text: As of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.


text: President and Chief Executive Officer is responsible for overseeing our cybersecurity processes and works directly with third party service providers, as applicable, to identify, assess and manage the Company's cybersecurity threats and risks. In doing so, he seeks to identify and assess risks from cybersecurity threats in a manner appropriate for a company of comparable size and resources.

companyName: Bluejay Diagnostics, Inc.

ticker: BJDX

secItem: Item 1C

stage1Category: Management Role

stage1Method: unanimous


text: assessment and management of material risks from cybersecurity threats are integrated into the Company's overall risk management processes. For example, our IT Consulting Firm works with management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.

stage1Category: Risk Management Process


text: Board of Directors addresses the Company's cybersecurity risk management as part of its general oversight function. The Board is responsible for overseeing Company's cybersecurity risk management processes. Our cybersecurity risk assessment and management processes are implemented and maintained by our President and Chief Executive Officer.

stage1Category: Board Governance


text: cybersecurity incident response and vulnerability management processes are designed to escalate certain cybersecurity incidents to members of management and/or the Board of Directors depending on the circumstances. The Board receives periodic reports and updates from our senior management concerning cybersecurity threats and risks, and the processes that the Company has implemented to address them. are not aware of any instances of material cybersecurity incidents that impacted the Company.

stage1Method: majority


text: We have implemented cybersecurity risk assessment procedures to ensure effectiveness in cybersecurity management, strategy and governance and reporting cybersecurity risks. We have also integrated cybersecurity risk management into our overall enterprise risk management system.

companyName: CHINA PHARMA HOLDINGS, INC.

ticker: CPHI


text: We have used a cybersecurity threat defense system to address both internal and external threats. This system encompasses various levels, including network, host and application security and incorporates systematic security capabilities for threat defense, monitoring, analysis, response, deception and countermeasures. We strive to manage cybersecurity risks and protect sensitive information through various methods, including technical safeguards, procedural requirements, an intensive monitoring program on our corporate network, a robust incident response program, a review of the effectiveness of our security system with reference to applicable security standards by qualified third parties and regular cybersecurity awareness training for employees. We continuously monitor the performance of our apps, platforms and infrastructure to enable us to respond quickly to potential problems, including potential cybersecurity threats.


text: As of the date of this Report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Our Board is responsible for the oversight of cybersecurity risk management. The Board delegates oversight of the cybersecurity risk management program to the Audit Committee. On a quarterly and as-needed basis, the CFO reports to the Audit Committee on our cybersecurity risk management program, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards.

companyName: Avalon GloboCare Corp.

ticker: ALBT


text: Our Board of Directors is responsible for overseeing the Company's cybersecurity risk management and be informed on risks from cybersecurity threats. The Board shall review, approve and maintain oversight of the disclosure (i) on Form 8-K for material cybersecurity incidents (if any) and (ii) related to cybersecurity matters in the periodic reports (including annual report on Form 10-K) of the Company. In addition, our management team, including those with experience in dealing with confidentiality-related cybersecurity issues, oversee and manage cybersecurity related matters and formulate policies as necessary. Our Board review on an annual basis regarding assessment, identification and management on material risks from cybersecurity threats happened in the ordinary course of our business operations. If a cybersecurity incident occurs, our Board will promptly organize relevant personnel for internal assessment and, depending on the situation, seek the opinions of external experts and legal advisors. If it is determined that the incident could potentially be a material cybersecurity event, our Board will decide on the relevant response measures and whether any disclosure is necessary. If such disclosure is determined to be necessary, such disclosure material will be prepared and reviewed by our Board before it is disseminated to the public.


text: Risk Management and Strategy We have an information security program designed to identify, protect, detect and respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our information systems from cybersecurity threats, we utilize various security tools that help prevent, identify, escalate, investigate, resolve, and recover from identified vulnerabilities and security incidents in a reasonably timely manner. These include, but are not limited to, internal reporting and tools for monitoring and detecting cybersecurity threats.

companyName: Reborn Coffee, Inc.

ticker: REBN


text: We evaluate the risks associated with technology and cybersecurity threats and monitor our information systems for potential weaknesses. We review and test our information technology system on an as-needed basis and also utilize internal team personnel to evaluate and assess the efficacy of our information technology system and enhance our controls and procedures. The results of these assessments are reported to our Audit Committee and, from time to time, our Board of Directors.


text: There can be no assurances that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or are effective in protecting our systems and information.


text: As of the date of this report, we are not aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, results of operations, or financial condition.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function. It has delegated oversight of cybersecurity and other information technology risks to the Audit Committee of the Board of Directors. The Audit Committee oversees the implementation of the cybersecurity risk management program.


text: The Audit Committee receives periodic reports from management on potential cybersecurity risks and threats. The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity. The full Board of Directors also receives briefings from management on the cybersecurity risk management program as needed.


text: Management is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for our overall cybersecurity risk management program and supervises both the internal cybersecurity personnel and external cybersecurity consultants.


text: The management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants; and alerts and reports produced by security tools deployed in the IT environment. Our cybersecurity incident response plan governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors.


text: Cybersecurity Risk Management We, like other companies in our industry, face several cybersecurity risks in connection with our business. Our business strategy, results of operations, and financial condition have not, to date, been affected by risks from cybersecurity threats. During the reporting period, we have not experienced any material cyber incidents, nor have we experienced a series of immaterial incidents, which would require disclosure.

stage1Category: Strategy Integration


text: In the ordinary course of our business, we use, store and process a bare minimum of data. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management program, which is comprised of data segregation, penetration testing, and training. The cyber risk management program falls under the responsibility of a third party IT consultant, who has cross-functional expertise in IT management, cybersecurity, and engineering with more than 30 years of experience (the "IT Consultant"), who reports directly to our Chief Financial Officer. Under the guidance of the IT Consultant, we have minimized our data footprint to keep our cyber risk low.


text: The CFO also provides updates to the Audit Committee of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.


text: We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our management is generally responsible for assessing and managing any cybersecurity threats. If and when any reportable cybersecurity incident arises, our management shall promptly report such matters to our board of directors for further actions, including regarding the appropriate disclosure, mitigation, or other response or actions that the board deems appropriate to take. As of the date of this report, we have not encountered any cybersecurity incidents since our IPO.

companyName: byNordic Acquisition Corp

ticker: BYNO


text: Our company has stringent processes and management that is used to assess, identify, and manage risks from unauthorized access through our information systems that may affect confidentiality, integrity, or availability of our information systems. We utilize the appropriate National Institute of Standards and Technology (NIST) controls for our sector and undergo yearly SOC II audits. These audits as well as our routine senior management level reviews ensure that our processes are designed to prevent, detect, or mitigate data loss, theft, misuse, unauthorized access, or other security incidents that may affect our data. We require coordinated IT security guidelines with our partners and vendors to mitigate risk associated with the distribution and holding of data sensitive to our company. A core portion of our business is as a channel partner for cybersecurity services through our Overwatch solution. This solution includes robust detection and response capabilities managed by a 24x7 US-based security operations center with dedicated senior leadership to the process and programs included in Overwatch. We utilize the same program that we offer as a service as our internal solution. In addition, we have hardware, site, and network protections around our physical devices that are located both onsite at High Wire Networks as well as a fully managed offsite data center.

companyName: HIGH WIRE NETWORKS, INC.

ticker: HWNI


text: We support the security systems by the usage of penetration testing, security audits, and ongoing risk assessments. We have a well-established incident response process that includes a rapid escalation of critical events to all senior leadership stakeholders. Our leadership team is led by our Chief Technology Officer (who is also a seasoned Chief Information Security Officer) who is responsible for implementing and maintaining a team of trained cybersecurity professionals. Senior leadership holds as needed, monthly, and quarterly governance meetings strictly focused on the management of our cybersecurity program and data practices. Our governance program includes a working team which encompasses several highly trained and experienced cybersecurity professionals as well as a steering committee including our CEO, CFO, and COO. In both the working and steering committee meetings, related and relevant risks are identified, tracked, mitigated, and reported to appropriate leaders, including the Board of Directors.


text: We provide and maintain data protection and cybersecurity training to limit the exposure of our business to security events based on soft attacks against our employees.


text: We are also a strong proponent of defense in depth. By utilizing Enterprise Risk Management strategies ingrained in our protection, detection and response planning we are able to provide multiple layers of security to identify and mitigate protection points within our company.


text: Company operates in the biotechnology sector and is subject to various cybersecurity risks that could adversely affect the Company's business, financial condition or results of operations, including intellectual property theft, fraud, extortion, harm to employees, collaborators or vendors, violation of privacy laws and other litigations, legal and reputational risk.

companyName: Actinium Pharmaceuticals, Inc.

ticker: ATNM

stage1Category: None/Other


text: The Company acknowledges that an actual or perceived breach of its information assets could damage its reputation, interfere with the progress of clinical trials, or interfere with efforts to pursue regulatory approvals for its product candidates. The Company also recognizes that an actual or perceived breach of its information assets could impact the Company's business strategy, operations, or financial condition, as well as subject Actinium to third–party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect the Company. For further information, see "Risk Factors—Our business is subject to cybersecurity risks" in Item 1A of this Annual Report on Form 10–K.


text: Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard its information systems and protect the confidentiality, integrity, and availability of its data. With that objective, the Company undertook a focused cybersecurity assessment conducted by an independent cybersecurity advisory firm to better understand the current cybersecurity threats and risks necessary to establish the foundation of a cybersecurity risk assessment framework appropriate for its current business operations and needs. The Company has also engaged well-known and established technology suppliers to support its key technology processes and operating technical security management activities including threat, vulnerability, and network security management.


text: Company has established an Incident Response Policy and recovery plans to address its response to a cybersecurity incident, and such plans are tested and evaluated on a regular basis. This includes continuous security operation centers monitoring of the Company's systems and accounts.


text: Company proactively mitigates its financial exposure to cybersecurity incidents by maintaining a cyber liability insurance policy. However, the Company's cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all.


text: In addition, the Company's cyber liability insurance policy may not cover all claims made against the Company. Defending a suit, regardless of its merit, could be costly and divert management's attention from the Company's business and operations. date, Actinium has not experienced any material cybersecurity incident that affected the Company's operations or financial condition.


text: rely on a multidisciplinary team including third-party service providers to assess how identified cybersecurity threats could impact our business. The Company's cybersecurity function is managed by the Company's Chief Financial Officer, who assumes the overall responsibility and accountability of the function and with select members of the Company's management is collectively responsible for the day–to–day assessment and management of cybersecurity risks, their prevention, mitigation, detection, and remediation.


text: Our Chief Financial Officer and other members of management have undergone various briefings from our cybersecurity advisory firm to prepare them to effectively assess and manage material risks from cybersecurity threats. Additionally, members of the third-party service providers have cybersecurity experience and/or certifications.


text: Company's Board is involved in overseeing our risk management processes and policies that may be implemented from time to time.


text: The Audit Committee will coordinate these activities through regular interactions with the Company's management including but not limited to: presentations regarding recent developments, potential risks associated with third parties, emerging trends, any relevant findings or any incident that rises to the level of established thresholds.


text: risk factors discussed in this document should be considered together with information included elsewhere in the Annual Report on Form 10–K and should not be considered as the only risks to which the Company is exposed.


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties.

companyName: Newbury Street II Acquisition Corp

ticker: NTWO


text: We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our Management Team will report to the Board of Directors and provide updates on the Management Team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering. In addition to our own cybersecurity risks, any proposed Business Combination target may have been subject to, or may in the future be subject to, cybersecurity incidents.


text: maintain a cyber-risk management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our data and information systems. This program is to ensure that cybersecurity considerations are included in decision-making processes throughout the Company.

companyName: LQR House Inc.

ticker: YHC


text: approach consists of, among other things, cybersecurity threat and vulnerability prevention, detection, mitigation and remediation of potential cybersecurity risks. We employ cybersecurity intrusion detection systems and continuous monitoring, in order to help defend against unauthorized access. We also employ identity-based access controls and identity authentication requirements. Access to the Company's data is monitored and controlled according to access control policies. Data protection and privacy practices, including data loss prevention, help to safeguard sensitive information. We have also outsourced significant elements of our information technology infrastructure; as a result, we manage independent vendor relationships with third parties who are responsible for maintaining significant elements of our information technology systems and infrastructure.


text: Board of Directors is responsible for oversight of our cyber-risk management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors with regular reports regarding any cybersecurity attacks or vulnerabilities.


text: Overall Risk Management We have integrated cybersecurity risk management into our risk management processes. This integration is intended to ensure that cybersecurity considerations are part of our decision-making processes. We continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.

companyName: 1847 Holdings LLC

ticker: LBRA


text: of the date of this Annual Report on Form 10-K, we have not experienced any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For more information regarding the risks the Company faces from cybersecurity threats, see " Item 1A. Risk Factors––Risks Related to Our Business and Operations––We are increasingly dependent on information technology, and our systems and infrastructure face certain risks, including cybersecurity and data leakage risks."


text: The mission of our information security organization is to design, implement, and maintain an information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. The information security organization is comprised of internal and external security and technology professionals. We continue to make investments in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.

companyName: American Bitcoin Corp.

ticker: ABTC


text: Cybersecurity risk management is one component of our information security program that guides continuous improvement to, and evaluates the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: Our approach to controls and risk management is based on guidance from the National Institute of Standards and Technology ("NIST") and the Crypto Currency Security Standard ("CCSS"). This does not mean that we meet any particular technical standards, specifications, or requirements, but rather that we use the NIST and CCSS as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Identifying cybersecurity risks that could impact our facilities, third-party vendors/partners, operations, critical systems, information, and broader enterprise IT environment. Risks are informed by threat intelligence, current and historical adversarial activity, and industry specify threats;


text: Performing a cybersecurity risk assessment to evaluate our readiness if the risks were to materialize; and Ensuring risk is addressed and tracking any necessary remediation through an action plan.


text: While we face a number of ongoing cybersecurity risks in connection with our business, such risks have not materially affected us to date, including our business strategy, results of operations, or financial condition.


text: Our Board considers cybersecurity risk as part of its risk oversight function and has delegated the oversight of cybersecurity and other information technology risks to the Board's Audit Committee as well as hiring a third party vendor that specializes in cybersecurity to oversee and provide an assessment on the Company's IT controls. The Audit Committee meets at least quarterly to discuss matters involving cybersecurity risks.


text: The Audit Committee ultimately provides information to our board members regarding its activities, including those related to cybersecurity risks. The Audit Committee also receives a briefing and continuing education from a member of the third party vendor relating to our cyber risk management program at least annually. The third party vendor is responsible for notifying the Audit Committee of material cybersecurity incidents.


text: In 2023, a threat actor representing to be the Sphere 3D Corp. ("Sphere 3D") CFO inserted themselves into an email exchange between the Sphere 3D CFO and the Company's former CEO, which also included Sphere 3D's CEO, regarding the transfer of Sphere 3D's BTC from the Company's wallet to Sphere 3D's wallet. The threat actor requested that the BTC be transferred to an alternate wallet. As a result, 26 BTC, with a value of approximately $560,000 at the time, was transferred to a wallet controlled by the threat actor. Via counsel, Gryphon engaged with US Federal law enforcement to recover the BTC. Despite these attempts by law enforcement to recover the BTC, recovery was not possible.

stage1Category: Incident Disclosure


text: Gryphon subsequently wired the commensurate amount in USD to Sphere 3D to make them whole for the stolen BTC. Gryphon also engaged a nationally recognized third-party firm to perform a forensic analysis. The analysis revealed that the threat actor did not enter the email exchange via Gryphon's IT systems. The Company has also subsequently modified its control systems to protect against any future attempted incursions. During the quarter ended June 30, 2023, the Company made a payment to Sphere 3D for $560,000, which was classified as a general and administrative expense on Gryphon's consolidated statement of operations.


text: Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats.


text: Engaging Third-parties on Risk Management Recognizing the complexity and evolving nature of cybersecurity threats, we plan to engage external experts, including consultants and auditors, in evaluating and testing our risk management systems. These services will enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties is expected to include annual audits, ongoing threat assessments, and regular consultations on security enhancements.


text: Overseeing Third-Party Risk Because we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: Risks from Cybersecurity Threats We have not encountered cybersecurity challenges that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. Board of Directors Oversight Our board of directors oversees the management of risks associated with cybersecurity threats.


text: Management's Role Managing Risk Management is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program.


text: Monitoring Cybersecurity Incidents Management is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Reporting to Board of Directors Significant cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.


text: We are a special purpose acquisition company with no business operations. Since our Initial Public Offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any. We have not encountered any cybersecurity incidents since our Initial Public Offering.

companyName: Tavia Acquisition Corp.

ticker: TAVI


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties.

companyName: Terrestrial Energy Inc. /DE/

ticker: IMSR


text: We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our management team will report to the Board of Directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering. In addition to our own cybersecurity risks, any proposed Business combination target may have been subject to, or may in the future be subject to, cybersecurity incidents.


text: Risk Management and Strategy The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We maintain cybersecurity insurance coverage that provides protection against potential losses arising from certain cybersecurity incidents. In addition, we have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: Strive, Inc.

ticker: ASST


text: We have integrated cybersecurity risk management into our risk management processes. This integration is intended to ensure that cybersecurity considerations are part of our decision-making processes. We continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. We have adopted the standard 2FA (two factor authentication)


text: for all our eData access (emails, online storage, etc.). In addition, all our applications and third-party applications have timed, authentication and environmental disposable cookie processes that force every user to reauthenticate their credentials. Our business transactional data includes dumb access controls that are vendor-specific, a set or specified range of costs, faceless entry point, and a unique 4FA (four factor authentication) process, protecting access to our banking and application systems.


text: Moreover, our commitment to data security extends beyond industry standards through the implementation of advanced access controls. We have developed a sophisticated access control system, referred to as "dumb access controls," which limits access to only specific vendors within a predefined range of costs. This system operates through a faceless entry point with a unique 4FA process, ensuring that access to sensitive banking or application systems is strictly controlled and virtually nonexistent for unauthorized entities. These comprehensive security measures not only protect our business transactional data but also uphold the integrity and confidentiality of our systems and information assets.


text: Recognizing the complexity and evolving nature of cybersecurity threats, we use risk management systems developed and tested by external experts, including cybersecurity assessors, consultants, and auditors. These risk management systems enable us to leverage specialized knowledge and insights as part of our cybersecurity strategies and processes. These systems are assessed and maintained with the assistance of third-party service providers, including a Technology Consultant engaged by the Company.


text: Overseeing Third-Party Risk Because we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes regular assessments by our Chief Technology Officer. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.

stage1Category: Third-Party Risk


text: The Company's Chief Technology Officer, Chief Operating Officer, and Technology Consultant are primarily responsible for assessing, monitoring and managing our cybersecurity risks. Our Chief Technology Officer must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. The Chief Technology Officer provides briefings on cybersecurity threats and related risks to our Chief Executive Officer on a regular basis. Our Chief Technology Officer has nine years of experience in the field of information technology. The Chief Technology Officer oversees and tests our compliance with standards, remediates known risks, and leads our employee training program. The Company's Chief Technology Officer and Technology Consultant have extensive experience in cybersecurity and possess the necessary knowledge, skills, background, and experience.


text: Monitoring Cybersecurity Incidents The Company's Chief Technology Officer and Technology Consultant are continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. The Chief Technology Officer and Technical Consultant implement and oversee processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the Chief Technology Officer and Technical Consultant will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our initial public offering. In addition to our own cybersecurity risks, any proposed business combination target may have been subject to, or may in the future be subject to, cybersecurity incidents.

companyName: Plum Acquisition Corp, IV

ticker: PLMK


text: Risk Management and Strategy Identifying, assessing and managing material cybersecurity threats is important to our operations and business strategy. We have established policies and procedures that are designed to prioritize the safeguard of our information systems. These procedures help identify potential vulnerabilities and manage risks from unauthorized incidents within our information systems that may result in adverse effects on data residing within. We conduct periodic and ad-hoc assessments that are managed by third party information technology providers, to identify potential cybersecurity threats.

companyName: Capstone Holding Corp.

ticker: CAPS


text: Upon completion of these risk assessments, the third-party information technology providers help the company assess how to reconfigure or implement additional procedures to mitigate any potential cybersecurity threats.


text: Risks from Cybersecurity Threats We do not currently believe there are any cybersecurity threats or vulnerabilities that would have materially impaired our operations or financial conditions during the fiscal year ended December 31, 2024.


text: Cybersecurity Governance It is the responsibility of our board of directors to monitor and assess potential strategic risk exposure. Our board of directors administers its oversight function as a whole, as well as through the Audit Committee. Our executive management team informs the Audit Committee on cybersecurity risks periodically, with a minimum frequency of once per year.


text: Risk management and strategy We rely on our technology network infrastructure and information systems to operate our business, interact with vendors and customers, and collect and make payments, among other functions.

companyName: USA Rare Earth, Inc.

ticker: USAR


text: Our internally developed infrastructure and systems, as well as those systems and processes provided by third-party vendors, may be susceptible to damage or interruption from cybersecurity threats and incidents, which include any unauthorized access to our information systems that may result in adverse effects on the confidentiality, integrity or availability of such systems or related information.


text: Such attacks have become more sophisticated over time, especially as threat actors have become increasingly well-funded by or themselves include governmental actors with significant means. We expect that the sophistication of cyber-threats will continue to evolve as threat actors increase their use of AI and machine-learning technologies. The Company experiences cyber threats in the normal course of its business, and computer viruses, hackers, employee misconduct and other external hazards could expose our information systems to security breaches, cybersecurity incidents or other disruptions, any of which could materially and adversely affect our business. Refer to Item 1A. Risk Factors, for additional details on cybersecurity risks that could potentially materially affect the Company.


text: We manage our risks from cybersecurity threats through our overall enterprise risk management process, which is overseen by the Board. Our cybersecurity risks are considered individually as part of our enterprise risk management process alongside other risks, and priorities and discussed with our Board. The Company seeks to prioritize the management of cybersecurity risk and the protection of confidential information and systems. Under the supervision of the Chief Executive Officer (" CEO ") and VP of Business Operations and Strategy, we work to identify all computing assets including hardware, software, and network infrastructure in order to conduct a risk assessment. We consider threats that may originate from both internal and external sources and maintain technical security controls internally. We are putting in place plans for our employees to receive mandatory recurring cybersecurity training and phishing exercises.


text: The Company's VP of Business Operations and Strategy reports directly to the CEO and leads the Information Technology team (collectively, the " IT Security Team ").


text: The IT Security Team is responsible for the strategic oversight of cybersecurity risk management and strategy including the identification and assessment of cybersecurity threats and incidents. Periodically, the Company's VP of Business Operations and Strategy is also responsible, alongside the Chief Financial Officer (" CFO ") and senior management, to keep the Audit Committee of the Board of Directors informed and briefed with respect to cybersecurity risks and risks. Our VP of Business Operations and Strategy has extensive experience of over 20 years in various IT roles across a range of cyber technologies, processes and strategies and is supported by the IT Security Team and the wider IT team, to support the Company's cyber risk management processes, including the prevention, detection and mitigation of cybersecurity threats and incidents, and any required response to and remediation of such cybersecurity threats or incidents.


text: The Audit Committee is responsible for providing governance and oversight over the Company's operational cybersecurity program, risk management and incident response on behalf of the Board. On a periodic basis, management will report the results of any risk assessments, including the evaluation of any cybersecurity risks, and the actions that the Company has taken to mitigate these risks. This includes assessing the measures and controls in place to mitigate cybersecurity risks and providing oversight of the response of any significant cybersecurity threats and incidents.


text: The manner in which we store and/or transmit sensitive data in connection with our payment processing solutions is an important part of how we operate and plan to operate. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees and violation of data privacy or security laws.

companyName: Innovative Payment Solutions, Inc.

ticker: IPSI


text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified through review by our internal information technology governance, risk and compliance policies. To defend, detect and respond to cybersecurity incidents, we, among other things: may conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes.


text: Our risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from IPSIPay Express and third parties like OpenPath, EfinityPay, vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party risks when handling and/or processing our employee, business or customer data.


text: We are a special purpose acquisition company with no business operations. Since our Initial Public Offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there are any. In fiscal year 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

companyName: Ribbon Acquisition Corp.

ticker: RIBB


text: Capital Corporation (the "Company") has processes in place to assess, identify, and manage material risks from cybersecurity threats. The Company's business is dependent on the communications and information systems of House Hanover, LLC (the "Investment Adviser") and other third-party service providers. The Investment Adviser manages the Company's day-to-day operations and has implemented a cybersecurity program that applies to the Company and its operations. Investment Adviser has instituted a cybersecurity program designed to identify, assess, and manage cyber risks applicable to the Company.

companyName: PRINCETON CAPITAL CORP

ticker: PIAC


text: The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Company relies. The Investment Adviser actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Company.


text: Company relies on the Investment Adviser to engage external experts, including cybersecurity assessors, consultants, and auditors, to evaluate cybersecurity measures and risk management processes, including those applicable to the Company. The Company relies on the Investment Adviser's risk management program and processes, which include cyber risk assessments.


text: Company depends on and engages various third parties, including suppliers, vendors, and service providers, to operate its business. The Company relies on the expertise of risk management, legal, information technology, and compliance personnel of the Investment Adviser when identifying and overseeing risks from cybersecurity threats associated with the Company's use of such entities.


text: board of directors of the Company ("Board") provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. The Board receives periodic updates from the Chief Compliance Officer ("CCO") of the Company, who also serves as Chief Compliance Officer of the Investment Adviser, regarding the overall state of the Investment Adviser's cybersecurity program, information on the current threat landscape, and briefing on material risks from cybersecurity threats and material cybersecurity incidents impacting the Company.


text: Company's Management, including the Company's CCO, manages the Company's cybersecurity program, under the supervision of the Company's Audit Committee. The CCO of the Company oversees the Company's risk management function generally and relies on the Investment Adviser to assist with assessing and managing material risks from cybersecurity threats. The Company's CCO has been responsible for this oversight function as CCO to the Company for over 7 years and has worked in the financial services industry for over 25 years, during which time the CCO has gained expertise in assessing and managing risks applicable to the Company.


text: of the Company is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with risk management, legal, information technology, and/or compliance personnel of the Investment Adviser.


text: potential impact of risks from cybersecurity threats on the Company are assessed on an ongoing basis, and how such risks could materially affect the Company's business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, the Company has not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that the Company believes have materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, operational results, and financial condition.


text: are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Semnur Pharmaceuticals, Inc.

ticker: SMNR


text: We acknowledge the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. While we are in the process of enhancing our cybersecurity practices, we are committed to continually improving and adapting to evolving threats to maintain a high standard of protection.

companyName: reAlpha Tech Corp.

ticker: AIRE


text: We have developed and implemented a cybersecurity program that seeks to ensure the confidentiality, integrity, and availability of our information assets, including its critical systems. We use information security management standards like ISO 27001 as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.


text: We are actively integrating cybersecurity risk management into our broader enterprise risk management framework. This integration is designed to promote a company-wide culture of cybersecurity awareness and risk management. Our risk management team, in collaboration with external consultants, is assessing and addressing cybersecurity risks in alignment with our operational and business needs. This ongoing integration ensures that cybersecurity considerations are increasingly embedded in our decision-making processes at every level.


text: Our cybersecurity framework draws upon the National Institute of Standards and Technology ("NIST") cybersecurity framework, which provides guidance for identifying, assessing, and managing cybersecurity risks. While we are in the early stages of fully implementing this framework, we are committed to following its principles as we strengthen our cybersecurity measures to protect both our digital and physical assets.


text: Recognizing the evolving nature of cybersecurity threats, we have been engaging with external experts, including cybersecurity assessors, consultants, and auditors, to assess and enhance our risk management systems. These third parties are assisting us with evaluating our cybersecurity posture, recommending improvements, and advising on the implementation of best practices. As we progress, we will continue leveraging these external insights to enhance our cybersecurity strategies and ensure alignment with industry standards.


text: We understand the potential risks associated with third-party service providers, and we are working on implementing stronger oversight processes. While we have initiated security assessments for our third-party providers, we are in the process of enhancing these efforts to include more frequent evaluations and ongoing monitoring. This will help mitigate the risk of security incidents originating from third parties.


text: To date, we have not encountered cybersecurity incidents that have materially impaired our operations or financial position. However, we are proactively preparing for the possibility of cybersecurity risks, ensuring that our systems are protected against potential threats in the future.


text: Our board of directors understands the critical nature of cybersecurity and is closely involved in overseeing our efforts to mitigate cybersecurity risks. We are in the process of formalizing governance structures and oversight mechanisms to ensure that these risks are managed effectively, with the aim of strengthening our operational integrity and enhancing stockholder confidence.


text: The Chief Executive Officer ("CEO"), Chief Operating Officer ("COO"), and Chief Financial Officer ("CFO") are actively involved in managing cybersecurity risks. They receive regular updates, which include an overview of the current cybersecurity landscape, the status of ongoing initiatives, and compliance with regulatory requirements. We are establishing structured processes for ongoing communication among the executive team to ensure they remain informed and involved in key cybersecurity decisions.


text: We are committed to monitoring cybersecurity risks and are in the process of implementing enhanced monitoring systems. With the assistance of cybersecurity consultants, we are refining our cybersecurity policies and controls, including regular audits and the deployment of advanced security measures such as Multi-Factor Authentication ("MFA") and stronger email filtering protocols. In addition, we are continuing to develop incident response plans, communication protocols, and disaster recovery plans to be prepared for any potential cybersecurity incidents.


text: The COO regularly informs the CEO and CFO on cybersecurity risks and initiatives. Significant cybersecurity matters will be escalated to the audit committee for review, where management will provide detailed updates on risk assessments, incident response, and the effectiveness of our cybersecurity strategies. The audit committee will continue to evaluate the progress of our cybersecurity initiatives and offer guidance to help strengthen our efforts.


text: are not presently engaged in, and we will not engage in, any operations until after the consummation of the Initial Business Combination that could face material cybersecurity threats. However, we do depend on the digital technologies of third parties, including information systems, infrastructure and cloud applications and services. Any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.

companyName: ESH Acquisition Corp.

ticker: ESHA


text: the event of a cybersecurity incident impacting us, the Board of Directors will address and mitigate any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.


text: Risk Management and Strategy We operate in the technology and general wellness, continuous glucose and blood pressure monitoring sectors, which are subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft fraud extortion harm to employees or customers violation of privacy laws and other litigation and legal risk and reputational risk. We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems.

companyName: Corvex, Inc.

ticker: MOVE


text: Our processes also include assessing cybersecurity threat risks associated with our use of third-party services providers in normal course of business use. Third-party risks are included within our cybersecurity risk management processes discussed above. In addition, we assess cybersecurity considerations in the selection and oversight of our third-party services providers, including due diligence on the third parties that have access to our systems and facilities that house systems and data.


text: Our business depends on the availability, reliability, and security of our information systems, networks, data, and intellectual property. Any disruption, compromise, or breach of our systems or data due to a cybersecurity threat or incident could adversely affect our operations, customer service, product development, and competitive position. They may also result in a breach of our contractual obligations or legal duties to protect the privacy and confidentiality of our stakeholders. Such a breach could expose us to business interruption, lost revenue, ransom payments, remediation costs, liabilities to affected parties, cybersecurity protection costs, lost assets, litigation, regulatory scrutiny and actions, reputational harm, customer dissatisfaction, or harm to our vendor relationships.


text: Cybersecurity Governance and Oversight Our board of directors oversees our cybersecurity risk management as part of its general oversight function. We maintain security controls that are continuously reviewed to protect against emerging cyber threats. At the Company level, we employ third party consultants to lead our efforts developing, implementing and maintaining these security controls and monitoring and minimizing the risks related to cybersecurity threats. These consultants regularly report to senior management, who is responsible for keeping our board of directors apprised of all material developments. Our Vice President of Engineering is primarily responsible for the cybersecurity controls and risk mitigation with respect to the products and services we offer our customers and those in development, including satisfying the rigorous requirements needed to achieve FDA clearance when applicable. Our Vice President of Engineering reports directly to our CEO and provides senior management with periodic updates regarding cybersecurity matters concerning our products and services.


text: To manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we undertake the below listed activities: Implement third party cybersecurity testing (including penetration testing) of any new product feature developed prior to release; Maintain firewall and virus protection software; and Maintain a cybersecurity insurance policy.


text: Our cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to designated employees depending on the circumstances, including in some cases to our executive team. The board of directors receives periodic reports from management concerning our cybersecurity risk management program.


text: we are not aware of any cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations or financial position.


text: We do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. We depend on the digital technologies of third parties, and any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data and could have a material adverse effect on our business, financial condition or reputation. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. As a company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

companyName: Planet Green Holdings Corp.

ticker: PLAG


text: Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. Our management will promptly report to the board of directors on incidents of material cybersecurity risks facing us and any third parties and the measures that may be taken to mitigate such risks. As of the date of this annual report, we have not encountered any cybersecurity incidents that have materially affected, or that we believe are reasonably likely to materially affect, us, including our business strategy, results of operations or financial condition. We do, however, face risks from cybersecurity threats.


text: We face risks associated with cybersecurity. For additional details on risks from cybersecurity threats, please refer to "Item 1A. Risk Factors - The occurrence of security breaches and cyber-attacks could negatively impact our business." and "- Our business may be subject to a variety of PRC laws and other obligations regarding cybersecurity and data protection."

companyName: IT TECH PACKAGING, INC.

ticker: ITP


text: The purpose of our cybersecurity program is to assess, identify, manage and mitigate cybersecurity risk while supporting the achievement of our business objectives. Under our comprehensive risk management program, the Board of Directors of the Company maintains oversight of the most significant risks facing the Company, including cybersecurity risks, while senior management is responsible for the identification and prioritization of risks that are material to our business, corresponding risk-mitigation efforts and day-to-day management of our risk management program. The full Board of Directors retains oversight over management's cybersecurity efforts. At least annually, and often more frequently, our Board of Directors receives cybersecurity briefings from senior executives, including, when appropriate, executives focused on cybersecurity matters.


text: Our companywide cybersecurity policy sets the framework for our approach to cybersecurity. Each business unit and our corporate headquarters designates individuals with appropriate qualifications and experience to be responsible for addressing cybersecurity matters, including assessing, identifying and managing risks from cybersecurity threats, with a direct reporting line to senior management. Under our approach to cybersecurity, each business unit designs and operates its own information and cybersecurity program tailored to its market, customer requirements, regulatory requirements and threats. Our cybersecurity policy and procedures are designed to ensure senior management receives timely and adequate information regarding cybersecurity matters, including threats and incident response, as appropriate to the matter. Our policies and procedures are also designed to oversee and identify material cybersecurity risks related to third-party vendors and service providers.


text: As part of our approach to cyber risk management, we regularly perform internal audits of internal processes and controls relating to cybersecurity. From time to time, as appropriate under our overall cybersecurity program, we engage third-party experts to support the assessment of cyber related risks, including to conduct cyber penetration testing.


text: To its knowledge, the Company has not experienced a material cybersecurity breach within the last three years, nor identified any risks from cybersecurity threats that have materially affected us, including our business strategy, results of operations or financial condition.


text: Risk Management and Strategy The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: Signing Day Sports, Inc.

ticker: SGN


text: We have integrated cybersecurity risk management into our risk management processes. This integration is intended to ensure that cybersecurity considerations are part of our decision-making processes. We continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.


text: Engaging Third Parties on Risk Management Recognizing the complexity and evolving nature of cybersecurity threats, we plan to engage external experts, including consultants and auditors, in evaluating and testing our risk management systems. These services will enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third parties is expected to include annual audits, ongoing threat assessments, and regular consultations on security enhancements.


text: Overseeing Third-Party Risk Because we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: Risks from Cybersecurity Threats We have not encountered cybersecurity challenges that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. Board of Directors Oversight Our board of directors oversees the management of risks associated with cybersecurity threats.


text: Management's Role Managing Risk The Company's management is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program.


text: The Company's management is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Reporting to Board of Directors Significant cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.


text: Risk management and strategy We are committed to continuously assessing cybersecurity risks, including the prevention, detection, and response to unauthorized actions within our information systems that may compromise the confidentiality, integrity, or availability of our data or systems. We are using Layer 7 firewall solutions which monitor web traffic and data leaks which may occur as well as a centralized automatic antivirus/antimalware/patch system in order to make sure that all servers and clients hold the latest patches in order to avoid security breaches. We have developed our own internal cloud system to avoid dependence on external parties and its email server is hosted on this cloud system; consequently, we do not rely on third party solutions that may have a negative impact on security and reliability of data. Our data is stored daily on high quality magnetic tapes to ensure recovery in case of a serious malfunction. On a monthly basis, all the tapes are being transferred to a fireproof safe location and are replaced with new tapes.

companyName: Elvictor Group, Inc.

ticker: ELVG


text: As we grow, we plan to refine our cybersecurity strategy in line with global best practices and standards. Importantly, our Board receives regular updates from our Chief Operating & Technology Officer, Christodoulos Tzoutzakis, of potential cybersecurity risks and monitors these risks closely. All potential incidents, regardless of their materiality, are required to be reported immediately to the Board. To date, our proactive risk management has allowed us to navigate cybersecurity challenges without material impairment to our operations or financial condition.


text: Acknowledging the critical importance of cybersecurity, our management and Board are dedicated to maintaining the trust and confidence of our business partners and employees. This includes managing cybersecurity risks as an integral component of our overall risk management framework. While cybersecurity responsibility is shared across all employees, our Board plays a pivotal role in the oversight of our risk management processes, including cybersecurity threats. Our executive officers manage the day-to-day material risks we face, adopting a cross-functional approach to address cybersecurity risks by identifying, preventing, and mitigating cybersecurity threats and effectively responding to incidents when they occur.


companyName: Stran & Company, Inc.

ticker: SWAG


text: Overall Risk Management Information technology is important to our business operations and we are committed to protecting the privacy, security and integrity of our data, as well as our employee and customer data. This program is integrated into the Company's overall enterprise risk management process.


text: Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. Further, a cyber incident impacting our systems or a third-party's systems could subject us to business, regulatory, litigation and reputational risk, which could have a negative effect on our business, results of operations and financial condition. For more information on our cybersecurity related risks, see Item 1A Risk Factors of this Annual Report.

companyName: Dominari Holdings Inc.

ticker: DOMH


text: We monitor and update our information technology networks and infrastructure to prevent, detect, address and mitigate risks associated with unauthorized access, misuse, computer viruses and other events that could have a security impact. Additionally, to protect and secure sensitive data such as customer information, we employ multi-factor authentication, a suite of security tools, systems monitoring and alerting, audit logs, and controls across our major systems, corporate devices, and business processes. Our cybersecurity process is designed to assess, identify, prevent, and manage cybersecurity risks and threats, as well as identify, contain and respond to cybersecurity incidents. This process includes a variety of activities, such as company-wide security awareness training, including regular phishing simulations, acceptable use training, self-assessments, and other targeted training throughout the year as appropriate. These cybersecurity trainings provide employees the opportunity to gain an understanding of the various forms of cybersecurity incidents and enable our employees to handle and report any suspicious activity or threat.


text: To date, our approach to cybersecurity has been effective in protecting the confidentiality, integrity, and availability of our information; however, we cannot guarantee that its efforts will be successful in preventing all cybersecurity incidents. Further, we currently maintain a cyber insurance policy that provides coverage for security breaches; however, such insurance may not be sufficient in type or amount to cover us against claims related to security breaches, cyber-attacks and other related breaches.


text: Engaging Third Parties on Risk Management Recognizing the complexity and evolving nature of cybersecurity threats, we leverage the expertise of a managed service provider, and when warranted will engage with independent third parties in evaluating and testing our risk management systems. These service providers enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies meet generally accepted industry best practices. Our Chief Information Officer also performs ongoing review of current practices to further ensure cybersecurity.


text: Overseeing Third-Party Risk Because we are aware of the risks associated with third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes regular assessments by our Chief Information Officer. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: The Company's Chief Information Officer is primarily responsible for assessing, monitoring and managing our cybersecurity risks. The Chief Information Officer must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks.


text: The Chief Information Officer provides briefings on cybersecurity threats and related risks to the Chief Executive Officer on a regular basis. Our Chief Information Officer has had responsibility over cybersecurity, data privacy and classification, incident response, disaster recovery, and business continuity in a number of positions in the field of information technology. The Chief Information Officer oversees and tests our compliance with standards, remediates known risks, and leads our employee training program.


text: Monitoring Cybersecurity Incidents The Chief Information Officer is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. The Chief Information Officer implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the Chief Information Officer will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term strategies for remediation and prevention of future incidents.


text: Management and Strategy We have developed and maintain a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: RemSleep Holdings Inc.

ticker: RMSL


text: We regularly review our cybersecurity defenses to assess our vulnerability to cybersecurity attacks from viruses, malware and more sophisticated and targeted cyber-related attacks such as hackers looking to demand ransomware or access our systems to obtain information and data, as well as our vulnerability to cybersecurity failures resulting from human error and technological errors. We rely upon internal information technology ("IT") personnel working in conjunction with specialized outside security consultants on a day-to-day basis to conduct reviews and upgrade our systems when determined to be necessary.

companyName: AIR INDUSTRIES GROUP

ticker: AIRI


text: Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations. Our risk management, legal, and compliance personnel oversee and identify, including through a third-party cybersecurity service provider, material risks from cybersecurity threats associated with our use of such entities.


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Our Board of Directors oversees our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. Management reports to our Board of Directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential.


text: One of the key functions of our Board of Directors is informed oversight of our various processes for managing risk. An overall review of risk is inherent in our Board of Directors ongoing consideration of our long-term strategies, transactions and other matters presented to and discussed by the Board of Directors. This includes a discussion of the likelihood and potential magnitude of various risk.


text: At this time, the Company does not have formal processes in place for assessing, identifying, and managing material risks from cybersecurity threats. Our approach to cybersecurity is currently informal and primarily reactive, involving basic security measures such as: Basic Security Software: We use standard antivirus and anti-malware software for protection against common threats. Password Policies: Simple password policies are in place to protect access to our systems.

companyName: T3 Defense Inc.

ticker: DFNS


text: However, we recognize the importance of cybersecurity and are in the process of developing more robust strategies. We plan to: Develop a Cybersecurity Framework: Establish a formal risk assessment process to identify vulnerabilities. Engage Cybersecurity Expertise: Consider hiring or consulting with cybersecurity professionals to guide our strategy. Implement Training: Begin employee training on cybersecurity awareness to prevent common threats like phishing.


text: We acknowledge that the absence of comprehensive cybersecurity processes could potentially expose the company to risks, which might materially affect our operations, financial condition, or strategic decisions in the future. We are committed to improving our cybersecurity posture as our resources allow.


text: Board Oversight: Currently, our sole director does not have a formal structure for overseeing cybersecurity risks. We plan to review this oversight in the near future to ensure appropriate governance is established.


text: Management's Role: Day-to-day management of cybersecurity is handled by our IT staff, who do not have specialized training in cybersecurity. We are considering enhancing this role or outsourcing to professionals with specific cybersecurity expertise.


text: Expertise: Our current management and Board do not have in-depth cybersecurity expertise. We are considering educational opportunities or consulting to address this gap.


text: Material Effect from Cybersecurity Threats To date, no known cybersecurity incidents have materially affected our business strategy, results of operations, or financial condition. However, due to our limited cybersecurity measures, we acknowledge that our company could be at higher risk of material impact from cybersecurity threats. We are actively working to mitigate these risks.


text: Our overall strategy in combatting cybersecurity risks includes a variety of measures, including: use of antivirus software, virtual private networks, email security, as well as other software and system-wide measures such as multi-factor of updates and patches as they become available from our software suppliers and consultants and maintaining the current versions of major software to reduce the exposure to vulnerabilities;


text: use of third-party services to conduct mandatory online training for all employees regarding identifying and avoiding cyber-security the review of the security procedures used by third parties that may host or otherwise have access to our systems;


text: In the normal course of business, we may collect and store personal information and other sensitive information, including proprietary and confidential business information, trade secrets, intellectual property, patient information, sensitive third-party information and employee information. To protect this information, our existing cybersecurity policies require continuous monitoring and detection programs, network security precautions, encryption of critical data and in-depth security assessments of vendors. We maintain various protections designed to safeguard against cyberattacks, including firewalls and virus detection software. We have established and regularly test our disaster recovery plan, and we protect against business interruption by backing up our major systems. In addition, we periodically scan our environment for any vulnerabilities, perform penetration testing and engage third parties to assess the effectiveness of our data security practices. Our information technology (" IT ") team is responsible for these ongoing monitoring and detection activities.

companyName: SS Innovations International, Inc.

ticker: SSII


text: Our cybersecurity program is primarily overseen by our Head-Server and Network Administrator, who works closely with our information technology team and our senior management to develop and advance our cybersecurity strategy, as well as to respond to cybersecurity incidents. Our Head-Server and Network Administrator reports to our Chief Operating Officer on cybersecurity matters and collaborates with stakeholders to assess risks and implement strategies.


text: The governance of our cybersecurity risks involves active and informed participation from our management team, our IT team and our board of directors. This oversight includes briefings by our IT team on the nature of the risks we face and the steps we are taking to mitigate these risks, as well as immediately reporting any significant cybersecurity incident that occurs to management and the board of directors.


text: We have engaged a specialized consulting firm from India to enhance and develop the cybersecurity framework for our products with the aim of protecting sensitive patient data and proprietary device information from cyber threats and ensuring compliance with the latest cybersecurity standards including, HIPPA, FDA regulations, IEC 62443, and NIST guidelines for medical devices.


text: We have not experienced a cybersecurity incident that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. We continue to monitor potential cybersecurity threats and incorporate findings into our risk management strategies.


text: The Company has a cybersecurity strategy designed to protect our information systems and data from an evolving cyber-threat landscape. Our cybersecurity program, administered by our Chief Financial Officer and overseen by the Audit Committee, has the support of executive leadership and the Board of Directors, and the Company continues to invest in cybersecurity to protect the Company's systems.

companyName: ADAPTIN BIO, INC.


text: Our cybersecurity program focuses on all areas of our business, including cloud-based environments, devices used by employees and contractors, facilities, networks, applications, vendors, disaster recovery, business continuity and controls and safeguards enabled through business processes and tools. We continuously monitor for threats and unauthorized access. We learn of security threats through automated detection solutions as well as reports from users and business partners. We draw on the knowledge and insight of external cybersecurity experts and vendors and employ an array of third-party tools to secure our information infrastructure and protect systems and information from unauthorized access.


text: As of the date of this Report, we have not encountered any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: We maintain a comprehensive process for identifying, assessing, and managing material risks from cybersecurity threats (as such term is defined in Item 106(a) of Regulation S-K) as part of our broader risk management system and processes. The cybersecurity risk management system involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which we rely. We actively monitor the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats. We obtain input, as appropriate, for our cybersecurity risk management program on the security industry and threat trends from consultants, cybersecurity assessors, auditors and other third parties to gather certain insights designed to identify and assess material cybersecurity threat risks, their severity and potential mitigations. We depend on and engage various third parties, including suppliers, vendors, and service providers. Our risk management, legal, information technology, and compliance personnel identify and oversee risks from cybersecurity threats associated with our use of such entities. Any incident assessed as potentially being or potentially becoming material is immediately escalated for further assessment, and then reported to Mr. Blattner, our designated member of our Board of Directors.


text: Mr. Blattner has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and report any findings and recommendations, as appropriate, to the full Board of Directors for consideration. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with the designated member of the Board of Directors.


text: We are not aware of any vulnerability inherent in our systems or malware embedded in our systems that are likely to would materially affect, or are reasonably likely to materially affect, our operations. The Company is in the process of implementing additional training and is in the process of engaging third parties to perform various testing as indicated above.


text: Day-to day management of cybersecurity threats is conducted by our IT department in conjunction with outside service providers, which is charged with identifying and reporting threats to senior management. On a quarterly basis, cybersecurity is reviewed by our Chief Executive Officer and Chief Financial Officer, who are expected to report to the Audit Committee.


text: The Audit Committee of our Board of Directors, which is composed of all non-employee directors, is responsible for oversight of our efforts to eliminate cybersecurity risks. The Audit Committee meets regularly with our Chief Executive Officer and Chief Financial Officer and, in turn, reports its finding to the Board of Directors.


text: We have processes for assessing, identifying, and managing material risks from cybersecurity threats. These processes are integrated into our overall risk management systems, as overseen by our Board, primarily through its Audit Committee. These processes also include overseeing and identifying risks from cybersecurity threats associated with the use of third-party service providers. We conduct risk assessments of certain third-party providers before engagement and have established monitoring procedures in an effort to assess and mitigate potential data security exposures originating from third parties. We from time to time engages third-party consultants, legal advisors, and audit firms in evaluating and testing our risk management systems and assessing and remediating certain potential cybersecurity incidents as appropriate.

companyName: OLB GROUP, INC.

ticker: OLB


text: Board of Directors The Audit Committee of our Board oversees, among other things, the adequacy and effectiveness of our internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The Audit Committee is informed of material risks from cybersecurity threats pursuant to the escalation criteria as set forth in our disclosure controls and procedures. Further, our management team reports on cybersecurity matters, including material risks and threats, to the Audit Committee. Our management team also provides updates annually or more frequently as appropriate to the full Board.


text: Under the oversight of the Audit Committee, and as directed by our Chief Executive Officer, the Company's Systems Application Manager, is primarily responsible for the assessment and management of material cybersecurity risks and the Company's annual security audits to meet the payment industry expectations.


text: Our management team holds a regular cybersecurity and business continuity reviews to evaluate data security exposures, control effectiveness and necessary remediation actions. The Systems Application Manager is also supported by a third-party information technology consulting services provider who helps oversee our information technology systems and provides cross-functional support for cybersecurity risk management and facilitates the response to any cybersecurity incidents.


text: Our Systems Application Manager oversees our cybersecurity incident response plan and related processes that are designed to assess and manage material risks from cybersecurity threats. Our Systems Application Manager also coordinates with our legal counsel and third parties, such as consultants and legal advisors, to assess and manage material risks from cybersecurity threats. Our management team is informed about the effectiveness of the prevention, detection, mitigation, and remediation of cybersecurity incidents pursuant to criteria set forth in our incident response plan and related processes.


text: Our Audit Committee is responsible for overseeing the establishment and effectiveness of controls and other procedures, including controls and procedures related to the public disclosure of material cybersecurity matters. Our Systems Application Manager, or a delegate, informs the Chief Executive Officer of certain cybersecurity incidents that may potentially be determined to be material pursuant to escalation criteria set forth in our incident response plan and related processes. The CEO also notifies the audit committee chair of any material cybersecurity incidents.


text: As of the date of this Report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this Report. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factor included in the section entitled "Item 1A. Risk Factors" in this Report.


text: are in the process of developing a cybersecurity risk management program, consisting of cybersecurity policies, procedures, compliance and awareness programs to mitigate risk and to ensure compliance with security, availability and confidentiality trust principles. Following the completion of the development of our cybersecurity risk management program, the cybersecurity process will be integrated into our overall risk management system and process, and, initially, will be solely internally managed. Management is responsible for identifying risks that threaten achievement of the control activities stated in the management's description of the services organizations systems.

companyName: Charging Robotics Inc.

ticker: CHEV


text: Management has started to implement a process for identifying relevant risks that could affect the organization's ability to provide secure and reliable service to its users. The risk assessment will occur annually, or as business needs change, and covers identification of risks that could act against the company's objectives as well as specific risks related to a compromise to the security of data.


text: Most of the information generated and collected by us is stored and maintained by third-party vendors and service providers. We believe that each of these providers has its own cybersecurity protocols to which our management believes to be adequate for protecting our files in their possession. For more information about these risks, please see "Item 1.A – Risk Factors – Risks Related to Our Business and Industry – Significant disruptions of our information technology systems or breaches of our data security could adversely affect our business." in this annual report.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function and oversees cybersecurity risk strategy and governance and other information technology risks. Our Chief Executive Officer and Chief Financial Officer are responsible for assessing and managing cybersecurity risk, and providing briefings regarding the assessment and management of such risk to the Board of Directors. Although our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with a third party information technology expert referred to below, enables them to effectively assess and manage material risks from cybersecurity threats.


text: The Company retained an information technology expert third party company to assist in managing relevant risks. In particular, the Company outsources its information technology function and monitoring to a third party provider whereby it benefits from a professionally managed network monitoring, management, maintenance, detection and response system and a 24/7 security operations center with both onsite and remote support services. Any cybersecurity incident would be reported to the Company promptly by our third party consultant and material and potentially material incidents would be assessed by management and the Board of Directors for remediation and future prevention and detection.