text: Board of Directors, as a whole and at the committee level, has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. The Board of Directors receive updates on cybersecurity and information technology matters and related risk exposures from our CISO and CTO as well as other members of the senior leadership team.


text: are a SPAC with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our IPO.

companyName: Technology & Telecommunication Acquisition Corp

ticker: TETEF

secItem: Item 1C


text: Company employs several strategies for assessing, identifying, and managing material risks from cybersecurity threats. Components of this strategy include the use of industry standard traffic monitoring tools, and training users to detect, report, and prevent unusual behavior.

companyName: BLUE BIOFUELS, INC.

ticker: BIOF

stage1Category: Risk Management Process

stage1Method: unanimous


text: our IT consulting firm, we employ continuous monitoring mechanisms to detect and respond to cybersecurity threats promptly. Regular reports are generated as needed for management and the board, providing insights into our cybersecurity posture, incidents, and remediation efforts.


text: We conduct regular assessments and testing to ensure the effectiveness of these controls, especially those related to the protection of financial information. The implementation and management of these processes are integrated with the Company's overall operational risk management processes that seeks to limit our exposure to unnecessary risks across our operations.


text: cybersecurity program is overseen by the Chief Financial Officer (CFO), who reports directly to the Chief Executive Officer (CEO) and updates the Board of Directors on cybersecurity matters.

stage1Category: Management Role


text: employees receive regular training on cybersecurity best practices, emphasizing the protection of financial information. We foster a culture of cybersecurity awareness and responsibility throughout the organization.


text: maintain a comprehensive incident response plan that outlines the steps to be taken in the event of a cybersecurity incident. This plan includes procedures for promptly reporting material incidents to the SEC, as required, and for communicating with affected stakeholders.


text: Upon discovery of a cybersecurity incident, the identifying party immediately notifies the Company's CFO. The CFO activates the incident response plan to include the following: Gather preliminary information about the cybersecurity incident. notifies the CEO and the Board of Directors of the cybersecurity threat. CFO allocates resources for disclosure if determined to be a material cybersecurity event. CFO consults with cybersecurity consultants and other involved parties to identify the undesirable effects of the cybersecurity incident. CFO develops a recommendation for determination of materiality. disclosure is required, the material incident disclosure plan is executed by the CFO.


text: have made significant investments in modernizing, streamlining, and simplifying our technology footprint to both enhance customer experience and strengthen our internal security controls.

companyName: Greenlane Holdings, Inc.

ticker: GNLN


text: Risk Management and Strategy We regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities, and test those systems pursuant to our cybersecurity policies, processes, and practices, which are integrated into our overall risk management program. To protect our information systems from cybersecurity threats, we use various security tools that are designed to help identify, escalate, investigate, resolve, and recover from security incidents in a timely manner. Our board of directors assesses risks based on probability and potential impact to key business systems and processes as part of our overall risk management program overseen by the board of directors. Risks that are considered high are incorporated into our overall risk management program. We collaborate with third parties to assess the effectiveness of our cybersecurity prevention and response systems and processes and to assist in the identification, verification, and validation of cybersecurity risks, as well as to support associated mitigation plans when necessary. We have also developed a third-party cybersecurity risk management process to conduct due diligence on external entities, including those that perform cybersecurity services. Cybersecurity threats, including those resulting from any previous cybersecurity incidents, have no t materially affected our Company, including our business strategy, results of operations, or financial condition. Refer to the risk factor captioned "Cyber security risks and the failure to maintain the integrity of company, employee or guest data could expose us to data loss, litigation and liability, and our reputation could be significantly harmed." in Part I, Item 1A. "Risk Factors" for additional details regarding cybersecurity risks and potential impacts on our business.

companyName: Sintx Technologies, Inc.

ticker: SINT


text: Our board of directors oversees our risk management process, including as it pertains to cybersecurity risks, which focuses on the most significant risks we face in the short-, intermediate-, and long-term timeframe. Management is responsible for the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks. Meetings of our board of directors include discussions and presentations from management regarding specific risk areas throughout the year, including, among others, those relating to cybersecurity threats, and reports from management on our enterprise risk profile on an annual basis. The board of directors reviews our cybersecurity risk profile with management on a periodic basis using key performance and/or risk indicators. These key performance indicators are metrics and measurements designed to assess the effectiveness of our cybersecurity program in the prevention, detection, mitigation, and remediation of cybersecurity incidents. We take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and incidents.

stage1Category: Board Governance


text: face cybersecurity risks due primarily to our position in the industry and identity as a financial service company with potential for harm that could occur to us, our investors and our customers were we to suffer impacts of a material cybersecurity incident. We are committed to maintaining robust governance and oversight of these risks and to implementing mechanisms, controls, technologies, and processes designed to help us assess, identify, and manage these risks. While we have not, as of the date of this Annual Report, experienced a cybersecurity threat or incident that resulted in a material adverse impact or are reasonably likely to have material adverse impact on our business or operations, our business strategy, results of operations, or financial condition, there can be no guarantee that we will not experience such an incident in the future. In addition, the environment and threats are constantly evolving, thereby increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We only use industry leading third party software applications for our operations and we rely on their technology to assess potential cybersecurity threats. We seek to detect and investigate unauthorized attempts and attacks against our network and services which are also dependent on third parties (multiple law firms, banks, settlement and title entities) and their technology, and to prevent their occurrence and recurrence where practical through changes, updates and enhancements to our internal processes and tools. We have an internal process to consider the cybersecurity practices of our third-party service providers and we actively review their cybersecurity notices and alerts on an ongoing basis. Our assessment of risks associated with the use of third-party providers is part of our overall risk management framework. However, we remain potentially aim to incorporate industry best practices throughout our cybersecurity program. Our cybersecurity strategy focuses on implementing effective and efficient controls, technologies, and other processes to assess, identify, and manage material cybersecurity risks. Our cybersecurity program is designed to be aligned with applicable industry standards and is assessed periodically by independent subject matter expert third parties who hold industry leading certifications such as Certified Information Systems Security Professional (CISSP), GIAC Certified Intrusion Analyst (GCIA), and GIAC Certified Incident Handler (GCIH).

companyName: Shepherd's Finance, LLC

stage1Method: majority


text: have processes in place to identify, access, and address material cybersecurity threats and incidents with the help of the above noted expert third parties as needed. We monitor issues that are internally discovered or externally reported that may affect our business and have processes to assess those issues for potential cybersecurity impact or risk.


text: to our Audit Committee Charter, our Audit Committee is responsible for reviewing and assessing our risk assessment and risk management policies, including oversight of cybersecurity risk. Our risk assessment policy is utilized in making decisions with respect to company priorities, resource allocations, and oversight structures. Our Board of Managers, with the assistance of our Audit Committee and Technology Committee, regularly reviews our cybersecurity program with management and reports to the Board of Managers. Messrs. Wallach and Sheldon, both members of our Technology Committee and our Board of Managers, bring extensive experience in security governance, risk, and compliance, with prior leadership experience in public and private companies, where they closely worked with massive IT departments to handle with cybersecurity risks, information technology and data protection. Cybersecurity reviews generally occur at least annually, or more frequently as determined to be necessary or advisable. We have an escalation process in place to inform senior management and the Board of Managers of material issues.


text: are subject to various cyber and other security threats, including attempts to gain unauthorized access to sensitive information and networks; virtual and cyber threats to our directors, officers, and employees; and threats to the security of our infrastructure and assets. To mitigate the threats to our business, we take a comprehensive approach to cybersecurity risk management. Our Board and our management oversee our risk management program, including the management of cybersecurity risks. We have established policies, standards, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats, including those discussed in our Risk Factors, and have integrated these processes into our overall risk management systems and processes. We have devoted financial and personnel resources to implement and maintain security measures to meet regulatory requirements and stakeholder expectations, and we intend to continue to make investments as may be required to maintain the security of our data and cybersecurity infrastructure.

companyName: BTCS Inc.

ticker: BTCS


text: cybersecurity risk management program ("cybersecurity program") is designed and assessed by leveraging the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"), customized to align with our entity size, risk profile, and industry best practices. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. Our cybersecurity program is an integral part of our broader Enterprise Risk Management (ERM) framework and business continuity efforts. By incorporating cybersecurity into our overall risk assessment and management processes, we aim to address interconnected risks that could impact critical operations, systems, and assets. This alignment allows us to proactively evaluate and prioritize cybersecurity risks in the context of broader organizational objectives and resilience planning, ensuring a comprehensive approach to safeguarding the Company's infrastructure and stakeholders.


text: key objectives for the Company's cybersecurity program are to implement and sustain effective security controls to stop intrusion attempts and to maintain and continuously improve its ability to respond to attacks and incidents. Success in achieving these objectives relies upon using quality technology solutions, cultivating and maintaining a team of skilled professionals, and continuously improving processes. Our cybersecurity program in particular focuses on the following key areas:


text: Assessment: We conduct risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments are designed to identify reasonably foreseeable internal and external material cybersecurity risks to our critical systems, information, products, services, and our broader Company-wide IT environment, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Risk assessments take into account information from internal stakeholders, known information security vulnerabilities, and information from external sources, including reported security incidents that have impacted other companies, industry trends, and evaluations by third parties and consultants as needed. The results of our assessments are used to develop initiatives to enhance our security controls, make recommendations to improve processes, and inform a broader Company-wide risk assessment that is then periodically reported to our Board and Audit Committee. Safeguards: We regularly assess and deploy technical safeguards designed to protect our information systems from cybersecurity threats. Such safeguards are regularly evaluated and improved based on vulnerability assessments, cybersecurity threat intelligence, and incident response experience.


text: Response and Recovery Planning: We have established a comprehensive incident response and recovery plan that guides our response in the event of a cybersecurity incident.


text: Risk Management: We have implemented a robust vendor risk management program, which is designed to identify and mitigate cybersecurity threats associated with our use of third-party service providers. Such providers are subject to security risk assessments at the time of onboarding, contract renewal, and upon detection of an increase in risk profile. We use a variety of inputs in such risk assessments, including information supplied by providers in response to questionnaires and meetings as well as information from third parties. In addition, we require our providers to meet appropriate security requirements, controls and responsibilities, and investigate security incidents that have impacted our third-party providers, as appropriate. We also obtain and review Systems and Organization Control ("SOC") reports from several of our key service providers.


text: Education and Awareness: Our policies require each of our employees to contribute to our data security efforts. We regularly remind employees and third-party contractors of the importance of handling and protecting data, including through privacy and security training to enhance employee awareness of how to detect and respond to cybersecurity threats. All employees and third-party contractors are directed to report to our senior management any irregular or suspicious activity that could indicate a cybersecurity threat or incident.


text: senior management team, led by our Chief Financial Officer and Chief Operating Officer, is responsible for assessing and managing our material risks from cybersecurity threats. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel;


text: threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.


text: Audit Committee considers cybersecurity risks and other information technology risks as part of its risk oversight function and evaluates our risk assessment and management policies, including periodic discussions with our senior officers. In addition, management updates the Board of Directors, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Our Audit Committee also meets at least quarterly with our independent registered accounting firm and communicates with them regarding any cybersecurity-related risks.


text: cybersecurity risk management program includes the following: assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;

companyName: DIH HOLDING US, INC.


text: RISK MANAGEMENT AND STRATEGY. NeurAxis has developed and implemented a cybersecurity framework intended to assess, identify and manage risks from threats to the security of our information, systems, products and network using a risk-based approach. The framework is informed in part by the National Institute of Standards and Technology (NIST) Cybersecurity Framework and International Organization for Standardization 27001 (ISO 27001) Framework, although this does not imply that we meet all technical standards, specifications, or requirements under the NIST or ISO 27001.

companyName: Neuraxis, INC

ticker: NRXS


text: controls for information systems and information on NeurAxis' networks: We seek to maintain an information technology infrastructure that implements physical, administrative and technical controls that are calibrated based on risk and designed to protect the confidentiality, integrity and availability of our information systems and information stored on NeurAxis' networks, including customer information, personal information, PHI/PII, intellectual property and proprietary information. NeurAxis added physical safeguards in the form of biometric entry systems to access server rooms and 24/7 surveillance at both NeurAxis locations.


text: incident policies: We have cybersecurity incident policies, an incident response plan and a dedicated team to respond to cybersecurity incidents, including experienced counsel. When a cybersecurity incident occurs or we identify a vulnerability, the dedicated team is responsible for leading the initial assessment of priority and severity, including external experts that may also be engaged as appropriate. NeurAxis' response to incidents depends on the severity level and seeks to improve its cybersecurity incident response plan. NeurAxis, through experienced cybersecurity and HIPAA/HITECH counsel, has developed a security manual and a privacy policy.


text: We provide security awareness training to help our employees understand their information protection and cybersecurity responsibilities at NeurAxis. We also provide additional role-based training to some employees based on customer requirements, regulatory obligations, and industry risks.


text: risk assessments: We have participated in several third-party risk assessment processes that include expectations regarding information and cybersecurity. NeurAxis also seeks contractual commitments from key suppliers to appropriately secure and maintain their information technology systems and protect NeurAxis information that is processed or stored on their systems. This may or may not include business associate agreements, downstream vendor agreements and vendor auditing in some cases.


text: assessments of NeurAxis: We have third-party cybersecurity companies engaged to assess NeurAxis' cybersecurity readiness and to assist in identifying and remediating risks from cybersecurity threats. NeurAxis has a "real time" cybersecurity partner that monitors our servers 24/7/365 for any attempted intrusions.


text: routinely reviews the Office of Civil Right (OCR) audit requirements to assess any gaps within our cybersecurity, privacy and security programs. We have not identified risks from known cybersecurity threats, that have materially affected us, including our operations, business strategy, results of operations, cash flows or financial condition. We face certain ongoing risks from cybersecurity threats, including active interactions with children's hospitals while assisting with insurance prior approvals, that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, cash flows or financial condition.

stage1Category: Strategy Integration


text: As of the fiscal year ended December 31, 2024, the Company had not experienced any material cybersecurity incidents that have had a significant impact on our operations, data integrity, results of operations, or financial performance.


text: GOVERNANCE. NeurAxis' Board of Directors is responsible for oversight of cybersecurity risk. The Board receives reporting about NeurAxis' practices, programs, notable threats or incidents and other developments related to cybersecurity throughout the year, including through periodic updates from NeurAxis' Chief Regulatory Officer/Privacy Officer and VP of IT/Security Officer.


text: Security Officer reports to NeurAxis' Chief Regulatory Officer and together, they lead the Company's overall cybersecurity function. The Security Officer has over 13 years of experience in managing and leading IT or cybersecurity teams and participates in various cyber security trainings frequently. The Security Officer collaborates with NeurAxis personnel and our outside IT vendors to identify and analyze cybersecurity risks to NeurAxis, considers industry trends, implement controls, as appropriate and feasible, to mitigate these risks and enables business leaders to make risk-based business decisions that impact cybersecurity considerations. The Security Officer meets with senior leadership to review and discuss NeurAxis' cybersecurity program, including emerging cyber risks, threats, and industry trends. The Security Officer also supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including by collaborating with external security personnel and business stakeholders, and incorporating threat intelligence and other information obtained from governmental, public, or private sources to strengthen our cybersecurity technologies and processes.


text: Within this program, we integrate an analysis of the risks facing the organization to guide our preparedness against cybersecurity threats to ensure a holistic approach that encompasses cross-functional and geographical visibility under the oversight of executive leadership through regular risk management meetings.

companyName: Flux Power Holdings, Inc.

ticker: FLUX


text: Management and Strategy recognize the critical importance of maintaining the safety and security of our systems and data and have implemented a holistic process for overseeing and managing cybersecurity and related risks. We depend on the accuracy, capacity, and security of our information technology systems and those used by our third-party service providers. To protect the confidentiality, integrity, and availability of our critical systems and information, we have developed and implemented a cybersecurity risk management program that includes a cybersecurity incident response plan. Our cybersecurity risk management program covers our business and was crafted following frameworks established by the National Institute of Standards and Technology. While using these frameworks guides our approach to identifying, assessing, and managing cybersecurity risks relevant to our business, it does not imply compliance with any specific technical standards, specifications or requirements. The program is integrated into our overall enterprise risk management program and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. In addition, our program emphasizes the maintenance of controls and procedures for the prompt escalation of certain cybersecurity incidents, conducting cybersecurity risk assessments, regularly assessing and deploying technical safeguards, establishing incident response and recovery plans, and providing relevant privacy and cybersecurity information to employees to enhance awareness and response to cybersecurity threats.

companyName: Motorsport Games Inc.

ticker: MSGM


text: of the date of this Report, we are not aware of any risks from cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.


text: Board of Directors, along with its Audit Committee, oversees the management of cybersecurity risks and receives quarterly reports from management on the detection and remediation of cybersecurity incidents, as well as on material security risks and vulnerabilities. Through our outsourced managed service provider, we are informed about, and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents through the management of, and participation in the monitoring systems and processes described above. The information about such incidents is reported to the Company's Chief Executive Officer and Chief Financial Officer, who then would report such information to the Company's Board of Directors, in some cases, earlier than the regular quarterly reports depending on the nature and severity of the incident.


text: Management and Strategy have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity program is based on the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF). This does not imply that we meet any particular technical standards, specifications, or requirements, but rather that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.

companyName: Biofrontera Inc.

ticker: BFRI


text: elements of our cybersecurity risk management program include: assessments designed to help identify material cybersecurity risks to our critical systems, information, and our broader enterprise our external service providers, where appropriate, to assess, test, monitor or otherwise assist with aspects of our security controls; training and awareness programs for employees to drive adoption and awareness of cybersecurity processes and controls; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: the last two fiscal years, the Company has not experienced any material cybersecurity incidents, and expenses incurred from cybersecurity incidents were immaterial. For a discussion of whether and how any risks from cybersecurity threats are reasonably likely to materially affect us, including our business, results of operations or financial condition, refer to Item 1A. Risk Factors - "Our business and operations would suffer in the event of system failures or, cyber-attacks or a deficiency in our cyber-security," which is incorporated by reference into this Item 1C. (Role of Management/Role of the Board)


text: cybersecurity program and function is overseen by the Director of Information Technology ("Director of IT"), who has over 15 years of experience leading information technology divisions in various industries. The Director of IT collaborates with all business units to identify and assess cybersecurity risks and compliance with company policy. The Director of IT stays aware of emerging threats and trends in cybersecurity through attendance at cyber security conferences, subscription to the CISA.gov mailing list, various tech focused news outlets, and other sources.


text: Audit Committee is responsible for the oversight of risks associated with cybersecurity threats. The Audit Committee charter provides that the Committee is responsible for considering the effectiveness of the Company's internal control system, including information technology security and control. The Director of IT reports significant cybersecurity events to our Chief Financial Officer, who then reports such events to our Audit Committee.


text: Risk Management and Strategy is committed to ensuring the highest standards of cybersecurity to protect our systems, networks, and data from cyber threats. We recognize the critical importance of safeguarding sensitive information and maintaining the trust of our customers, partners, and stakeholders. cybersecurity strategy is built on a foundation of proactive risk management, continuous monitoring, and adherence to industry best practices. We employ a multi-layered approach which leverages cutting-edge technologies to defend against evolving cyber threats.


text: time-to-time, we may engage third-party consultants, legal advisors, and audit firms to evaluate and test the Company's risk management systems and assess and remediate certain potential cybersecurity incidents, as appropriate. We prioritize the integrity of our data access controls to prevent unauthorized access, data breaches, and malicious activities. We regularly assess and enhance our cybersecurity posture through comprehensive risk assessments, security audits, and vulnerability assessments. is a shared responsibility requiring collaboration and cooperation across all levels of our organization.


text: recognizes that cybersecurity is not solely a technology issue but also a people and process issue. We invest in ongoing employee training and awareness programs to empower our staff to recognize and respond to potential security threats effectively. threats are monitored and acted upon by the Company's information technology security group within the Information Technology team.


text: The Vice President of Information Technology has over 25 years of IT experience including Fortune 100 public companies. The Vice President of Information Technology meets regularly with senior management to inform and advise them of the status on all cybersecurity initiatives as well as all cybersecurity incidents, if any.


text: the event of a cybersecurity incident, we have established incident response plans and protocols to minimize the impact and facilitate swift recovery. The Company's Audit Committee oversees cybersecurity risk. The Audit Committee is promptly notified by Information Technology leadership of any potentially serious incidents including details and recommendations on the detection, mitigation, and remediation of the same. During the calendar year 2024, there have been no known reported cybersecurity incidents that have materially affected our believe in transparency and open communication, promptly informing affected parties and relevant authorities as required by law. Together, we remain vigilant, adaptive, and resilient in the face of evolving cyber threats, safeguarding the trust and confidence of those we serve.


text: operate in the biopharmaceutical industry, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft, fraud, extortion, harm to employees or customers, violation of privacy laws and other litigation and legal risk, and reputational risk. We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect information and prevent data loss and other security breaches, including a cybersecurity risk assessment program. Both management and the board of directors are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Pulmatrix, Inc.

ticker: PULM


text: current cybersecurity risk assessment program includes identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats and is informed by previous cybersecurity incidents we have observed in our industry.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for the day-to-day assessment and management of risks from cybersecurity, including the prevention, mitigation, detection, and remediation of cybersecurity incidents, rests with an IT consultant who reports to management.


text: part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.


text: engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the audit committee.


text: date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, interfere with the progress of our clinical trials, interfere with our efforts to pursue regulatory approvals for our product candidates, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We have attempted to preemptively mitigate the financial impact of any cybersecurity incident and currently maintain a cyber liability insurance policy. However, our cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all. In addition, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations. For further information regarding risks from cybersecurity threats, please refer to "Item 1A. RISK FACTORS—Risks Related to Our Business."


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Viewbix Inc.

ticker: VBIX


text: We are continuously working to ensure that we satisfy generally applicable industry standards for the assessment, identification, and management of risks from cybersecurity threats that may pose a risk to our information technology systems, including from third parties with whom we work with.


text: Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. As of the date of this Annual Report, the majority of the Company's IT systems are computed using leading secure cloud platforms.


text: Our cybersecurity risk management risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;


text: routine conduct of penetration tests on our computer systems to evaluate the security of the systems and identify weaknesses or vulnerabilities;


text: employee training programs regarding cybersecurity risks and the usage of secure software or platforms designed to protect our IT systems against cybersecurity risks, such as two-factor authentication systems, anti-virus and ransomware programs or the usage of secure cloud platforms for computing our IT systems;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; and a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: We have no t identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function and oversees management's implementation of our cybersecurity risk management program.


text: The Board of Directors receives regular reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: Our management team, including our Chief Executive Officer, the VP R&D and Data Protection Officer of Cortex, and our external advisors, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.


text: Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.


text: Our Chief Operating Officer who has extensive cybersecurity knowledge and skills, heads the team responsible for implementing and maintaining cybersecurity and data protection practices at the Company and reports directly to the Chief Executive Officer.

companyName: AMERICAN BATTERY TECHNOLOGY Co

ticker: ABAT


text: additional information regarding risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations,


text: are a blank check company with no business operations. Since the IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. We depend on the digital technologies of third parties, and any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data and could have a material adverse effect on our business, financial condition or reputation. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

companyName: Aimei Health Technology Co., Ltd.

ticker: AFJK

stage1Category: None/Other


text: board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. Our management will promptly report to the board of directors on incidents of material cybersecurity risks facing us and any third parties and the measures that may be taken to mitigate such risks. As of the date of this Annual Report, we have not encountered any cybersecurity incidents that have materially affected, or that we believe are reasonably likely to materially affect, us, including our business strategy, results of operations or financial condition. We do, however, face risks from cybersecurity threats.


text: the ordinary course of business, we receive, process, use, and store digitally large amounts of data, including customer data as well as confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to us and our business operations. To this end, we have implemented a program designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them.

companyName: ALLIANCE ENTERTAINMENT HOLDING CORP

ticker: AENT


text: program is managed by our executive management team, and includes mechanisms, controls, technologies, systems, policies, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the systems and data residing in them. We consult with and rely upon outside advisors and experts to assist us with assessing, identifying, and managing cybersecurity consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Our Board of Directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. The Board of Directors receives periodic updates on cybersecurity and information technology matters and related risk exposures from management.


text: believe that information security is a critical component of our business strategy. Therefore, we maintain and continuously assess and strengthen our cyber security program. Management is responsible for the day-to-day administration of the Company's risk exposures and has adopted a risk management framework including identification, analysis and response to risks affecting our business.

companyName: CXJ GROUP CO., Ltd

ticker: ECXJ


text: regularly engage third-party services to conduct evaluations of our security controls, which can include penetration testing, independent audits, or consulting on best practices to address new challenges. These evaluations include testing both the design and effectiveness of security controls.


text: rely on third-party service providers for a variety of services to run our information systems. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers. A cyber-attack at a third-party service provider could have a significant impact on our business, and we continuously monitor the risks associated with our service providers.

stage1Category: Third-Party Risk


text: Chief Financial Officer is responsible to oversight of the Company's risk management program, including technology and cybersecurity risks facing the Company. The Chief Financial Officer receives briefings from management and the third-party service provider about cybersecurity risk management and the overall technology and cybersecurity environment.


text: believe that currently we have no t encountered a cybersecurity event that has had a material impact on our business. See Item 1A. "Risk Factors" for a discussion of our cybersecurity risk.


text: are dedicated to safeguarding our invaluable assets and ensuring the well-being of personnel, as demonstrated through the preparation of our cybersecurity program. cyber risk management program is designed to comprehensively address the spectrum of cybersecurity threats that confront our organization.


text: management and strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: RHINO BITCOIN INC.

ticker: RHNO


text: aid our cybersecurity risk management strategy, we contract with dedicated third-party firms and assessors to identify risks and threats to our organization. These assessments adhere to leading cybersecurity standards such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework aligning with industry best practices. To oversee incident response and mitigation we utilize our incident response plan and processes to standardize our processes for assessing, identifying, and managing cybersecurity incidents. This includes a comprehensive reporting structure and analysis processes to provide visibility and determine incident business impact. Were a cybersecurity incident to occur, we have also implemented a cross-functional business team to aid in the determination of incident impact, severity, and materiality, with the support of standing external counsel and third-party incident response advisors. Additional to our third-party incident response advisors and support contracts, we undergo regular penetration tests to bolster our readiness in the event of cybersecurity incidents. Furthermore, we have also obtained cybersecurity insurance coverage to enhance protection and minimize potential financial prioritize cybersecurity within our supply chain, both nationally and globally, by assessing our third-party cybersecurity posture to provide secure visibility with our partnerships. As part of our due diligence processes, we conduct security questionnaires and service provider reviews, to align our cybersecurity standards on the onset of our partnerships. Additionally, we collaborate closely with a third-party vendor to enhance supply chain resilience. This collaboration involves leveraging their expertise to inform decision-making and enhance risk oversight processes, ensuring greater robustness, and adaptability in managing supply chain challenges.


text: we maintain a strong cybersecurity posture, we continuously strive for improvement and vigilance to mitigate evolving threats within this dynamic environment and protect our stakeholders' interests. Our organization has not experienced any unauthorized access resulting from cybersecurity incidents with a materially adverse effect on our business, operations, or financial condition and we remain cognizant of the potential impact of insufficient cybersecurity measures on our operations. For further insights into additional risks relating to our business, please refer to "Risk Factors Relating to Our Business." in Item 1A – Risk Factors contained in Part I of this report.


text: Board delegated primary oversight authority to the Audit Committee who plays a pivotal role in ensuring the effectiveness of our cybersecurity strategy. Through regular updates provided by our leadership team, the committee actively evaluates the organization's cybersecurity posture and aids in prioritizing risk mitigation efforts aligned with our strategic objectives. These updates encompass detailed quarterly reports during audit committee meetings, covering key metrics, ongoing initiatives, and any cybersecurity incidents. Additionally, on an annual basis, the entire board receives updates on the progress of our cybersecurity program and strategy, including insights into emerging risks and industry trends. Moreover, the board benefits from supplementary educational briefings delivered by both internal and external experts, providing invaluable global threat visibility and enhancing the Board's understanding of cybersecurity challenges and opportunities.


text: our cybersecurity initiatives is our Director of Information Technology who provides invaluable expertise in managing cybersecurity risks and leading our cybersecurity operations. The Director of Information Technology possesses good knowledge in information technology and program management, with contract resources available to help and supplement our security profile. Furthermore, the executive leadership team is active in security operations, overseeing implementation of policies, procedures, and policies related to cybersecurity, technology, and vendors. Both the Audit Committee of the Board as well as executive leadership team will be notified and updated in the event of an incident, with incident updates, mitigation efforts, and impact, as deemed appropriate.


text: Management and Strategy have processes in place for assessing, identifying, and managing material risks from cybersecurity threats, including potential unauthorized occurrences on or through both, our physical systems and electronic information systems, that could adversely affect the confidentiality, integrity, or availability of our information systems or the information residing on those systems. These include a wide variety of mechanisms, controls, technologies, methods, systems, and other processes that are designed to prevent, detect, or mitigate data loss, theft, misuse, unauthorized access, or other security incidents or vulnerabilities affecting the data. The data include confidential, proprietary, and business and personal information that we collect, process and store as part of our business, including on behalf of third parties. Additionally, we use processes to oversee and identify material risks from cybersecurity threats associated with our use of third-party technology and systems, including technology and systems we use for encryption and authentication; employee email; content delivery to customers; back-office support; and other functions. part of our risk management process, we conduct application security assessments, vulnerability management, and ongoing risk assessments.


text: We also maintain a variety of incident response plans that are utilized when incidents are detected. We are implementing a plan to require employees with access to information systems, including all corporate employees, to undertake data protection and cybersecurity training and compliance programs at least annually.


text: have a unified and centrally-coordinated team, led by our Chief Operating Officer, that is responsible for implementing and maintaining centralized cybersecurity and data protection practices at the Company in close coordination with senior leadership and other teams across the Company. In addition, we also engage assessors, consultants, auditors, or other third parties to assist with assessing, identifying and managing cybersecurity risks.


text: cybersecurity risks and associated mitigations are evaluated by senior leadership, including as part of our risk assessments that are reviewed by the board of directors.


text: board of directors oversees our policies and procedures for protecting our cybersecurity infrastructure and for compliance with applicable data protection and security regulations and related risks. They also oversee the response to any significant cybersecurity incidents.


text: Company recognizes that cybersecurity threats may pose significant business risks and has developed processes for identifying, assessing, and managing these threats. The Company has implemented a plan for cybersecurity and cyber-related management across its varied business units. This plan allows each business unit to tailor solutions to identify, manage, and mitigate risks based on their own assessment of their unique cybersecurity risks in conjunction with each business unit's overall risk management process. Having each business unit implement its own plan helps enable appropriate compliance in reporting material cyber events and risks across the Company.

companyName: Marygold Companies, Inc.

ticker: MGLD


text: business unit's Chief Information Security Officer ("CISO") on at least an annual basis is to provide a report to the Company's senior management, regarding the state of their cybersecurity program and its material cyber risks. These reports are then shared with the Company's cybersecurity oversight committee to inform and augment the Company's risk management processes.


text: Additionally, each business unit is required to maintain an incident reporting process to report significant cybersecurity events to the Company. The Company and its business units discuss and partner with third parties to assess, mitigate, audit, educate, implement, operate, protect, and remediate various cybersecurity related elements.


text: Company and its business units rely on third-party service providers for its products and services to run their information systems.


text: This dependence exposes us, along with others who use these service providers, of a cyber breach on their service providers. It's possible that a cyber-attack at a third-party service provider may have a material financial, operational or reputational impact to the Company. The Company and its business units will continuously monitor these risks associated with its service providers.


text: the Corporate Governance & Nominating Committee ("CGNC") has oversight of the Company's cybersecurity risk management program. The CGNC will receive reports regarding a cybersecurity breach and impact incidents through the Company's cybersecurity incident reporting process. Moreover, the CGNC is updated on cybersecurity trends and common deficiencies.


text: addition to the CGNC's oversight, senior management of the Company's business units are responsible for the day-to-day operations of protecting their businesses' information systems. Each business unit is required to report material cybersecurity events to the Company. The Company's senior management reviews incident reports to determine whether a cyber incident report should be filed with the SEC.


text: the fiscal year ending June 30, 2025, the Company had no cyber events requiring disclosure on Form 8-K, Item 1.05 as required under the Securities Exchange Act, Regulation S-K, Item 106.


text: Company recognizes the importance of cybersecurity in safeguarding sensitive information, maintaining operational resilience, and protecting stakeholders' interests. The Company currently manages cybersecurity risks by utilizing basic security protocols, such as network monitoring and access controls. Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes to the best of their ability to ensure that such potential cybersecurity risk exposures are monitored, putting in place reasonably appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity program is under the direction of our CFO. Any significant Cyber incidents that they become aware of are reported to the board of directors.

companyName: Golden Star Resource Corp.

ticker: GLNS


text: The Board of Directors does not have a designated cybersecurity committee, but the Audit Committee receives periodic updates on cybersecurity matters. The Company has no t experienced any material cybersecurity incidents to date.


text: have not yet established or adopted policies and processes for assessing, identifying, and managing material risk from cybersecurity threats. During the year ended June 30, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: Blue Line Holdings, Inc.

ticker: BLNH


text: recognize the critical importance of maintaining the safety and security of our systems and data and we take a holistic approach to the oversight and management of cybersecurity and related risks. This approach is supported by our Board of Directors and management who are actively involved in the oversight of our risk management program.

companyName: Legacy Education Inc.

ticker: LGCY


text: devote resources to protecting the security of our computer systems, software, networks and other technology assets. Our efforts are designed to adapt to the evolution of information security risks and appropriate best practices and include physical, administrative and technical safeguards. Our cybersecurity risk management program is designed to help coordinate the Company's identification of response to and recovery from cybersecurity incidents across all consolidated entities. This includes rapid identification, assessment, investigation and remediation of incidents, as well as complying with applicable legal obligations, communicated promptly and effectively. internal audit team assesses regularly the effectiveness of our internal controls relating to cybersecurity and updates as necessary.

companyName: NETSOL TECHNOLOGIES INC

ticker: NTWK


text: all companies that utilize technology, we face significant cybersecurity threats that include, among other things, attempts to gain unauthorized access to sensitive student and employee information; attempts to compromise the integrity, confidentiality and/or availability of our systems, hardware and networks, and the information on them; insider threats; malware; ransomware; threats to the safety of our directors, officers and employees; and threats to our facilities, infrastructure and service. As cybersecurity threats may arise, the cybersecurity team focuses on responding to and containing the threat and minimizing any business impact, as appropriate. In the event of a perceived threat or possible cybersecurity incident, the cybersecurity team is trained to assess, among other factors, student safety impact, data and personal information impact, the possibility of business operations disruption, projected cost, if any, and potential for reputational harm, with support from external technical, legal and law enforcement support, as appropriate.


text: of the Company is responsible for overseeing our enterprise risk management. In that regard, management receives periodic updates, as appropriate (and no less frequently than annually), regarding the Company's cybersecurity risk management processes and the risk trends related to cybersecurity. Our Board of Directors, in coordination with the Audit Committee, shall review and discuss with management the Company's risks related to information security, including cybersecurity.


text: we have experienced minor cybersecurity threats in the past, such as spear phishing or smishing (SMS phishing), to date no such threats have materially affected the Company or our financial position, results of operations and/or cash flows.


text: continue to invest in the cybersecurity and resiliency of our networks and to enhance our internal controls and processes, which are designed to help protect our systems and infrastructure, and the information contained therein.


text: maintain cybersecurity insurance coverage in amounts that we believe are adequate to address any incidents such as data destruction, extortion, theft, hacking, denial of service attacks and other such incidents. more information concerning the risks that we face from cybersecurity threats, please see Part I, Item IA, "Risk Factors".


text: Management and Strategy relies heavily on information technology systems to operate our election registration, tabulation and online voting business. GES in administering elections manages proprietary and personal data list from its clients. Despite our ongoing investments in cybersecurity measures, we are subject to increasing risks associated with cyberattacks, ransomware, phishing, and other malicious activities.

companyName: Global Arena Holding, Inc.


text: account security or organizational security practices, including those of companies of third parties GES utilizes, may result in unauthorized access to our systems and data, and cause irrevocable damage to the Company.


text: in the election industry are constantly evolving and becoming increasingly difficult in detecting and successfully defending against them. Threat actors, including individual and groups of hackers and sophisticated organizations, including nation-states, state-sponsored organizations, or cybercriminal groups, can pose a threat to GES customers and GES election software infrastructure. Threat actors may also utilize emerging technologies, such as AI and machine learning. Our current capabilities may not detect certain vulnerabilities successful cyber intrusion could result in significant business disruption, reputational damage, regulatory penalties, and financial loss. GES maintains cybersecurity insurance, employs robust monitoring tools, and conducts employee training, but these safeguards may not prevent all incidents. Failure to effectively prevent or respond to such incidents could materially and adversely affect the Company and businesses operations and financial condition.


text: Board of Directors considers cybersecurity risk as part of its oversight function. Management is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for overall cybersecurity risk management and is responsible for updating the Board, as necessary regarding significant cybersecurity incidents.


text: Risk Management and Strategy face various cyber risks, including, but not limited to, risks related to unauthorized access, misuse, customer data theft, computer viruses, system disruptions, ransomware, malicious software and other intrusions. We utilize a multilayered, proactive approach to identify, evaluate, mitigate and prevent potential cyber and information security threats through our cybersecurity risk management program 24/7.


text: Our cybersecurity risk management program is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our resilience and support the achievement of our strategic objectives. This integrated approach helps ensure that cyber risks are not viewed in isolation, but are assessed, prioritized and managed in alignment with the Company's operational, financial and strategic risks, assisting the Company in more effectively managing interdependencies among risks and enhancing risk mitigation strategies.


text: the Board of Directors has yet to establish any committees, Management regularly updates our Board regarding Management's efforts to minimize cybersecurity risks.

companyName: VIVIC CORP.

ticker: VIVC


text: Our management team also engages, at times when needed, certain outside advisors and consultants to assist in the identification, oversight, evaluation and management of cybersecurity risks, as well as to advise on specific topics. As part of our overall risk mitigation strategy, the Company also maintains cyber insurance coverage; however, such insurance may not be sufficient in type or amount to cover us against claims related to security breaches, cyberattacks and other related breaches.


text: have various processes and procedures in place to evaluate cybersecurity threats associated with third parties. We have not identified any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, performance, results of our operations, or financial condition.


text: Company's cybersecurity risk management program is supervised by our Senior Manager of Information Security (SMIS), who reports directly to the Company's Chief Operating Officer ("COO") in Pakistan. The SMIS and his team are responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture and processes. Our current SMIS received his bachelor's in computer sciences and has over 20 years of cybersecurity experience, including relevant prior senior leadership experience at our Company. Furthermore, he has also achieved globally recognized information security certifications, including CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), CompTIA Security+, ISO 27001 Lead Auditor, CEH (Certified Ethical Hacker), CHFI (Computer Hacking Forensic Investigator), among others.


text: SMIS attends and is invited to all Company Cybersecurity Committee meetings, a cross-functional management committee that drives awareness, ownership and alignment across broad governance for effective cybersecurity risk management. The Cybersecurity Committee is composed of senior leaders from our legal, information technology, cybersecurity, and audit sections. Subject matter experts are also invited, as appropriate. The Cybersecurity Committee meets at least quarterly and has responsibility for oversight and validation of the Company's cybersecurity strategic direction, risks and threats, priorities, and resource allocation. The SMIS and his team, as well as the Cybersecurity Committee, are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents in accordance with the Company's cyber incident response plan.


text: Board of Directors receives regular reports from the SMIS and Cybersecurity Committee on, among other things, the Company's cyber risks and threats, the status of projects to strengths of the Company's information security systems, assessments of the Company's security program, insurance, and the emerging threat landscape. In accordance with our cyber incident response plan, the Cybersecurity committee s promptly informed by SMIS's team of cybersecurity incidents that could adversely affect the Company or its information systems and is also regularly updated about incidents with less impact potential. The Board of Directors and Audit committee are informed of any incidents that could adversely affect the Company by the Cybersecurity committee and SMIS's team.


text: an effort to detect and defend against cyber threats, the Company annually, and, periodically as needed, provides its employees with various cybersecurity and data protection training programs. These programs cover timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educate employees on the importance of reporting all incidents promptly to the Company's centrally managed cyber defense and security operations.


text: Management Strategy are a clinical-stage pharmaceutical company developing treatments for cannabis-induced toxicity, such as acute cannabis-induced toxicity in children, acute cannabinoid intoxication ("ACI") in adults, and the broader landscape of acute cannabis-induced conditions.

companyName: Anebulo Pharmaceuticals, Inc.

ticker: ANEB


text: We and our third-party service providers, such as contract research organizations ("CROs"), collect, process, transmit, and store sensitive data on our systems, including intellectual property, proprietary or confidential business information, and a variety rely on third parties, including cloud vendors, for various business functions. We select key third-party service providers based on several factors, including the type of data processed and the nature of services offered, and we oversee such key third-party service providers by conducting vendor diligence upon onboarding and ongoing monitoring, including a review of SOC-1 reports on an annual basis. Anebulo's management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include response to and an assessment of internal and external threats to the security, confidentiality, integrity and availability of our data and information systems, along with other material risks to our operations. In addition, we have implemented procedures over certain areas such as access on/offboarding and account management to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities.


text: are a shell company with no business operations. Since inception, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our Board of Directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. We have not encountered any cybersecurity incidents since our inception.

companyName: AG Acquisition Group III, Inc.


text: is responsible for the day-to-day management of the risks we face, while our board of directors has responsibility for the oversight of risk management, including risks from cybersecurity threats. The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents. Our board of directors receives periodic updates from our audit committee regarding matters of cybersecurity. Our board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any significant updates to our cybersecurity risk management and initiatives.


text: of the date of this Annual Report, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition. For more information, see "Risk factors - If our internal information technology systems or sensitive information, or those of our third-party CROs or other contractors or consultants, are or were compromised, we could experience adverse consequences from such compromise, including but not limited to, a material disruption of the development of our product candidates, regulatory investigations or actions, litigation, fines and penalties, reputational harm, loss of revenue or profits, and other adverse consequences."


text: board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer, is actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM").

companyName: Propanc Biopharma, Inc.

ticker: PPCB


text: Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.


text: Management and Strategy one of the critical elements of our overall ERM approach, our cybersecurity efforts are focused on the following key areas: Governance: Management oversees cybersecurity risk mitigation and reports to the board of directors any cybersecurity incidents.


text: Approach: We have implemented a cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-virus and anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: have not engaged third-party service providers to conduct evaluations of our security controls, independent audits or consulting on best practices to address new challenges.


text: we have not experienced any cybersecurity threats in the past in the normal course of business, in the future, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: cybersecurity risk management is based on recognized cybersecurity industry frameworks and standards, including those of the National Institute of Standards and Technology, the Center for Internet Security Controls, and the International Organization for Standardization.

companyName: IDT CORP

ticker: IDT


text: We use these frameworks, together with information collected from internal assessments, to develop policies for the use of our information assets (for example, business information and information resources such as mobile phones, computers and workstations), access to specific intellectual property or technologies, and protection of personal information. We protect these information assets through industry-standard techniques, such as multifactor authentication and malware defenses. We also work with internal stakeholders across the company to integrate foundational cybersecurity principles throughout our organization's operations, including the employment of multiple layers of cybersecurity defenses, restricted access based on business needs, and integrity of our business information. We also regularly train our employees on cybersecurity awareness, confidential information protection and simulated phishing attacks.


text: regularly engage third-party assessors to conduct penetration testing and measure our program to industry standard frameworks. We also have standing engagements with incident response experts and external counsel. We frequently collaborate with industry experts and cybersecurity practitioners at other companies to exchange information about potential cybersecurity threats, best practices and trends.


text: cybersecurity risk management extends to risks associated with our use of third-party service providers. For instance, we conduct risk and compliance assessments of third-party service providers that request access to our information assets.


text: cybersecurity risk management is an important part of our comprehensive business continuity program and enterprise risk management. Our global information security team periodically engages with a cross-functional group of subject matter experts and leaders to assess and refine our cybersecurity risk posture and preparedness. For example, we regularly evaluate and update contingency strategies for our business in the event that a portion of our information resources were to be unavailable due to a cybersecurity incident. We practice our response to potential cybersecurity incidents through regular tabletop exercises, threat hunting and red team exercises.


text: Board of Directors, as a whole, has oversight responsibility for our strategic and operational risks. Our Audit Committee of our Board of Directors assists the Board of Directors with this responsibility by reviewing and discussing our risk assessment and risk management practices, including cybersecurity risks, with members of management. The Audit Committee, in turn, periodically reports on its review with the Board of Directors. is responsible for day-to-day assessment and management of cybersecurity risks and reports regularly to our Audit Committee.


text: cybersecurity risk management program is intended to protect the confidentiality, integrity, and availability of our critical IT systems, information and IP. Cybersecurity risks are among the risks evaluated and considered by, our broader enterprise risk management program, which is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our resilience and support the achievement of our strategic objectives.

companyName: Glimpse Group, Inc.

ticker: GGRP


text: cybersecurity risk management program is led by our Director of Information Technology, who is principally responsible for managing our cybersecurity risk assessment processes, our security controls, and our detection and response to cybersecurity incidents. Our program includes protocols for preventing, detecting and responding to cybersecurity incidents, and cross-functional coordination, and planning for business continuity and disaster recovery. We rely on our information security management system supported by a set of policies based upon industry frameworks, including the NIST Cybersecurity Framework. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment. team principally responsible for managing (i) our cybersecurity risk assessment processes, (ii) our security controls, and (iii) our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls. awareness training of our employees, incident response personnel, and senior management. incident response plan that includes procedures for responding to cybersecurity incidents. risk management process for service providers, suppliers, and vendors.


text: also have a cybersecurity incident response plan for the CIRT to assess and manage cybersecurity incidents, which includes escalation procedures based on the nature and severity of the incident including, where appropriate, escalation to our board of directors.


text: part of our overall risk mitigation strategy, we maintain insurance coverage that is intended to address certain aspects of cybersecurity risks; however, such insurance may not be sufficient in type or amount to cover us against claims related to cybersecurity breaches, of the date of this Report, we do no t believe that any risks from cybersecurity threats, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. Despite our security measures, however, there can be no assurance that we, or third parties with which we interact, will not experience a cybersecurity incident in the future that will materially affect us.


text: board of directors has primary responsibility for oversight of our cybersecurity and other information technology risks, including our plans to mitigate cybersecurity risks and to respond to data breaches.


text: board of directors receives reports from our Director of Information Technology on cybersecurity matters on as needed basis. These reports can include a range of topics, including our cybersecurity risk profile, the current cybersecurity and emerging threat landscape, the status of ongoing cybersecurity initiatives, incident reports, and the results of internal and external assessments of our information systems. The Audit Committee of our board of directors (the "Audit Committee") also annually reviews the adequacy and effectiveness of our information and technology security policies and the internal controls regarding information and technology security and cybersecurity, and periodically receives updates. The Chair of the Audit Committee reports to the full board of directors on these discussions as appropriate.


text: the management level, our Director of Information Technology who is experienced in cybersecurity matters, leads our enterprise-wide cybersecurity program, and is responsible for assessing and managing our materials risks from cybersecurity threats. In performing his role, our Director of Information Technology is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through the management of, and participation in, the cybersecurity risk management program and other processes described above, including the maintenance and execution of our cyber incident response plan. Our Director of Information Technology reports to our Chief Financial Officer/Chief Operating Officer and to our Chief Executive Officer.


text: management and strategy engage and implement risk management strategies to identify, assess, and manage material risks arising from cybersecurity threats and alerts. Our method involves a systematic evaluation of all potential threats, vulnerabilities, and their possible impacts on the Company's operations, data, and system integrity. Our cybersecurity risk management strategy includes: Identify cybersecurity risks to our environment; teams and third-party providers to investigate, contain, and resolve identified threats; cybersecurity awareness training to our staff; and and periodic testing of a cybersecurity incident response plan.

companyName: PORTSMOUTH SQUARE INC

ticker: PRSI


text: also engage external cybersecurity consultants and use industry-standard tools to help monitor our networks, review vulnerability scans, and conduct penetration testing on a periodic basis. Our risk management practices and integrated into our overall enterprise risk management framework, as discussed in Item 1A – Risk Factors.


text: Company's management team is responsible for the oversight and administration of cybersecurity protocols. Our management team relies on our third-party providers for administrating cybersecurity assessments to identify, manage, mitigate, and respond to cybersecurity threats. Management updates the Board on any significant cybersecurity occurrences. The Board receives periodic briefings on cybersecurity risks, incidents, and risk mitigation measures, and reviews management's cybersecurity policies and response plans at last annually.


text: the fiscal year ended June 30, 2025, the Company did not identify any cybersecurity incidents that had a material impact on our business strategy, results of operations, or financial condition.


text: management and strategy engage and implement risk management strategies to identify, assess, and manage material risks arising from cybersecurity threats and alerts. Our method involves a systematic evaluation of all potential threats, vulnerabilities, and their possible impacts on the Company's operations, data, and system integrity. Our cybersecurity risk management strategy includes: Identifying risks to our environment; Deploying Internal IT teams and third-party providers to investigate, contain, and resolve identified threats; Providing monthly cybersecurity awareness training to our staff; Maintenance and periodic testing of a cybersecurity incident response plan;

companyName: INTERGROUP CORP

ticker: INTG


text: Assessing and managing third-party and vendor cybersecurity risk, including contractual security requirements and periodic reviews; and cybersecurity risk considerations into our enterprise risk management processes.


text: also engage external cybersecurity consultants and use industry-standard tools to help monitor our networks, review vulnerability scans, and conduct penetration testing on a periodic basis. Our risk management practices are integrated into our overall enterprise risk management framework, as discussed in Item 1A – Risk Factors.


text: Company's management team is responsible for the oversight and administration of cybersecurity protocols. Our management team relies on our third-party providers to administer cybersecurity assessments to identify, manage, mitigate, and respond to cybersecurity threats.


text: Management updates the Board on any significant cybersecurity occurrences. The Board receives periodic briefings on cybersecurity risks, incidents, and risk mitigation measures, and reviews management's cybersecurity policies and response plans at least annually.


text: the fiscal year ended June 30, 2025, the Company did not identify any cybersecurity incidents that had a material impact on our business strategy, results of operations, or financial condition, and no incidents were determined to be material individually or in the aggregate.


text: Assessment and Strategy regularly evaluate cybersecurity risk from computer viruses and more sophisticated and targeted cyber-related attacks such as ransomware, as well as cybersecurity failures resulting from human error and technological errors. Such risks are reviewed by our management on a periodic basis as deemed appropriate.


text: overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: use of antivirus software, virtual private networks, email security, as well as other software to prevent and detect data intrusions.


text: deployment of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure the use of third-party service to conduct mandatory online training for all employees regarding identifying and avoiding cyber-security the review of the security procedures used by third parties that may host or otherwise have access to Fuel Tech's data.


text: deployment of third-party cyber-security experts to perform penetration testing on our internal and external networks and systems if necessary, the use of third-party security experts if and when an incident is detected are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect, our business strategy, results of operations or financial conditions. For more information, please see "Cybersecurity" under Item 1A "Risk Factors" above.


text: the Company consistently evaluates risks from cybersecurity threats, monitors its information systems for potential vulnerabilities, and tests these systems according to its cybersecurity policies, standards, processes, and practices. These measures are integrated into the Company's overall risk management system to protect its information systems from cybersecurity threats. The Company also has the option to engage a third-party contractor if a cyber threat arises.


text: management and strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Birdie Win Corp

ticker: BRWC


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business objectives and operational needs.


text: Third-Party Risk we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage these risks. We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring includes annual assessments of the system and organization controls (SOC) reports of our providers and implementing complementary controls. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.


text: from Cybersecurity Threats have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing during the financial year ended December 31, 2024. We will continue to monitor and assess our cybersecurity risk management program as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity incident in the future, such an incident may have a material effect, including on our operations, business strategy, operating results, or financial condition. For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto, see the section Governance


text: board of directors is responsible for monitoring and assessing strategic risk exposure. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the Audit Committee. Our executive management team informs our Audit Committee on cybersecurity risks on a regular basis, at least once per year.


text: Audit Committee is primarily responsible for assisting our board of directors in fulfilling its ultimate oversight responsibilities relating to risk assessment and management, including relating to cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program, including processes and policies for determining risk tolerance, and reviews management's strategies for adequately mitigating and managing identified risks, including risks relating to cybersecurity threats.


text: cybersecurity coordinator is responsible for assessing and managing our material risks from cybersecurity threats, in close collaboration with our IT team and reports to our CEO. This ensures that the senior management are kept abreast of the cybersecurity posture and potential risks faced by our group.


text: goal of our cybersecurity risk management strategy is to protect the privacy, integrity and availability of our systems, information and data. Our subsidiaries are required to comply with rapidly evolving and complex PRC laws and regulations with respect to cybersecurity, data security and personal information protection. In response to the recent changes in the regulatory requirements, we have designed a data and information protection mechanism as part of our risk management process and efforts. The measures include the following main components: (i) enhancing data security technical measures by the introduction of an extended verification (EV) SSL certificate at the user information security technology implementation level, offering strong encryption technology and extended verification function, and providing security guarantee for online transactions; (ii) improving the technical level protection and the monitoring mechanism for data use, and for the data modules related to user information in the e-commerce platform system, using MD5 irreversible encryption for storage and display of information security sensitive fields; (iii) developing a complete personal information operating process and system and designating personnel for information security; (iv) developing a user information collection, storage and user rules and privacy agreement, following the "inform + express consent" model, informing users of the purpose, method and scope of information collection and use, as well as the channels for inquiring and correcting inaccuracies in information and data; (v) conducting assessments on technology, operational risks and system common issues, and data security governance; (vi) engaging a data security service organization to conduct an annual data security assessment and providing disclosure and updates to all stakeholders; (vii) establishing an emergency plan for personal information security incidents, which includes an emergency response mechanism for security incidents, incident impact assessment and mitigation measures, and emergency response training and drills; (viii) providing periodic training to employees; and (ix) promoting consumer data protection awareness. We have implemented and are in the process of implementing these measures.

companyName: Sino Green Land Corp.

ticker: SGLA


text: Company's board of directors has oversight responsibility for the Company's overall risk management, including cybersecurity risks, and has not delegated oversight authority for cybersecurity risks to any committee. Our management, led by our Chief Executive Officer and Chief Financial Officer, is responsible for assessing cybersecurity risks and supervising relevant personnel with respect to our efforts and measures with the aim we have an appropriate cybersecurity strategy to assess and manage those risks, including responding to attacks or breaches. Our Chief Executive Officer and Chief Financial Officer meet periodically with the individuals charged with the day-to-day operations supervisory responsibilities including IT operations and infrastructure regarding cybersecurity to review and assess potential issues and any changes needed to be made related to our information technology system and cybersecurity measures. Cybersecurity awareness trainings are provided for all employees.


text: fiscal year 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we face potential cybersecurity threats that, if realized, would materially affect us. These threats include but are not limited to ransomware and malware attacks, and compromised business email and other social engineering threats. Our suppliers, customers, contractors and business partners also face similar cybersecurity risks, which could have an adverse impact on our business.


text: rely on the integrity and availability of our information technology ("IT") systems, as well as those of certain third-party service providers, to support our operations and safeguard sensitive information. These systems may store or process confidential business data, intellectual property, financial records, and personal information.

companyName: NightFood Holdings, Inc.

ticker: NGTF


text: of our robots leverage on-site servers, which provides greater control over data and reduces reliance on overseas or manufacturer-hosted servers often used by other robotics companies. We believe this approach enhances system security and protects sensitive operational maintain security measures intended to protect against cybersecurity threats; however, no system is entirely free from risk. To date, we have not experienced any material cybersecurity incidents. We monitor applicable U.S. data privacy and cybersecurity standards and will continue to prioritize cybersecurity as a core element of our operations.


text: of cybersecurity risk currently rests with department managers, who are responsible for monitoring IT systems, addressing potential risks, and reporting issues directly to senior management.