by the Audit Committee. The Audit Committee assists the Board of Directors in monitoring cybersecurity risk by receiving updates from and engaging in discussions as needed with the Director of Internal Control and the Chief Financial Officer, that cover, among other things, our cybersecurity risk management program, response readiness and training efforts. The Audit Committee updates the full Board of Directors on cybersecurity matters as appropriate.

companyName: Kandi Technologies Group, Inc.


text: Identification and Reporting: We have implemented a cross-functional approach to assessing, identifying and managing material cybersecurity threats and incidents. Our program includes controls and procedures to identify, classify and escalate certain cybersecurity incidents to provide management visibility and obtain direction from management as to the public disclosure and reporting of material incidents in a timely manner.


text: Safeguards: We implement technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence, as well as outside audits and certifications.


text: Response and Recovery Planning: We are establishing incident response, business continuity, and disaster recovery plans designed to address our response to a cybersecurity incident.


text: Risk Management: We maintain a risk-based approach to identifying and overseeing material cybersecurity threats presented by third parties, including vendors, service providers, and other external users of our systems, as well as the systems of third parties that could adversely impact our business in the event of a material cybersecurity incident affecting those third-party systems, including any outside auditors or consultants who advise on our cybersecurity systems.


text: Assessments: We conduct periodic assessments and testing of our policies, standards, processes, and practices in a manner intended to address cybersecurity threats and events. The results of such assessments, audits, and reviews are evaluated by management and reported to our Audit Committee and our board of directors, and we adjust our cybersecurity policies, standards, processes, and practices as necessary based on the information provided by these assessments, audits, and reviews.


text: Our Board and management recognize the critical importance of maintaining the trust and confidence of our customers, clients, business pa rtners general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: DUKE Robotics Corp.

ticker: DUKR


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;


text: Our CEO and CFO supervise efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which include ensuring routine briefings from internal security personnel, obtaining threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and providing Company personnel with alerts and reports produced by security tools deployed in the IT environment.


text: We have taken a multifaceted approach to addressing cybersecurity risks, including leadership from our senior management and Board of Directors, direct supervision and operational execution from our information technology ("IT") department and active involvement of employees. The Company's senior management devotes significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats. We periodically assess the threat landscape and take a holistic view of cybersecurity risks, with a layered cybersecurity strategy based on prevention, detection and mitigation. Our IT team reviews cybersecurity risks, and we have a set of Company-wide policies and procedures concerning cybersecurity matters, including policies related to encryption standards, remote access, multi factor authentication, confidential information, the use of the internet, social media, email and wireless devices and incident response.

companyName: CBAK Energy Technology, Inc.

ticker: CBAT


text: The Company's Chief Executive Officer, an engineering expert with over eight years of experience in leading our company, is responsible for developing and implementing our information security measures and overseeing our IT department. The Company has established a physical firewall, with physical gateways that filter suspicious files and data flows entering and exiting our Company's network. In addition, the computers in our R&D department are equipped with behavior control software, which makes emails and files sent from the R&D computers in an encrypted state and inaccessible without specific authorization from designated supervisors.


text: The Company's IT department is directly responsible for cybersecurity matters and routinely reports to the senior management. In the event of a cybersecurity incident, the IT department will initially report to the Company's senior management, including our Chief Executive Officer. If the incident is assessed as a material threat or incident to our information systems, our senior management will escalate the issue to the Board of Directors. Given that our core operations are in manufacturing and involve limited network-related activities, we believe that our existing cybersecurity measures are adequate.


text: The Company's Board of Directors and senior management are committed to continuously evaluating and upgrading our cybersecurity prevention, detection, and mitigation strategies in line with the evolution of our business needs and cybersecurity risks.


text: In the fiscal year ended December 31, 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. For additional information about these risks, see "Risks Related to Our Business—We rely significantly on technology and systems to support our production, supply chain, payments, financial reporting and other key aspects of our business. Any failure, inadequacy, interruption or security failure of those systems could have a material adverse effect on our business, reputation and brand, financial condition, and results of operations" and "Risks Related to Our Business—System security risk issues, and disruption of our internal operations or information technology systems, could have a material adverse effect on our business, financial condition, and results of operations" in Item 1A-Risk Factors.


text: In support of our commitment to cybersecurity, we employ a comprehensive strategy which is intended to protect our digital infrastructure, which strategy is supported by both management and our Board of Directors. Our Board of Directors is responsible for overseeing our risk management activities in general, and certain of our Board committees assists the Board of Directors in the role of risk oversight. The full Board of Directors receives an update on the Company's risk management process and the risk trends related to cybersecurity at least annually.

companyName: INTELLIGENT PROTECTION MANAGEMENT CORP.

ticker: IPM


text: At the management level, leading our efforts is a cybersecurity team that reports directly to our Senior Vice President. This team conducts manual and automated testing on our systems, with the goal of identifying vulnerabilities and proactively strengthening our defenses. We believe that embracing a multi-layered defense approach, will help us recognize and address the dynamic nature of cyber threats. By integrating diverse security measures, we aim to fortify our infrastructure against a spectrum of potential risks, adapting to the ever-evolving cybersecurity landscape.


text: Our cybersecurity team performs tests, encompassing vulnerability assessments, penetration testing, and threat simulations. The results derived from these assessments are prioritized and integrated into the workflow of our development and operations teams to ensure that identified vulnerabilities and insights gleaned from the tests are promptly addressed. We also have an established process led by our Senior Vice President governing our assessment, response and notifications internally and externally upon the occurrence of a cybersecurity incident. Depending on the nature and severity of an incident, this process provides for escalating notification to our Chief Executive Officer and the Board of Directors.


text: To enhance our defense mechanisms, we leverage third-party edge security tools. These tools play a crucial role in actively monitoring and mitigating potential threats to our sites and products, which we believe contributes to our security infrastructure. Our development teams also use proactive measures such as "Security as Code" to make sure that vulnerabilities are protected against at a deeper level, in addition to cloud-based security tools.


text: Recognizing the pivotal role of our personnel in cybersecurity, we also conduct proactive training sessions covering essential topics such as data handling practices and email phishing awareness. These initiatives are designed to empower our workforce to serve as a human firewall, augmenting our overall security posture.


text: Additionally, we also think about data handling from a code and infrastructure level, incorporating encryption measures in transit and at rest to safeguard both internal and customer data. We further employ a proactive backup strategy, ensuring rapid system restoration in the event of disruptions. This measure minimizes downtime and underscores our commitment to business continuity and customer service reliability.


text: An integral part of our cybersecurity readiness is an annual external IT audit that evaluates various aspects of our cybersecurity framework. This measure ensures that our defenses align with industry best practices and facilitates continuous improvement. The results of this audit are reviewed by the audit committee of the Board of Directors, allowing such committee to assist in and make recommendations on our management's cybersecurity controls.


text: We face risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows or reputation. To date, we have not experienced any cyber incidents that have had an adverse material effect on our business, financial condition, results of operations, or cash flows. See "Risk Factors – Risks Related to Our Business – Security breaches, computer viruses and cybersecurity incidents could harm our business, results of operations or financial condition."


text: Cybersecurity Risk Management and Processes Sensus is actively working towards the integration of a cybersecurity risk management program into its comprehensive risk management framework to protect the confidentiality, integrity, and availability of its critical systems and information.

companyName: Sensus Healthcare, Inc.

ticker: SRTS


text: Our cybersecurity risk management program is being designed based on various cybersecurity frameworks, including National Institute of Standards and Technology and the Center for Internet Security, as well as information security standards issued by the International Organization for Standardization, including ISO 27001 and ISO 27002. The Company uses these frameworks and information security standards as a guide to identify, assess, and management cybersecurity risks relevant to the business. Formalization and implementation of robust IT security policies; vulnerability assessments; of user access request documentation to clearly define the roles and permissions assigned to users; review of the accuracy and completeness of user listings and access;


text: of evidence related to system modifications; and collaboration with external specialists to aid in the ongoing evaluation of existing policies addition, the Company has a strategic plan, which encompasses the following key elements: Establishment of a dedicated cybersecurity governance committee; of cybersecurity incident response procedures and formats; penetration tests on a quarterly basis; of segregation of duties to mitigate the risk of self-review of transactions within the system;


text: Company has not identified any risks from known cybersecurity threats and did not have any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company. For a discussion of whether and how any risks from cybersecurity threats are reasonably likely to materially affect us, refer to Item 1A. Risk Factors – "The Company's operations may be impaired if our information technology systems fail to perform adequately or are the subject of a data breach or cyberattack," which is incorporated by reference into this Item 1C.


text: The Board of Directors actively collaborates with management to supervise cybersecurity risks. The Chief Technology Officer ("CTO"), with over 10 years' experience in cybersecurity, leads the Company's overall cybersecurity function and monitors cybersecurity risks. The CTO works with internal personnel and third-party consultants to design and implement the controls on the prevention, detection, mitigation, and remediation of cybersecurity risks. The CTO maintains regular communication with the Board on matters related to cybersecurity and provides updates to management on a quarterly basis. In the event of a cybersecurity incident, the Board is to be promptly notified.


text: Management considers cybersecurity risk as part of its risk oversight function and is in the process of establishing a cybersecurity governance committee. The cybersecurity governance committee will oversee the management's implementation of the cybersecurity risk management program.


text: The Company operates in a dynamic environment with evolving cybersecurity threats. Our business relies heavily on the secure operation of our technology infrastructure and the protection of user data.

companyName: Mega Matrix Corp.

stage1Category: None/Other


text: Data breaches: Unauthorized access to user data, including nicknames, email addresses, country, and identification numbers, could lead to reputational damage, regulatory fines, and legal action, a loss of users and loss of revenue. Disruption of service: A cyberattack could disrupt our service, preventing users from accessing content and impacting our revenue. Loss of intellectual property: Cybercriminals could steal our proprietary content or intellectual property, harming our competitive advantage. Costs associated with responding to a cyberattack: Costs of remediation, legal fees, and regulatory fines, could be significant.


text: The security and privacy of our users and their data is our priority, and we proactively manage cybersecurity risks to ensure robust protection for our platform. We integrate cybersecurity risk management into our overall organizational strategy. Our Board of Directors oversees risk management, including cybersecurity. Key elements of our framework include:


text: Risk Assessment and Identification: We conduct regular assessments to identify, evaluate, and prioritize potential cybersecurity threats and vulnerabilities. We utilize various methods like vulnerability scanning, threat intelligence feeds, and penetration testing.


text: Technical Safeguards: We deploy a multi-layered defense system with various technical safeguards to protect our infrastructure and user data. This includes firewalls, intrusion detection and prevention systems (IDS/IPS), data encryption (at rest and in transit), and access controls based on the principle of least privilege.


text: Incident Response and Recovery: We have documented and well-rehearsed incident response procedures to effectively respond to, contain, and remediate security incidents. These procedures ensure timely detection, investigation, and recovery, minimizing potential damage and ensuring user privacy.


text: Mapping data flows and user locations: We understand where user data is stored and transmitted, enabling us to identify relevant privacy laws and to implement suitable user data protection.


text: Third-Party Risk Management: We implement a rigorous process for vetting and securing our relationships with third-party vendors. This includes security assessments and contractual agreements outlining specific security measures they must adhere to.


text: Security Awareness and Training: We regularly conduct comprehensive security awareness training programs for all employees. These programs educate them on cybersecurity best practices, threat identification, and reporting procedures.


text: Despite our efforts, there is no guarantee that we can completely eliminate the risk of cyberattacks. Our cybersecurity measures may not be effective against all threats, and new vulnerabilities may emerge that we are unaware of.


text: HCTI employs a multilayer approach to addressing cybersecurity risk based on the National Institute of Standards and Technology (NIST) framework. It has established a dedicated cybersecurity team that utilizes internal and external assessments, automated monitoring tools, and input from public and private partners to identify potential cyber threats. External third party security firms are engaged to assist with cybersecurity risk assessments, penetration testing and system security analysis. HCTI's cybersecurity team works in conjunction with the risk management, legal, finance, accounting, operations, and information technology areas to assess the risk these identified cybersecurity threats present to the organization. To ensure consistency, these cybersecurity risk assessments are incorporated into HCTI's Enterprise Risk Management process, HCTI's information technology leadership reviews the company's enterprise risk management-level cybersecurity risks on a quarterly basis, and key cybersecurity risks are incorporated into HCTI's enterprise risk management framework. Cybersecurity risks are managed and controlled through multiple overlapping layers of cybersecurity defenses that include: expert input from both public and private partnerships;

companyName: Healthcare Triangle, Inc.

ticker: HCTI


text: implementation of a comprehensive cybersecurity policy that encompasses but is not limited to social media, acceptable use (devices, wireless, remote access, internet use), information governance, monitoring, authentication, encryption, vulnerability management, third-party management, and recovery;


text: annual cybersecurity training for all employees with additional supplemental cybersecurity and automated cyber controls in conjunction with robust detection, mitigation, and recovery the formation of a multidisciplinary cybersecurity incident response team; integration of multiple threat intelligence sources into our cybersecurity tools and processes; retention of external cybersecurity threat response resources;


text: formation of a multidisciplinary cybersecurity incident response team; and cyber event simulation and tabletop exercises per year to hone the cybersecurity incident response team preparedness.


text: HCTI board of directors provides enterprise-level oversight of risks associated with cybersecurity threats through the Audit Committee, which assists the Board in fulfilling its oversight responsibilities regarding the Company's policies and processes with respect to risk assessment and risk management, including any significant non-financial risk exposures; reviewing and discussing the Company's information security policies and internal controls regarding information security; and reviewing the Company's annual disclosures concerning the role of the Board in the risk oversight of the Company. The Audit Committee performs an annual review of the Company's cybersecurity program and receives quarterly updates on key cybersecurity risks, the cybersecurity risk management plan, and cyber incident event trends.


text: HCTI's technical officers have primary responsibility for the development and oversight of HCTI's cybersecurity team and the development and maintenance of the company's related cybersecurity policies and procedures. The team has several years' worth of experience working in the information and operational technology field and are registered professional engineers. The company's cybersecurity team continuously assesses the evolving cyber threat landscape based on their expertise and that of our third-party partners. They then work with all parts of HCTI to protect against, detect, identify, respond to, and recover from the risks that cybersecurity threats present. The cybersecurity team views and responds to cybersecurity risks in a holistic manner, applying a comprehensive multilayered strategy to prevent, detect, and mitigate them. They have identified HCTI's critical cyber assets and taken appropriate steps to protect them. External expertise is regularly engaged to assess HCTI's cybersecurity program and help the cybersecurity team to strengthen the organization's monitoring, alerting, prevention, mitigation, and recovery capabilities. Tabletop simulations, third party cyber vulnerability assessments, maturity assessments, and partnerships are used to assess and refine all elements of our cybersecurity program. In addition to managing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of third-party service providers. Risk assessments are performed against third-party service providers with a specific focus on any sensitive data that is to be shared with them. The internal business owners of HCTI's applications are required to document user access reviews regularly. We request a System and Organizational Controls (SOC) 2 report from the vendors of our enterprise cloud applications. If they do not provide us with a SOC 2, we seek additional compensating risk assurance in our contract language with them. Risks associated with the use of third-party service providers are managed as part of our overall cybersecurity risk management framework.


text: To continually manage and control the material risks that cybersecurity threats present to the organization, HCTI invests significantly in the cybersecurity elements outlined above.


text: In addition, the Company has made significant investments to fulfill the operational and financial regulatory requirements laid out by the North American Electric Reliability Corporation Critical Infrastructure Protection Standards and Sarbanes-Oxley Act of 2002. HCTI faces a number of cybersecurity risks in connection with its business.


text: Although such risks have not materially affected us, including our business strategy, results of operations, and financial conditions, to date, we have, from time to time, experienced threats to and breaches of our data systems, including malware, phishing and computer virus attacks. See "Item 1A. Risk Factors" for additional information regarding our organization's cybersecurity risks, which should be read together with this "Item 1C. Cybersecurity".


text: As a blank check company, we do not have any operations and our sole business activity has been to search for and consummate a business combination. However, because we have investments in our trust account and bank deposits and we depend on the digital technologies of third parties, we and third parties may be subject to attacks on or security breaches in our or their systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our initial public offering.

companyName: ClimateRock

ticker: CLRCF


text: The Company has processes in place to assess, identify, and manage material risks from cybersecurity threats. The Company's business is dependent on the communications and information systems of Oxford Funds and other third -party service providers. Oxford Funds manages the day -to-day operations of the Company and has implemented a cybersecurity program that applies to the Company and its operations.

companyName: Oxford Square Capital Corp.

ticker: OXSQ


text: Cybersecurity Program Overview Oxford Funds has instituted a cybersecurity program designed to identify, assess, and manage cyber risks applicable to the Company and assists with the oversight of other third party service providers and their cybersecurity programs. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Company relies. Oxford Funds actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Company.


text: The Company relies on Oxford Funds to engage external experts, including cybersecurity assessors and consultants to evaluate cybersecurity measures and risk management processes, including those applicable to the Company. The Company relies on Oxford Funds' risk management program and processes, which include cyber risk assessments.


text: The Company depends on and engages various third parties, including suppliers, vendors, and service providers, to operate its business. The Company relies on its Officers and the expertise of risk management and information technology personnel of Oxford Funds when identifying and overseeing risks from cybersecurity threats, including risks from third parties.


text: Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from its Chief Compliance Officer ("CCO"), which incorporates updates provided by the Head of Information Technology of Oxford Funds, regarding the overall state of Oxford Funds' cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents impacting the Company.


text: Management's Role in Cybersecurity Risk Management The Company's management, including the Company's CCO and the Head of Information Technology of Oxford Funds, manages the Company's cybersecurity program. The President and CCO of the Company oversee the Company's oversight function generally and rely on Oxford Funds' Head of Information Technology to manage the assessment and management of material risks from cybersecurity threats. The Head of Information Technology has more than 8 years of experience in actively managing cybersecurity and information security programs for financial services companies with complex information systems. The CCO has been responsible for his oversight function as CCO to the Company for 8 years and has worked in the financial services industry for more than 35 years, during which time the CCO has gained expertise in assessing and managing risk applicable to the Company.


text: Management of the Company is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with risk management, legal, information technology, and/or compliance personnel of Oxford Funds.


text: Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats on the Company are assessed on an ongoing basis, and how such risks could materially affect the Company's business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, the Company has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Company believes have materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, operational results, and financial condition.


text: To respond to the threat of security breaches and cyberattacks, we have developed a cybersecurity risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats to all information and systems owned by us. We maintain certain risk management processes intended to identify cybersecurity threats, determine their likelihood of occurring, and assess potential material impacts to our business. Based on our assessment, we implement and maintain risk management processes designed to protect the confidentiality, integrity, and availability of our information systems and the information residing therein.

companyName: RELMADA THERAPEUTICS, INC.

ticker: RLMD


text: Cybersecurity is reviewed as part of our overall enterprise risk management program, led by our Chief Compliance Officer (CCO), which assesses our significant enterprise risks, provides a summary of those risks and primary mitigations, identifies control improvement projects for our significant risks, and regularly reports on the progress of control improvement projects for those risks to the Audit Committee of our Board of Directors. Cybersecurity risks are reviewed by the Board of Directors, at least annually, as part of the Company's corporate risk mapping exercise.


text: The Company's processes are designed to identify such threats by, among other things, monitoring the threat environment using manual and automated tools, subscribing to services that identify cybersecurity threats, analyzing reports of threats, conducting scans of the threat environment, evaluating threats reported to us and conducting vulnerability assessments to identify vulnerabilities.


text: We rely on a multidisciplinary team (including from management and third-party service providers) to assess how identified cybersecurity threats could impact our business. These assessments may leverage, among other processes, industry tools and metrics designed to assist in the assessment of risks from such cybersecurity threats. Management also conducts periodic and on-demand assessments of our cybersecurity risks.


text: Our CCO, is responsible for developing and implementing the cybersecurity risk management program and reporting on cybersecurity matters to the Board. Additionally, members of the third-party service providers have cybersecurity experience and/or certifications. We view cybersecurity as a shared responsibility across our management team and periodically perform simulations and incorporate external resources and advisors as needed. All employees are required to complete cybersecurity training at least annually and have access to more frequent cybersecurity training through online events.


text: The CCO is responsible for continuously monitoring and assessing the Company's cybersecurity risk management program, informing senior management regarding the prevention, detection and mitigation and remediation of cybersecurity incidents and supervising such efforts.


text: To operate our business, we utilize certain third-party service providers to perform a variety of functions, such as outsourced business critical functions, clinical research, professional services, SaaS platforms, cloud-based infrastructure, encryption and other functions. We have certain vendor management processes designed to help to manage cybersecurity risks associated with our use of these providers. Depending on the nature of the services provided, and the sensitivity and quantity of information processed, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider related to the services they provide and/or the information they process, conducting security assessments, conducting on-site inspections, requiring their completion of written questionnaires regarding their services and data handling practices, and conducting periodic re-assessments during their engagement.


text: We have not experienced any material cybersecurity incidents in the past, and we believe no cybersecurity events have occurred that have materially affected the Company or its business strategy, results of operations or financial condition. We continue to invest in the cybersecurity of our infrastructure and the enhancement of our internal controls and processes, which are designed to help protect our systems and data, and the information they contain. We carry insurance in amounts that we believe are reasonable for our business that provides protection against potential losses arising from a cybersecurity incident. However, there is no assurance that our insurance coverage will cover or be sufficient to cover all losses or claims that may arise from a cybersecurity incident.


text: are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Stardust Power Inc.

ticker: SDST


text: Cyber criminals are becoming more sophisticated and effective every day, and they are increasingly targeting companies similar to ours operating in the technology, software and identification space. All companies utilizing technology are subject to threats of breaches of their cybersecurity programs. To mitigate the threat to our business, we take a comprehensive approach to cybersecurity risk management and make securing the data customers and other stakeholders entrust to us a top priority. Our Board of directors and our management are actively involved in the oversight of our risk management program, of which cybersecurity represents an important component. As described in more detail below, we have established policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats. We have devoted significant financial and personnel resources to implement and maintain security measures to meet regulatory requirements and customer expectations, and we intend to continue to make significant investments to maintain the security of our data and cybersecurity infrastructure. There can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective to prevent cyberattack incidents. Such incidents, whether or not successful, could result in our incurring significant costs related to, for example, rebuilding our internal systems, implementing additional threat protection measures, providing modifications or replacements to our products and services, defending against litigation, responding to regulatory inquiries or actions, paying damages, providing customers with incentives to maintain a business relationship with us, or taking other remedial steps with respect to third parties, as well as incurring significant reputational harm. In addition, these threats are constantly evolving, thereby increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We have seen an increase in cyberattack volume, frequency, and sophistication. Although our Risk Factors include further detail about the material cybersecurity risks we face, we believe that as of the date of this Annual Report on Form 10-K, risks from prior cybersecurity threats, have not materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that they will not materially affect us, including our business strategy, results of operations, or financial condition.

companyName: authID Inc.

ticker: AUID


text: Risk Management and Strategy Our policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats are based on frameworks established by the International Organization for Standardization, specifically ISO/IEC 27001:2013 and other applicable industry standards. We have established comprehensive Information Security Management Systems ("ISMS") policies, which are independently reviewed and audited annually for conformity and effectiveness under ISO/IEC 27001. Our cybersecurity program in particular focuses on the following key areas: Collaboration


text: Our cybersecurity risks are identified and addressed through a comprehensive, cross-functional approach. Key security, risk, and compliance stakeholders, including a member of the Board meet at least monthly in our Security Steering Committee (the "Security Committee") to develop strategies for preserving the confidentiality, integrity and availability of our company and customer information, identifying, preventing and mitigating cybersecurity threats, and effectively responding to cybersecurity incidents. We maintain controls and procedures that are designed to ensure prompt escalation of certain cybersecurity incidents so that decisions regarding public disclosure and reporting of such incidents can be made by management and the Board in a timely manner.


text: At least annually, we conduct a cybersecurity risk assessment that takes into account information from internal stakeholders, known information security vulnerabilities, and information from external sources (e.g., reported security incidents that have impacted other companies, industry trends, and evaluations by third parties and consultants). The results of the assessment are used to drive alignment on, and prioritization of, initiatives to enhance our security controls, make recommendations to improve processes, and inform a broader enterprise-level risk assessment that is presented to our Board and members of management. Risk assessment is integral to all engineering, business and operational decisions and in addition to the annual reviews, is an ongoing effort, as circumstances and facts arise.


text: At least annually we conduct a self-audit of our information security management systems ("ISMS"), in order to identify if there is any non-conformance with our ISMS policies and procedures. The results of the self-audit are reported to our Steering Committee and our external auditor for ISO/IEC 27001 compliance.


text: Third-Party Risk Management We have implemented controls designed to identify and mitigate cybersecurity threats associated with our use of third-party service providers. Such providers are subject to security risk assessments at the time of onboarding and contract renewal. We use a variety of inputs in such risk assessments, including information supplied by providers and third parties. In addition, we require our providers to meet appropriate security requirements, controls and responsibilities.


text: Education and Awareness Our policies require each of our employees to contribute to our data security efforts. We regularly remind employees of the importance of handling and protecting customer and employee data, including through regular privacy and security training and testing to enhance employee awareness of how to detect and respond to cybersecurity threats.


text: External Assessments Our cybersecurity policies, standards, processes and practices are regularly assessed by consultants and external independent auditors. These assessments include a variety of activities including information security assessments, audits and independent reviews of our ISMS, control environment and operating effectiveness. For example, in 2022 and 2023, we conducted independent audits to assess our ISMS against the ISO/IEC 27001:2013 standard and received certification of compliance with the standard. In 2022 we also undertook independent testing to achieve conformance with ISO 30107-3 Level 1 and 2 for Presentation Attack Detection (PAD), for our Bioweb server and Verified dashboard. We also undertake regular penetration testing of our systems. The results of significant assessments are reported to management and the Board. Cybersecurity processes are adjusted based on the information provided from these assessments. We have also obtained industry certifications and attestations that demonstrate our dedication to protecting the data our customers entrust to us.


text: Our Board, in coordination with the Security Committee, oversees our management of cybersecurity risk. They receive regular reports from management about the prevention, detection, mitigation, and remediation of cybersecurity incidents, including material security risks and information security vulnerabilities. Our Security Committee directly oversees our cybersecurity program. The Board receives periodic updates from management on cybersecurity risk resulting from risk assessments, progress of risk reduction initiatives, external auditor feedback, control maturity assessments, and relevant internal and industry cybersecurity incidents.


text: Our Chief Technology Officer ("CTO"), Senior Vice President of Engineering ("SVP-Engineering"), Data Engineering and Security Director and General Counsel have primary responsibility for assessing and managing material cybersecurity risks and are members of management's Security Committee, which is a governing body that drives alignment on security decisions across our company. The Security Committee meets monthly to review security performance metrics, identify security risks, and assess the status of approved security enhancements. The Security Committee also considers and makes recommendations on security policies and procedures, security service requirements, and risk mitigation strategies.


text: Our CTO has served in various roles in information technology and information security for over 35 years, which have covered operations management experience in Government Security, Identity Access Management and SaaS solutions industries. Our SVP-Engineering has over 30 years of experience in software development and engineering, starting in the U.S. Marine Corps. Our Data Engineering and Security Director has over 10 years experience in information technology, with a focus on data engineering and information security. Our General Counsel has over 12 years of experience managing risks, including risks arising from cybersecurity threats, at several publicly-traded technology companies.


text: We assess material risks from cyber security threats on an ongoing basis, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. As our Company grows, we plan to develop a more robust and detailed strategy for cyber security in alignment with nationally accepted standards.

companyName: ZION OIL & GAS INC

ticker: ZNOG


text: Our management and the Board recognize the critical importance of maintaining the trust and confidence of our business partners and employees, including the importance of managing cyber security risks as part of our larger risk management program. While all of our personnel play a part in managing cyber security risks, one of the key functions of our Board is informed oversight of our risk management process, including risks from cyber security threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks that we face. In general, we seek to address cyber security risks through a cross-functional approach that is focused on preserving the confidentiality, integrity, and availability of the information that we collect and store by identifying, preventing, and mitigating cyber security threats and effectively responding to cyber security incidents when they occur.


text: The company has not experienced a cyber security incident or a cyber security threat during 2023 nor in any prior years. The company's overall risk management systems and processes have followed the recommended guidelines of our cyber security insurance company. The Audit Committee has the board's oversight of risk from cyber security threats and the responsibility for reviewing the management processes. Management's role in assessing and managing material risks from cyber security threats is the responsibility of the Chief Financial Officer, who reports and coordinates any potential material risk to the Audit Committee.


text: As a blank check company, we do not have any operations and our sole business activity has been to search for and consummate a Business Combination. However, because we have investments in our Trust Account and bank deposits and we depend on the digital technologies of third parties, we and third parties may be subject to attacks on or security breaches in our or their systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering.

companyName: AIB Acquisition Corp


text: Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Blue Ocean Acquisition Corp


text: As a blank check company, we do not have any operations and our sole business activity has been to search for and consummate a Business Combination. However, because we have investments in our Trust Account and bank deposits and we depend on the digital technologies of third parties, we and third parties may be subject to attacks on or security breaches in our or their systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, the Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering.

companyName: Clover Leaf Capital Corp.

ticker: KUST


text: We are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk.

companyName: Acri Capital Acquisition Corp


text: We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our management is generally responsible for assessing and managing any cybersecurity threats. If and when any reportable cybersecurity incident arises, our management shall promptly report such matters to our board of directors for further actions, including regarding the appropriate disclosure, mitigation, or other response or actions that the board deems appropriate to take. As of the date of this report, we have not encountered any cybersecurity incidents since our IPO.


text: In the normal course of business, we may collect and store personal information and other sensitive information, including proprietary and confidential business information, trade secrets, intellectual property, patient information, sensitive third-party information and employee information. To protect this information, our existing cybersecurity policies require continuous monitoring and detection programs, network security precautions, encryption of critical data and in-depth security assessments of vendors. We maintain various protections designed to safeguard against cyberattacks, including firewalls and virus detection software. We have established and regularly test our disaster recovery plan, and we protect against business interruption by backing up our major systems. In addition, we periodically scan our environment for any vulnerabilities, perform penetration testing and engage third parties to assess the effectiveness of our data security practices. Our information technology (" IT ") team is responsible for these ongoing monitoring and detection activities.

companyName: SS Innovations International, Inc.

ticker: SSII


text: The governance of our cybersecurity risks involves active and informed participation from our management team, our IT team and our board of directors. This oversight includes briefings by our IT team on the nature of the risks we face and the steps we are taking to mitigate these risks, as well as immediately reporting any significant cybersecurity incident that occurs to management and the board of directors.


text: We have not experienced a cybersecurity incident that had a material impact on our business strategy, results of operations, or financial condition. We continue to monitor potential cybersecurity threats and incorporate findings into our risk management strategies.


text: Information technology systems, including our website, email system, and various other online processes and functions, are critical to our business and operations.

companyName: BAIYU Holdings, Inc.


text: The Company faces risks associated with cybersecurity, including operational interruptions, financial losses, personal information leakage and non-compliance risks. For additional details on risks from cybersecurity threats, please refer to "Item 1A. Risk Factors — We are subject to a variety of laws and regulations regarding cybersecurity and data protection, and any failure to comply with applicable laws and regulations, including improper use or appropriation of personal information provided directly or indirectly by our customers or end users, could have a material adverse effect on our business, financial condition and results of operations."


text: We employed email correspondence anti-leakage software and firewall system to our website. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. Nevertheless, the changes in our business and operations may impact our cybersecurity program in the future.


text: We will leverage internal and external resources to support our cyber risk management efforts, such as vulnerability assessments, and employee cybersecurity awareness training. We will engage the services of external information security service providers to help support our information technology environment, assist with security monitoring, and help us draft and implement information security policies when necessary and/or appropriate. Further, we will utilize third parties to help us monitor issues that are internally discovered or externally reported that may materially affect our website and email systems, and we have processes to assess the potential cybersecurity impact or risk of these issues.


text: The Audit Committee of our Board of Directors (the "Audit Committee") oversees risks pertaining to cybersecurity. The Chief Operating Officer regularly reports to the Audit Committee, and directly to the Board of Directors, as appropriate, on the state of our cybersecurity program and provides updates on cybersecurity matters.


text: We have processes in place to assess, identify, and manage material risks from cybersecurity threats. The Company's business is dependent on the communications and information systems of the Investment Adviser and other third-party service providers. The Investment Adviser manages our day-to-day operations and has implemented a cybersecurity program that applies to the Company and its operations.

companyName: Steele Creek Capital Corp


text: Program Overview The Investment Adviser has instituted a cybersecurity program designed to identify, assess, and mitigate cyber risks applicable to the Company. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Company relies. The Investment Adviser, through its service providers, actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Company.


text: The Company relies on the Investment Adviser to engage external experts, including cybersecurity assessors, consultants, and auditors to evaluate cybersecurity measures and risk management processes, including those applicable to the Company. The Company relies on the Investment Adviser's risk management program and processes, which include cyber risk assessments.


text: The Company depends on and engages various third parties, including suppliers, vendors, and service providers, to operate our business. The Company relies on the expertise of risk management, legal, information technology, and compliance personnel of the Investment Adviser when identifying and overseeing risks from cybersecurity threats associated with our use of such entities.


text: Board Oversight of Cybersecurity Risks The Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from our Investment Adviser's Chief Compliance Officer ("CCO") regarding the overall state of the Investment Adviser's cybersecurity program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents impacting the Company.


text: The Company's management, including the Company's CCO, is responsible for assessing and managing material risks from cybersecurity threats. Management of the Company is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with risk management, legal, information technology, and/or compliance personnel of the Investment Advisor.


text: Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats on us are assessed on an ongoing basis, and how such risks could materially affect the Company's business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, the Company has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Company believes have materially affected, or are reasonably likely to materially affect, us, including our business strategy, operational results, and financial condition.


text: Cybersecurity Governance Our Board of Directors is responsible for overseeing cybersecurity threats, among other things. The Chief Technology Officer of the affiliated member of our Sponsor is available to provide our senior management and our Board of Directors reports on our cybersecurity risks and any material cybersecurity incidents.

companyName: PMV Consumer Acquisition Corp.

ticker: PMVC


text: As a blank check company, we do not have any operations and our sole business activity has been to search for and consummate a Business Combination. However, because we have investments in our Trust Account and bank deposits and we depend on the digital technologies of third parties, we and third parties may be subject to attacks on or security breaches in our or their systems. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.

companyName: COLOMBIER ACQUISITION CORP. II


text: In the event of a cybersecurity incident impacting us, the Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering.


text: Risk management and strategy We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Hall of Fame Resort & Entertainment Co

ticker: HOFV


text: We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: Following these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with our Director of IT, to manage the risk assessment and mitigation process.


text: As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with IT and management. Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.


text: We engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, Governance


text: One of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors and audit committee are responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors has delegated administration of its cybersecurity risk oversight function to the audit committee.


text: Our Chief Executive Officer, General Counsel and Chief Accounting Officer are primarily responsible to assess and manage our material risks from cybersecurity threats with assistance from third-party service providers and outside counsel, as needed.


text: Our Chief Executive Officer, General Counsel and Chief Accounting Officer oversee our cybersecurity policies and processes, including those described in "Risk Management and Strategy" above. The cybersecurity risk management program includes tools and activities to prevent, detect, and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents.


text: Our Chief Executive Officer, General Counsel, and Chief Accounting Officer provide periodic briefings to the audit committee regarding our company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. Our audit committee provides regular updates to the board of directors on such reports.


text: Cybersecurity Risk Management and Strategy We have developed and implemented, and continue to implement, cybersecurity risk management processes intended to protect the confidentiality, integrity, and availability of our critical systems and information. Primary cybersecurity oversight responsibility is shared by our board of directors, our audit and compliance committee ("Audit Committee"), and senior management.

companyName: Zeo Energy Corp.

ticker: ZEO


text: Our cybersecurity risk management program includes physical, technological, and administrative controls intended to support our cybersecurity and data governance framework, including protections designed to protect the confidentiality, integrity, and availability of our key information systems and customer, employee, partner, and other third-party information stored on those systems. These measures include access controls, encryption, data handling requirements, and internal policies that govern our cybersecurity risk management and data protection practices. Our program also includes cybersecurity risk assessment processes designed to help identify material cybersecurity risks to our critical systems and information.


text: Over the past fiscal year, we have not identified risks from known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, operating results, or financial condition.


text: We will continue to monitor and assess our cybersecurity risk management program as well as seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity incident in the future, such incident may have a material effect, including on our operations, business strategy, operating results, or financial condition. For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto, see the section titled " Risk Factors " in Part I, Item 1A of this Report.


text: Cybersecurity Governance With oversight from our board of directors, the Audit Committee is primarily responsible for assisting the board in fulfilling its oversight responsibilities relating to risk assessment and management, including cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program, including processes and policies for determining risk tolerance, and reviews management's strategies for adequately mitigating and managing identified risks relating to cybersecurity threats.


text: The Audit Committee will receive updates from members of management on our cybersecurity risks at its quarterly meetings, and reviews metrics about cyber threat response preparedness, program maturity, risk mitigation status, and the current and emerging threat landscape. In addition, management will provide updates to the Audit Committee, as necessary, regarding any material cybersecurity threats or incidents, as well as any incidents with lesser impact potential.


text: The Audit Committee reports to our board of directors regarding its activities, including those related to key cybersecurity risks, mitigation strategies, and ongoing developments, on a quarterly basis, or more frequently as needed. The board of directors also receives updates from management on our cyber risk management program and other matters relating to our data privacy and cybersecurity approach, including risk mitigations to bolster and enhance our data protection and data governance framework.


text: Our management team is responsible for assessing and managing our material risks from cybersecurity threats and for our overall cybersecurity risk management program on a day-to-day basis.


text: Our management team supervises our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including through briefings from internal IT personnel, which may include threat intelligence and other information obtained from governmental, public or private sources, and alerts and reports produced by security tools deployed in our IT environment.


text: We believe cybersecurity is critical to advancing our technological advancements. As a biopharmaceutical company, we face a multitude of cybersecurity threats that range from attacks common to most industries, such as ransomware and denial-of service. Our customers, suppliers, subcontractors, and business partners face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our operations, performance, and results of operations. These cybersecurity threats and related risks make it imperative that we expend resources on cybersecurity.

companyName: Silo Pharma, Inc.

ticker: SILO


text: Our Board of Directors oversees management's processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives.


text: Senior leadership, including our cybersecurity consultant, regularly briefs the Board of Directors on our cybersecurity and information security posture and the Board of Directors is apprised of cybersecurity incidents deemed to have a moderate or higher business impact, even if immaterial to us. The full Board retains oversight of cybersecurity because of its importance. In the event of an incident, we intend to follow our detailed incident response playbook, which outlines the steps to be followed from incident detection to mitigation, recovery, and notification, including notifying functional areas (e.g., legal), as well as senior leadership and the Board, as appropriate.


text: As a biopharmaceutical company, we must comply with extensive regulations, including requirements imposed by the Federal Drug Administration related to adequately safeguarding patient information and reporting cybersecurity incidents to the SEC. We work with our cybersecurity consultant on assessing cybersecurity risk and on policies and practices aimed at mitigating these risks. We believe we are positioned to meet the requirements of the SEC. In addition to following SEC guidance and implementing pre-existing third party frameworks, we have developed our own practices and frameworks, which we believe enhance our ability to identify and manage cybersecurity risks. Third parties also play a role in our cybersecurity. We engage third-party services to conduct evaluations of our security controls, whether through penetration testing, independent audits, or consulting on best practices to address new challenges. Assessing, identifying, and managing cybersecurity related risks are factored into our overall business approach.


text: We rely heavily on our supply chain to deliver our products and services, and a cybersecurity incident at a supplier, subcontractor or business partner could materially adversely impact us. We require that our subcontractors report cybersecurity incidents to us so that we can assess the impact of the incident on us. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While we maintain cybersecurity insurance, the costs related to cybersecurity threats or disruptions may not be fully insured.


text: Risk Management and Strategy We are a pre-clinical-stage biopharmaceutical company, focused on developing novel and proprietary drug delivery systems across various pain indications and treatments for CNS disorders.

companyName: Virpax Pharmaceuticals, Inc.

ticker: VRPX


text: We have conducted a cyber security risk assessment performed by a third-party consultant and are in the process of developing a formal cybersecurity risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. The risk assessment was performed against the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF") standards.


text: We have implemented third-party risk management processes to manage the risks associated with reliance on vendors, critical service providers, and other third-parties that may lead to a service disruption or an adverse cybersecurity incident. This includes an assessment of vendors during the selection/onboarding process and a review of SOC 1 reports on an annual basis.


text: In addition, we maintain policies over areas such as information security, access on/offboarding, and access and account management, to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities. We partner with industry recognized IT providers leveraging third-party technology and expertise. These third-party service providers are a key part of our current cybersecurity risk management and provide services including, maintenance of an IT assets inventory, periodic vulnerability scanning, identity access management controls including restricted access of privileged accounts, network integrity safeguarded by employing web-based software, including endpoint protection, endpoint detection and response, and remote monitoring management on all devices, industry-standard encryption protocols and critical data backups. Our outsourced information technology consultant conducts proactive patching and monitoring of all of our existing systems and has implemented systems and procedures to mitigate cybersecurity risks that we believe are appropriate for a company of our size, stage of growth and financial condition. In addition, we carry insurance with coverage for cyber events that we believe is suitable for a company of our size, stage of growth and financial condition.


text: of any cybersecurity threats, and have not experienced any cybersecurity incidents, that have materially affected us, including our business strategy, results of operations or financial condition.


text: For additional information concerning risks related to cybersecurity, see Item lA. Risk Factors: We are increasingly dependent on information technology, and our systems and infrastructure face certain risks, including cybersecurity and data leakage risks.


text: Management is responsible for the day-to-day management of the risks we face, while our Board of Directors has responsibility for the oversight of risk management, including as to risks from cybersecurity threats. In its risk oversight role, our Board of Directors has the responsibility to satisfy itself that the risk management processes designed and implemented by management are appropriate and functioning as designed. The Board of Directors has delegated to the Audit Committee of the Board of Directors the responsibility for the oversight of information technology, including cybersecurity risks. Member(s)


text: of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services brief the Audit Committee on cyber vulnerabilities identified through the risk management process, emerging threat landscape and new cyber risks, and provide updates on our processes to prevent, detect, and mitigate cybersecurity incidents.


text: The cybersecurity risk management team of the affiliated member of our Sponsor, in conjunction with its various information technology, internal audit, legal and compliance personnel, has primary responsibility for the overall cybersecurity risk management program.


text: cybersecurity risk management program, processes and strategy described in this section are limited to the personal and business information belonging to or maintained by the Company (collectively, "Confidential Information"), our own third-party critical systems and services supporting or used by the Company (collectively, "Critical Systems"), and service providers. The Company's subsidiaries lease to our tenants the properties we own, but we do not have actual or contractual access to the systems or information maintained or used by our tenants. Our tenants are directly or indirectly (through their own service providers) responsible for maintaining programs and processes to protect their systems and information from various risks from cybersecurity threats.

companyName: Zoned Properties, Inc.

ticker: ZDPY


text: will develop and implement a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our Confidential Information and Critical Systems. Our cybersecurity risk management program will be integrated into our overall enterprise risk management program and includes a cybersecurity incident response plan.


text: cybersecurity risk management program shall include: assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader enterprise IT environment;


text: security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; awareness and spear-phishing resistance training of our employees, and senior management; cybersecurity incident response plan that includes procedures for responding to cybersecurity vendor management policy for service providers.


text: have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, could have a material adverse effect on us including an adverse effect on our business, financial condition and results of operations.


text: executive management team, along with our managed information technology service provider, is responsible for assessing and managing risks from cybersecurity threats to the Company, including our Confidential Information and Critical Systems. The team has primary responsibility for our overall cybersecurity risk management program. Our management team works closely with our information technology service provider.


text: management team meets with our information technology service provider periodically to discuss then-current cybersecurity issues, which may include efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including threat intelligence and other information obtained from governmental, public or private sources, and external service providers engaged by us; and alerts and reports produced by security tools deployed in the information technology environment including a spear-phishing report.


text: Board considers cybersecurity risk as part of its risk oversight function and oversight of cybersecurity and other information technology risks.


text: Board oversees management's implementation of our cybersecurity risk management program. Our executive management team is responsible for updating the Board, as necessary, regarding significant cybersecurity incidents. Board shall also receive period reports from management on our cybersecurity risks and cybersecurity risk management program.


text: We have developed and maintain a cybersecurity risk management program that focuses primarily on securing and safeguarding computer systems, networks, cloud services, business applications, and data and that is integrated in our overall risk management strategy and framework. We have implemented protocols to protect against cyber threats and ensure the containment and security of sensitive business data, including ongoing security reviews of critical systems, continuous monitoring of event data, and employee training programs, which processes are aligned with our overall business and operational goals and strategies. Our risk assessment occurs on an ongoing basis and covers identification of risks that could act against the company's objectives as well as specific risks related to a compromise to the security of data.

companyName: ACTELIS NETWORKS INC

ticker: ASNS


text: We engage a third-party to provide operational support for cybersecurity risks. This forms a critical part of our risk management strategy, facilitating effective management and mitigation of risks, and ensuring adherence to applicable regulatory and industry standards.


text: management and strategy have implemented and maintain various information security processes designed to identify, assess, and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic, or competitive in nature, and clinical trial data, or Information Systems and Data.

companyName: Gamida Cell Ltd.


text: Overall, we believe that we have established a robust framework for confidentiality, integrity, and availability of information, adhering to relevant security standards, practices, and compliance requirements. In addition, we maintain insurance to help protect against risks associated with cybersecurity threats. As of the date of this report, we do not believe that any risks from cybersecurity threats have materially affected, or are reasonably likely to materially affect, us, including our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. For more information about these risks, please see "Item 1.A – Risk Factors – Risks Related to Our Business Operations – If our internal company cyber-security measures are breached or fail and unauthorized access is obtained to our IT environment, we may incur significant losses of data, which we may not be able to recover and may experience a delay in our ability to conduct our day-to-day business" in this Annual Report.


text: Our board of directors provides oversight of our cybersecurity program and helps guide our strategy for managing cybersecurity risks in the context of our overall risk management system. Our cybersecurity program is managed by our Chief Financial Officer and our external IT team whose is responsible for leading enterprise-wide cybersecurity execution, protocols, framework, standards and processes. The Chief Financial Officer reports to our board of directors, as well as our Chief Executive Officer and other members of senior management as appropriate.


text: are a shell company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable target businesses for a business combination. Therefore, we do not consider that we face significant cybersecurity risk. Nevertheless, we employ various procedures designed to identify, protect, detect and respond to and manage reasonably foreseeable cybersecurity risks and threats given our limited operations. These include, but are not limited to, internal reporting, monitoring and detection tools and anti-virus software in. We also periodically assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities, including those that could arise from internal sources and external sources such as third-party service providers we do business with. We may the future determine to engage an assessor(s), consultant(s), auditor(s) or other third party(s) to supplement our processes.

companyName: Allegro Merger Corp.


text: date, we have not experienced any cybersecurity attacks. However, any such attack could adversely affect our business. Further, a penetration of our systems or a third-party's systems or other misappropriation or misuse of personal information could subject us to business, regulatory, litigation and reputation risk, which could have a negative effect on our business, financial condition and results of operations.


text: Audit Committee of the Board oversees our cybersecurity risk and receives regular reports from our management team on various potential cybersecurity matters, including areas of emerging risks, incidents and industry trends, and other areas of importance.


text: a company in general, and particularly, as a government contractor, we understand the critical need to maintain all data and information systems in the safest, most secure manner. Accordingly, our approach to cybersecurity is multi-tiered and comprehensive. Our board of directors ultimately oversees our processes for assessing, identifying and managing material risks from cybersecurity threats. Our management, together with third party contractors, makes these assessments and periodically provides the board with a report and evaluation, including risk mitigation strategies. This report would also include any cybersecurity related incidents which would give rise to a reporting requirement for the company. Although we consider our program for mitigating cybersecurity risks to be part of an overall risk mitigation strategy, we consider it a separate set of processes because of the unique concerns with keeping our and our customers' data secure.

companyName: APPLIED ENERGETICS, INC.

ticker: AERG


text: Chief Executive Officer works with our information technology consultants (IT) to assess any reasonably foreseeable internal and external risks to our information systems, including the likelihood of malware, ransomware, cyber espionage, and any other cybersecurity threats.


text: Through these risk assessments, management seeks to determine the likelihood of, and potential damage that could result from, such risks, and the sufficiency of existing systems and safeguards in place to manage them. Our IT continually monitors our systems for any attempted unauthorized entries or breaches and reports this information to management on a regular basis. Information gathered from these processes enable our IT to make any necessary adjustments to our systems and address any identified gaps in existing safeguards.


text: IT also provides guidance and support with respect to protecting our information systems from these various threats. This includes advising both management and other personnel on the best practices for keeping these systems safe and a training program that includes random testing for weaknesses.


text: customer contracts require that we maintain a heightened level of information security and set out specific protocols to which we must adhere to safeguard covered data and other information. Our CEO, who has expertise in government contracting and related data and information controls, assesses these requirements on behalf of the company in consultation with our IT to determine the necessary network architecture and infrastructure for all of these requirements and ensures that proper protocols are implemented and that our personnel adhere to them. This includes special, additional training for personnel on handling of various levels of customer information.


text: Chief Compliance Officer and Head of Global Information Technology both help identify, assess, and manage the Company's cybersecurity threats and risks. We identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example manual and automated tools, analyzing reports of threats and actors, evaluating threats reported to us, evaluating our and our industry's risk profile, audits, conducting threat assessments, conducting vulnerability assessments, and conducting tabletop incident response exercises.


text: on the environment and systems, we implement and maintain various technical, physical, and organizational measures, processes, standards, and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: an incident response plan, disaster recovery plans, risk assessments, network security controls, access controls, systems monitoring, and cybersecurity insurance.


text: assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, we prioritize and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.


text: use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example professional services firms, including legal counsel and cybersecurity software providers.


text: use third-party service providers to perform a variety of functions throughout our business, such as hosting companies and contract research organizations. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program includes risk assessments for certain vendors and audits. Depending on the nature of the services provided, the sensitivity of the Information Systems and Data at issue, and the identity of the provider, our vendor management process may involve different levels of assessment designed to help identify cybersecurity risks associated with a provider.


text: a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under


text: Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including " If our information technology systems or those third parties upon which we rely or our data, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences." utilize information technology for internal and external communications with vendors, clinical sites, banks, investors and shareholders. Loss, disruption or compromise of these systems could significantly impact operations and results.


text: are not aware of any material cybersecurity violation or occurrence. We believe our efforts toward prevention of such violation or occurrence, including system design and controls, processes and procedures, training and monitoring of system access, limit, but may not prevent unauthorized access to our systems.


text: than temporary disruption to operations that may be caused by a cybersecurity breach, we consider cash transactions to be the primary risk for potential loss. We and our financial institution take steps to minimize the risk by requiring multiple levels of authorization and other controls.


text: board of directors addresses our cybersecurity risk management as part of its general oversight function. The board of directors' Audit Committee are responsible for overseeing our cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.


text: Patterson, General Counsel and Chief Compliance Officer. Mr. Patterson has over 20 years of experience in legal and risk management at various biotechnology companies. Mr. Patterson has previously served as General Counsel at a large biotechnology company.


text: Kelly Randis, Head of Global Information Technology. Ms. Randis is a seasoned information technology professional with substantial experience in handling cybersecurity matters who has worked at various pharmaceutical companies. Ms. Randis has previously served as the Director for Emerging Technology and Innovation at an international pharmaceutical company.


text: management is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into our overall risk management strategy, and communicating key priorities to relevant personnel. Our management is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: we face a number of ongoing cybersecurity risks in connection with our business, such risks have not materially affected us to date, including our business strategy, results of operations, or financial condition.

companyName: GAXOS.AI INC.

ticker: GXAI


text: cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including Mr. Patterson. Ms. Randis works with the Company's incident response team to help the Company mitigate and remediate cybersecurity incidents of which they are notified. In addition, the Company's incident response processes include reporting to the Audit Committee of the board of directors for certain cybersecurity incidents.


text: board receives regular reports from Ms. Randis concerning our significant cybersecurity threats and risk and the processes we have implemented to address them. The board also receives various reports, summaries or presentations related to cybersecurity threats, risk, and mitigation.