text: use of information systems for using, transmitting and storing data is a vital aspect of our business operations. Information systems can be vulnerable to a range of cybersecurity threats that could potentially have a material impact on our business strategy, results of operations and financial condition.

companyName: ZyVersa Therapeutics, Inc.

ticker: ZVSA


text: is a key category within our risk management efforts, and our cybersecurity risk management is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to the Company's information systems. Our cybersecurity risk management and strategy is based upon utilizing systems that are cloud based which require multifactor authentication to access. Due to our small size, we partner with a third-party service provider which utilizes multiple security operations centers. The security operations centers maintain, monitor, mitigate and alert on threats against the cloud systems that we utilize. If a risk is identified the security operations center has the ability to shut down access to any user in the organization.

secItem: Item 1C

stage1Category: Risk Management Process

stage1Method: unanimous


text: Audit Committee of our Board of Directors is responsible for oversight of the Company's cyber-risk management and management's role is to assist the Audit Committee in identifying and considering material cybersecurity risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Audit Committee with unrestricted access to Company personnel and documents regarding any cybersecurity attacks or vulnerabilities.

stage1Category: Board Governance


text: also require our employees to participate in cybersecurity training and awareness programs. Company's employees are expected to help safeguard the Company's information systems and to assist in the discovery and reporting of cybersecurity incidents.


text: These programs are intended to decrease cybersecurity risks associated with human error and foster a culture of cybersecurity date, the risks from cybersecurity threats, including as a result of any previous immaterial cybersecurity incidents, have not materially affected, or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. While our insurance covers certain cybersecurity related matters, the costs related to cybersecurity threats or disruptions may not be fully insured.

stage1Category: Strategy Integration


text: recognize the critical importance of cybersecurity in safeguarding sensitive information and maintaining operational resilience. We have processes for assessing, identifying and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from internal and external cyber threats, protect employee and customer information from unauthorized access or attack, as well as secure our networks and systems.

companyName: Sanara MedTech Inc.

ticker: SMTI


text: Audit Committee of the Board of Directors (the "Audit Committee") is responsible for overseeing cybersecurity risk and periodically updates our Board of Directors on such matters. The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, a company, we leverage the National Institute of Standards and Technology (NIST) Cybersecurity Framework to align with industry best practices and to develop policies and procedures, which include a Cybersecurity Response Plan focusing on detection, validation, mitigation, recovery, and refinement. In addition to the Cybersecurity Response Plan, we provide cybersecurity awareness training to our employees, including training on social engineering, phishing, password protection, confidential data protection, mobile security, and incident reporting, to help prevent and reduce the impact of potential cybersecurity events.

stage1Method: majority


text: have strategically invested resources and tools to combat the ever-changing cyber threat landscape. These investments include growing our internal technology team headcount and bolstering our partnerships with entities with external expertise, resulting in increased protection, monitoring, and response capabilities. We have also made investments to carry cybersecurity insurance that provides additional protection and resources to reduce a cybersecurity event's impact and potential losses.


text: technology and management teams meet regularly with key internal and external stakeholders to review cybersecurity concerns and areas face risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. To date, we have not experienced any cyber incidents that have had a material adverse effect on our business, financial condition, results of operations, or cash flows. See "Risk Factors – Risks Related to Our Business – Security breaches and other disruptions could compromise our information and expose us to liability, which would cause our business and reputation to suffer."


text: Risk Management and Strategy have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Viewbix Inc.

ticker: VBIX


text: are continuously working to ensure that we satisfy generally applicable industry standards for the assessment, identification, and management of risks from cybersecurity threats that may pose a risk to our information technology systems, including from third parties with whom we work with.


text: for managing cybersecurity risks tracks risks and incidents related to cybersecurity until the risk is mitigated to an acceptable level or fully remediated. When risks are identified, CyberTeam oversees mitigation plans with the risk owner which are communicated to necessary teams and remediation steps are taken.

companyName: Lucid Diagnostics Inc.

ticker: LUCD


text: cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. As of the date of this Annual Report, the majority of the Company's IT systems are computed using leading secure cloud platforms.


text: assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;


text: conduct of penetration tests on our computer systems to evaluate the security of the systems and identify weaknesses or vulnerabilities; training programs regarding cybersecurity risks and protocols;


text: usage of secure software or platforms designed to protect our IT systems against cybersecurity risks, such as two-factor authentication systems, anti-virus and ransomware programs or the usage of secure cloud platforms for computing our IT systems;


text: security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Board of Directors considers cybersecurity risk as part of its risk oversight function and oversees management's implementation of our cybersecurity risk management program.


text: Board of Directors receives regular reports from management on our cybersecurity risks. In addition, management updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: management team, including our Chief Executive Officer, the VP R&D and Data Protection Officer of Cortex, and our external advisors, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.

stage1Category: Management Role


text: management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.


text: board administers its cybersecurity risk oversight function directly through our audit committee. Our audit committee has primary responsibility for overseeing our risk assessment and risk management policies (including with respect to cybersecurity matters). Our audit committee regularly discusses with management, counsel, and auditors the Company's major risk exposures. This includes potential financial impact on the Company and the steps taken to monitor and control those risks. Additionally, our board is informed regarding the risks facing the Company and coordinates with management and our cybersecurity team to ensure our board receives regular risk assessment updates from management.


text: retain Techneto, Inc. d/b/a CyberTeam ("CyberTeam"), a third party vendor that reports directly to our president and chief operating officer, to be responsible for identifying, assessing and managing the Company's risks from cybersecurity threats. CyberTeam has been with the Company since its inception and has over 25 years of experience in cybersecurity.


text: provides our board and executive leadership team with periodic updates about our cybersecurity program and material risks. This includes updates on cybersecurity practices, programs, and the status of projects designed to strengthen internal cybersecurity and data protection.


text: Management and Strategy for identifying and assessing cybersecurity risks management, with the support of CyberTeam, monitors current events and trends related to cybersecurity and assesses any potential impact on current systems and operations. Third-party partners who are in possession of our confidential information are generally required to notify us in the event of a cybersecurity incident within their systems that have, or are reasonably likely to, compromise the security of such information. When appropriate, we enlist CyberTeam to perform a risk and security assessment of the cybersecurity protocols and procedures of critical third-party partners.


text: for incorporating cybersecurity risks into the overall risk management process process for identifying, assessing, and managing risks related to cybersecurity generally involves CyberTeam regularly meeting with our executive leadership team, and when appropriate, our board and/or audit committee to discuss cybersecurity related risks identified and the potential likelihood and severity of each risk.


text: we are not aware of any risks from cybersecurity threats, or from previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Company.


companyName: PAVmed Inc.

ticker: PAVM


text: retain Techneto, Inc. d/b/a CyberTeam ("CyberTeam"), a third party vendor that reports directly to our Chief Operating Officer, to be responsible for identifying, assessing and managing the Company's risks from cybersecurity threats. CyberTeam has been with the Company since its inception and has over 25 years of experience in cybersecurity.

stage1Category: Third-Party Risk


text: for managing cybersecurity risks tracks risks and incidents related to cybersecurity until the risk is mitigated to an acceptable level or fully remediated. When risks are identified, CyberTeam oversees mitigation plans with the risk owner which are communicated to necessary teams and remediation steps are taken.


text: Risk Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have established certain policies and procedures for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these policies and procedures into our overall risk management framework to promote a company-wide culture of cybersecurity risk management. Such procedures include physical, procedural and technical safeguards, response methods, regular tests on our systems, and routine review of our processes to identify risks and enhance our practices. We also use technology-based tools to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs. We engage certain external parties, including consultants and computer security firms to enhance our cybersecurity oversight and provide monthly trainings to our employees. We consider the internal risk oversight programs of third-party service providers before engaging them in order to help protect our company from any related vulnerabilities. At this time, we are not aware of any material cybersecurity incidents that have impacted the Company. For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Part 1 Item 1A Risk Factors in this Annual Report.

companyName: Enveric Biosciences, Inc.

ticker: ENVB


text: Our board of directors is acutely aware of the critical nature managing risks associates with cybersecurity threats. Our board of directors has delegated authority to the Audit Committee to serve as the cybersecurity oversight body. The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance.


text: Our board of directors also works with the chief financial officer to assess and respond to cybersecurity threats. The chief financial officer meets with the third-party vendors regularly to discuss any issues and updates related to the Company's information technology environment and reports to the chief executive officer and Audit Committee on a regular basis, with a minimum frequency of once per year.


text: cybersecurity risk management program, processes and strategy described in this section are limited to the personal and business information belonging to or maintained by the Company (collectively, "Confidential Information"), our own third-party critical systems and services supporting or used by the Company (collectively, "Critical Systems"), and service providers.

companyName: Hour Loop, Inc

ticker: HOUR


text: [have developed and implemented/will develop and implement] a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our Confidential Information and Critical Systems. Our cybersecurity risk management program [will be/is] integrated into our overall enterprise risk management program and includes a cybersecurity incident response plan.


text: cybersecurity risk management program [includes/shall include]: assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; awareness and spear-phishing resistance training of our employees, and senior management; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and vendor management policy for service providers.


text: have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.] We face risks from cybersecurity threats that, if realized, could have a material adverse effect on us including an adverse effect on our business, financial condition and results of operations.


text: executive management team, along with our managed information technology service provider, is responsible for assessing and managing risks from cybersecurity threats to the Company, including our Confidential Information and Critical Systems. The team has primary responsibility for our overall cybersecurity risk management program. Our management team works closely with our information technology service provider.


text: management team meets with our information technology service provider periodically to discuss then-current cybersecurity issues, which may include efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including threat intelligence and other information obtained from governmental, public or private sources, and external service providers engaged by us; and alerts and reports produced by security tools deployed in the information technology environment including a spear-phishing report.


text: Board considers cybersecurity risk as part of its risk oversight function and oversight of cybersecurity and other information technology risks.


text: Board oversees management's implementation of our cybersecurity risk management program. Our executive management team is responsible for updating the Board, as necessary, regarding significant cybersecurity incidents. Board shall also receive period reports from management on our cybersecurity risks and cybersecurity risk management program.


text: In the normal course of business, we may collect and store certain sensitive company information, including proprietary and confidential business information, trade secrets, intellectual property, sensitive third-party information and employee information. Our access control policies are based on the principle of least privilege, limiting user access strictly to what is required for their roles. Additionally, we have general measures to identify potential threat actors, including the implementation of two-step verification processes to confirm the identity of all counterparties.

companyName: STRATEGIC ACQUISITIONS INC /NV/

ticker: STQN


text: Impact of Risks from Cybersecurity Threats As of the date hereof, the Company and our service providers have not experienced cybersecurity incidents, and we are not aware of any previous cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company. However, we acknowledge that cybersecurity threats are continually evolving, and the possibility of future cybersecurity incidents remains. our security measures cannot guarantee that a significant cyberattack will not occur. A successful attack on our information technology systems could have significant consequences to our business. These measures cannot provide absolute security. No security measure is infallible. See " Risk Factors - Unauthorized disclosure, destruction or modification of data, including personal information, through cybersecurity breaches, computer viruses or otherwise or disruption of our services could expose us to liability, protracted and costly litigation and damage our reputation." for additional information about the risks to our business associated with a breach or compromise to our systems.

stage1Category: None/Other


text: Our Board is ultimately responsible for overseeing cybersecurity, information security, and information technology risks, as well as management's actions to identify, assess, mitigate, and remediate those risks. On an annual basis, the Board reviews and discusses with management the Company's policies, procedures and practices with respect to cybersecurity, information security and information and operational technology, including related risks. In addition, our director Dr. Yuanyuan Huang regularly briefs senior management and the Board of Directors on cybersecurity issues as part of our overall enterprise risk management program, which may include information regarding our exposure to privacy and cybersecurity risks deemed to have a moderate or higher business impact, even if immaterial to us. Dr.


text: is an integral part of the Board's risk analysis and discussions with management. At least annually, the full Board is updated on the Company's cybersecurity risks and risk mitigation strategy by our Chief Information Officer ("CIO"), who is responsible for management of our Information Technology program. The Board also receives ad hoc updates, as needed, about material changes to the Company's cybersecurity program and/or the cybersecurity landscape, including briefings on major legislative and regulatory developments.

companyName: OXBRIDGE RE HOLDINGS Ltd

ticker: OXBR


text: Our CIO regularly evaluates the Company's cybersecurity risk profile and leads the development of strategies to mitigate risks and address cybersecurity issues that may arise in consultation with members of our senior management team. Our CIO holds a Ph. D. in Information Systems from the London School of Economics and has over 20 years' experience and certifications in the field of information technology and data security.


text: have formal policies and procedures that address cybersecurity incident response and disaster recovery from interference with our critical applications. Our Cybersecurity Incident Response Standard provides a documented framework for responding to cybersecurity incidents in coordination across multiple departments. In the event of such an incident, our Cybersecurity Incident Response Team ("CIRT"), which is comprised of our CIO, Chief Executive Officer, Chief Financial Officer, and outside legal counsel, would respond to such incident in accordance with our Cybersecurity Incident Response Standard. Any cybersecurity incident that is designated by the CIRT with a "High"


text: severity classification according to the Cybersecurity Incident Response Standard or that otherwise necessitates regulatory disclosure because of its materiality, will be communicated by the CIRT to the Board within specified timeframes. All cybersecurity incidents, will be evaluated by our CIRT to assess the impact of the incident on the Company, considering qualitative and quantitative factors. In conducting this assessment and responding to an incident, the CIRT Team may utilize the services of third-party consultants. Third-party consultants may be engaged to assist with the identification of the source of any cybersecurity incidents, remediation and recovery from such incident, and the refinement of cybersecurity controls to avert similar future cybersecurity threats and incidents.


text: user awareness training is mandatory for all new hires and for existing employees on an annual basis to help protect our employees and the Company against cybersecurity threats. Novel cybersecurity threats to the Company that are identified by our CIO are communicated to all employees by email, as needed, in an effort to promote awareness and protect the Company from cyber attacks.


text: Management Strategy maintain an Enterprise Risk Management ("ERM") program to identify and respond to the most critical risks to our business, including cybersecurity risks. Risks and vulnerabilities from our increased reliance on information technology systems are assessed at least annually by our CIO and Executive Management Team as part of our ERM program. In response to such assessments, controls are embedded into our processes and technology by our CIO and Executive Management Team to seek to mitigate risks to our systems and processes from cybersecurity incidents. We continuously evaluate whether we have adequate controls in place utilizing a risk-based approach that tailors and applies best practice from various industry standard IT Management frameworks such as Information Technology Infrastructure Library (ITIL), Control Objectives for Information Technologies (COBIT), National Institute of Standards and Technology CyberSecurity Framework, and ISO/IEC 27001.


text: Our daily operations are continuously monitored. We monitor traffic traversing our computer networks and have implemented IT controls and processes to secure our business applications and prevent unauthorized access to or the loss of sensitive data. Our controls include the use of multiple encryption layers for data in transit and at rest, multi-factor authentication, data classification, and data loss prevention. We plan to assess the adequacy of our cybersecurity IT controls through annual cybersecurity vulnerability testing.


text: maintain a risk-based approach to evaluating and overseeing cybersecurity risks presented by our third-party vendors. Third-party vendors that meet certain criteria, such as owning and operating any information technology networks and systems on which the Company relies, are evaluated to assess their performance across several domains, including data security and operations management. We seek to maintain effective communication with our third-party vendors to facilitate timely notification of cybersecurity incidents that might impact the Company. We also independently monitor reputable cybersecurity publications for notifications about vulnerabilities in widely used software libraries, APIs, and other generally available technologies upon which our third-party vendors' products might rely.


text: risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, like other companies in our industry, we could, from time to time, experience threats and security incidents related to our and our third-party vendors' information systems. For more information, please see "Item 1A. Risk Factors - Increased Information Technology ("IT") security threats and more sophisticated computer crime could pose a risk to our systems, networks, and services."


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our cybersecurity controls and processes; periodic required cybersecurity awareness training of our employees;

companyName: Walker & Dunlop, Inc.

ticker: WD


text: [Cybersecurity is an important aspect of our business operations, and we are committed to protecting our systems, data, and the information of our clients and stakeholders. We recognize that cybersecurity threats are constantly evolving and that maintaining robust security measures is an ongoing process. Below is an overview of our cybersecurity risk management and the measures we have in place:

companyName: GT Biopharma, Inc.

ticker: GTBP


text: Governance and Oversight: Our Board of Directors and senior management are actively involved in overseeing our cybersecurity policies and practices and managing those responsible for coordinating and implementing cybersecurity initiatives across the organization.


text: Assessment and Management: We conduct risk assessments to identify potential cybersecurity threats and vulnerabilities. This includes evaluating the likelihood and potential impact of various threats, such as data breaches, malware attacks, and insider threats. Based on these risk assessments, we develop and implement risk management strategies to mitigate identified risks.


text: Security Policies and Procedures: We have established information security policies and procedures that govern the use, protection, and handling of sensitive information. These policies cover areas such as data encryption, access controls, password management, incident response, and employee training.


text: Network and Infrastructure Security: We employ a range of technical measures to secure our network and infrastructure, including firewalls, intrusion detection and prevention systems, and vulnerability assessments. We also use encryption to protect data both in transit and at rest.


text: Training and Awareness: We provide cybersecurity training to employees to raise awareness of the latest threats and best practices for protecting sensitive information. This includes training on how to recognize phishing attempts, handling secure data, and reporting security incidents.


text: Risk Management: We assess the cybersecurity practices of our third-party vendors and service providers, including conducting due diligence on vendors before engaging their services and monitoring their compliance with our security requirements.


text: Compliance and Reporting: We comply with all applicable laws and regulations related to cybersecurity, including data protection and privacy laws.


text: While we believe that our current cybersecurity measures are robust, we recognize that the cybersecurity landscape is constantly evolving, and we remain vigilant in monitoring and adapting our practices to address emerging threats. We are committed to maintaining the confidentiality, integrity, and availability of our systems and data and to protecting the interests of our clients and stakeholders. ]


text: Risk Management and Strategy. We depend on software applications, information technology systems, computing infrastructure and cloud service providers to operate our business. Certain of these systems are managed, hosted, provided or used by third parties to assist in conducting our business and which have their own cyber security measures in place. We are currently working to ensure that we satisfy generally applicable industry standards and best practice methods for the assessment, identification, and management of risks from cybersecurity threats that may jeopardize our line of business or may pose a risk to our information technology systems, including from third parties with whom we work. We have appointed an Information Security Coordinator who oversees our information security policies and procedures. The background and experience of our Information Security Coordinator includes managing the development of cyber security products for corporate and oversee security analysis process on multiple products and companies. Our Information Security Coordinator will maintain a cyber incident reporting and response process and will provide management notifications based on the seriousness of any incident. Our information security policies and procedures are required to be reviewed on a regular basis.

companyName: Odysight.ai Inc.

ticker: ODYS


text: have not experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations; however, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect our Company, see "Risk Factors" included elsewhere this Annual Report on Form 10-K, including "Our data and information systems and network infrastructure may be subject to hacking or other cyber security threats. If our security measures are breached and an unauthorized party obtains access to our proprietary business information, our information systems may be perceived as being insecure, which could harm our business and reputation and our proprietary business information could be misappropriated, which could have an adverse effect on our business and results of operations. "


text: We believe cybersecurity is critical to advancing our technological developments. As a U.S. commercial space company with an established manufacturing business, we face a multitude of cybersecurity threats common to most industries, such as ransomware and denial-of service. Our customers, suppliers, subcontractors, and business partners face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our business strategy, performance, and results of operations. These cybersecurity threats and related risks make it imperative that we expend resources on cybersecurity.

companyName: Sidus Space Inc.

ticker: SIDU


text: In the event of an incident, we intend to follow our cybersecurity incident response plan, which outlines the steps to be followed from incident detection to mitigation, and notification. We contract with external firms that have extensive information technology and program management experience. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risks. As a commercial space company, we must comply with extensive regulations, including requirements imposed by the Department of Defense related to contracts with government agencies and reporting cybersecurity incidents to the SEC. In addition to following SEC guidance and implementing pre-existing third party frameworks, we have developed our own practices and frameworks, which we believe enhance our ability to identify and manage cybersecurity risks. Assessing, identifying, and managing cybersecurity related risks are factored into our overall business approach. We rely heavily on our supply chain to deliver our products and services, and a cybersecurity incident at a subcontractor, or business partner could materially adversely impact us. We require that our subcontractors report cybersecurity incidents to our IT Incident Response Coordinator who will investigate the direct impact of the incident. Once a potential incident has been confirmed, the Incident Response Coordinator will notify senior management that activation of the incident response plan is required and assign a severity rating, ranging from none to critical, based on the perceived impact.


text: The Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full Board for consideration. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with the Audit Committee.


text: While we have not experienced any material cybersecurity threats or incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While we maintain cybersecurity insurance, the costs related to cybersecurity threats or disruptions may not be fully insured. See "Risk Factors" for a discussion of cybersecurity risks.


text: recognize the importance cybersecurity has to the success of our business. We also recognize the need to continually assess cybersecurity risk and evolve our response in the face of a rapidly and ever-changing environment. Accordingly, we aim to protect our business operations, including customer records and information, against known and evolving cybersecurity threats.

companyName: Evofem Biosciences, Inc.

ticker: EVFM


text: Management and Strategy have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with the Director, Information Technology who reports to our Head of Human Resources and the Chief Executive Officer, to manage the risk assessment and mitigation process.


text: part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with Information Technology and management. Personnel at all levels and departments are made aware of our cybersecurity engage consultants, or other third parties in connection with our risk assessment processes if required. These service providers assist us in designing and implementing our cybersecurity policies and procedures. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: have not encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this annual report on Form 10-K.


text: board of directors oversees our risk management process, including as it pertains to cybersecurity risks, which focuses on the most significant risks we face in the short-, intermediate-, and long-term timeframe. Management is responsible for the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks.

companyName: Sintx Technologies, Inc.

ticker: SINT


text: of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the audit committee.


text: management team is primarily responsible for assessing and managing our material risks from cybersecurity threats with assistance from third-party service providers as needed.


text: management team oversees our cybersecurity policies and processes, including those described in the "Risk Management and Strategy" above. The cybersecurity risk management program includes tools and activities to prevent, detect, and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents.


text: Our management team will also provide periodic briefings to the audit committee regarding our Company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. Our audit committee will then provide updates to the Board on such reports.


text: Management and Strategy. The Company relies extensively on various information systems and other electronic resources to operate its business. In addition, nearly all of the Company's customers, service providers and other business partners on whom the Company depends, including the providers of the Company's online banking, mobile banking and accounting systems, use these systems and their own electronic information systems. Any of these systems can be compromised, including by employees, customers and other individuals who are authorized to use them, and bad actors using sophisticated and constantly evolving set of software, tools and strategies to do so.

companyName: LANDMARK BANCORP INC

ticker: LARK


text: Identifying and assessing cybersecurity threats: The Company regularly evaluates its systems and data for potential vulnerabilities and analyzes the evolving cyber threat landscape, to ensure it proactively addresses risks before they materialize. The Company employs monitoring tools that can detect and help respond to cybersecurity threats in real-time.


text: with Overall Risk Management: Cybersecurity risks are seamlessly integrated into the Company's broader risk management framework, ensuring a holistic view and prioritized mitigation strategies.


text: of Third-Party Risk: The Company's comprehensive third-party management process includes rigorous due diligence, oversight and identification of cybersecurity risks associated with vendors and service providers.


text: The Company has an internal committee that is responsible for conducting regular assessments of its information systems, existing controls, vulnerabilities and potential improvements.


text: of Expert Assistance: The Company leverages the expertise of independent consultants, legal advisors, and audit firms to evaluate the effectiveness of our risk management systems and address potential cybersecurity incidents efficiently. The Company conducts periodic cybersecurity training for its workforce.


text: information security program is a key part of the Company's overall risk management system. The program includes administrative, technical and physical safeguards to help protect the security and confidentiality of customer records and information. These security and privacy policies and procedures are in effect across all of the Company's businesses and geographic locations.


text: time-to-time, the Company has identified cybersecurity threats and cybersecurity incidents that require the Company to make changes to its processes and to implement additional safeguards. While none of these identified threats or incidents have materially affected the Company, it is possible that threats and incidents the Company identifies in the future could have a material adverse effect on its business strategy, results of operations and financial condition. Governance.


text: The Company's management team is responsible for the day-to-day management of cybersecurity risks it faces, including the Company's addition, the Company's and the Bank's boards of directors, both as a whole and through the Bank's Enterprise Risk Management Committee ("ERM") is responsible for the oversight of risk management, including cybersecurity risks. In that role, the boards of directors and the ERM, with support from the Bank's cybersecurity advisors, are responsible for ensuring that the risk management processes designed and implemented by management are adequate and functioning as designed.


text: Elevation Protocol: Incidents with significant potential impact are promptly escalated to senior IT security team members for further review. This ensures that high-level expertise is applied to complex or severe cybersecurity events.

companyName: QHSLab, Inc.

ticker: USAQ


text: have a range of security measures that are designed to protect against the unauthorized access to and misappropriation of our information, corruption of data, intentional or unintentional disclosure of confidential information, or disruption of operations. These security measures include controls, security processes and monitoring of our manufacturing systems. We have cloud security tools and governance processes designed to assess, identify and manage material risks from cybersecurity threats. In addition, we maintain an information security training program designed to address phishing and email security, password security, data handling security, cloud security, operational technology security processes, and cyber-incident response and reporting processes.

companyName: DSS, INC.

ticker: DSS


text: Company is committed to maintaining the highest standards of cybersecurity to protect our data, intellectual property, and customer information from cyber threats. As part of this commitment, we leverage a sophisticated cybersecurity framework that integrates the robust capabilities of the Microsoft cloud ecosystem with the specialized services of a leading third-party cybersecurity service provider.


text: Microsoft cloud ecosystem, including Microsoft 365, Azure, SharePoint Online, Microsoft Defender, and Microsoft InTune, forms the backbone of our cybersecurity infrastructure. These platforms offer advanced security features such as data encryption in transit and at rest, network security controls, identity and access management, and threat protection capabilities. Microsoft's constant investment in cybersecurity research and development ensures that we benefit from cutting-edge security technologies and practices.


text: addition to utilizing the Microsoft cloud ecosystem, we have engaged a third-party service provider to enhance our cybersecurity posture further. This provider brings additional layers of security through services including: Software Security Management: Ensuring that applications such as Office 365 and Azure are configured, maintained and following best security practices.


text: Monitoring and Consultation Services: Continuous monitoring of our systems for suspicious activities and providing expert consultation to address and mitigate potential threats.


text: Storage and Backup of Source Systems: Implementing robust data storage solutions and backup protocols to ensure data integrity and availability. Policy Management: Developing and enforcing comprehensive security policies that govern all aspects of our cybersecurity efforts. Response Management: Rapid identification and response to security incidents to minimize impact. Microsoft cloud ecosystem.


text: approach to cybersecurity is proactive and multifaceted, combining the scalability and reliability of the Microsoft cloud services with the agility and expertise of our third-party cybersecurity partner. Together, these resources form a comprehensive defense mechanism against a wide range of cyber threats, from phishing and malware attacks to sophisticated nation-state sponsored cyber-attacks. We continuously evaluate and adapt our cybersecurity strategy to respond to evolving threats and to align with best practices and regulatory requirements.


text: Our commitment to cybersecurity is integral to our business operations, and we believe our strategic investments in this area significantly mitigate the risk of cybersecurity incidents that could impact our company's reputation, financial position, or operational capabilities.


text: management of the Company is responsible for overseeing risk for the Company and has delegated to the VP, Engineering & Technology ("VPE&T") the responsibility for overseeing the cybersecurity risk management strategy for the Company. Management receives regular updates on our cybersecurity risk management process from the VPE&T. The VPE&T reviews our comprehensive cybersecurity framework, including reviewing our cybersecurity reporting protocol that provides for the notification, escalation and communication of significant cybersecurity events to the management team. Company's cybersecurity program is overseen by our VPE&T, who is responsible for global information technology, including cybersecurity.


text: Our VPE&T, is primarily responsible for assessing and managing material risks from cybersecurity threats, including monitoring the measures used for prevention, detection, mitigation and remediation of cybersecurity incidents. The information security organization is comprised of internal IBIO employees and external security suppliers who provide security monitoring and response.


text: our formation, we have been primarily focused on research and development activities and pursuing FDA approval of our planned products.

companyName: Microbot Medical Inc.

ticker: MBOT


text: We have 22 employees and currently use third-party vendors and service providers for certain product development and regulatory approval activities.


text: We use a third-party sub-contractor to manage all Information Technology (IT) issues, including protection against, detection, and response to cyberattacks.


text: All computers are protected using a cloud-powered endpoint security solution that helps enterprises prevent, detect, investigate, and respond to advanced threats on their networks. It offers endpoint protection, endpoint detection and response, mobile threat defense, and integrated vulnerability management. It also provides, among other things, malware and spyware detection and remediation, rootkit detection and remediation and network vulnerability detection. All Company computer hard drives are automatically encrypted.


text: All Company e-mails are protected by a cloud-based email filtering service designed to protect the Company against advanced threats related to email and collaboration tools. Periodically, all users on the Company's computer network are required to perform multi-factor authentication. The Company uses a cloud-based identity and access management service that enables access to external resources. Backup is performed using a secure, automatic cloud-based backup and restore service.


text: we believe that our third-party vendors and service providers have their own respective cybersecurity protocols which our management believes to be adequate for protecting any of the Company's data that might be in their possession from time to time; however, having such protocols is not necessarily a condition for us using or not using the services of any such vendors or providers.


text: Chief Technology Officer and General Manager is responsible for assessing and managing cybersecurity risks, through his oversight of our IT service provider that manages our IT, but he does not have specific cybersecurity expertise. The Company has an Information Technology Policy that, among other things, governs and provides for cybersecurity policies and processes, including to define safety measures to protect the Company's confidentiality, integrity and availability of data and other intellectual property, as well as to define the manner in which information is stored, saved and routed in the Company's network. Additionally, the Board and management believe cybersecurity represents an important component of the Company's overall approach to risk management and oversight, especially as the Company moves towards commercialization of its first product.


text: threats have not materially affected, and are not reasonably likely to affect, the Company, including its business strategy, results of operations or financial condition while we are strategically focused on pursuing FDA approval and have pre-commercial operations.


text: The Company is not aware of any material security breach to date. Accordingly, the Company has not incurred any expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing a disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations. There can be no assurance that the Company's third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be fully implemented, complied with or effective in protecting the Company's systems and information.


text: Management and Strategy are committed to protecting information and the underlying information systems involved in the functionality of our products and the operation of our business. We assess, identify, and manage material risks from cybersecurity threats through various processes and procedures, including: assessing risks, ad hoc, to identify the potential impact and likelihood of various risks and scenarios and to determine appropriate mitigation strategies and controls; manufacturer, partner, and supplier selection processes; (iii) procedures for responding to cybersecurity incidents; our employees, incident response personnel, and senior management on cybersecurity awareness; the responsibilities of our information technology team and evaluating our cybersecurity posture and performance on an ongoing basis;

companyName: DNA X, Inc.

ticker: SONM


text: regular vulnerability scans and tests utilizing threat intelligence feeds in the assessment of hardware and software; and external service providers and other third parties, where appropriate, to assess, test, or otherwise assist with aspects of our systems addressing cybersecurity threats.


text: we are still in the process of developing a formal incident response plan, our team is trained and had practical experience to cover all phases of the incident management process, including identification, containment, eradication, recovery, and post-incident analysis.


text: Significant cybersecurity incidents are elevated within the hierarchy of management and assessed by a cross-functional, executive management-level team, which is responsible for making the necessary strategic decisions, prioritizing actions that can minimize the impact of the cybersecurity incidents on us and our customers, and determining the materiality of such incidents.


text: the past we were subject to attempts to compromise our information technology systems, and, like all information technology systems, our systems are potentially vulnerable to damage, unauthorized access, or interruption from a variety of sources. As of the date of this annual report on Form 10-K, we are not aware of any such attacks that have materially affected, or are reasonably likely to materially affect, us, including our business strategy, results of operations, or financial condition, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. In addition, our third-party service providers and other partners face similar cybersecurity threats, and although we assess these third parties' cybersecurity controls through a cybersecurity assessment, which may include a cybersecurity questionnaire depending on our risk evaluation, and include security and privacy addendums to our contracts where applicable, a cybersecurity incident any of these entities could materially adversely affect our business and results of operations. For more information on our cybersecurity-related risks, please see "Risks Related to Information Corporate Governance Cybersecurity Risks Oversight by the Members of our Board


text: Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats as a part of its overall risk oversight responsibilities. Such responsibility includes compliance with disclosure requirements, cooperation with law enforcement, and analyzing the related effects on financial and other risks, and it reports any findings and recommendations, as appropriate, to the full board for consideration. The Audit Committee receives annual reports on our cybersecurity risks from management. In addition, management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.


text: management team, including our Head of Information Technology, is responsible for addressing, assessing, and managing our material risks from cybersecurity threats. Our head of Information Technology supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants (when applicable). Our management team's experience includes demonstrated expertise in cybersecurity, mobile and data devices, and smartphone software. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.


text: an exploration stage company, we have limited operations and our business activity to date has been identifying, acquiring, and exploring mineral properties. We have not yet adopted formal cybersecurity risk management programs or formal processes for assessing cybersecurity risks. We understand the importance of managing material risks from cybersecurity threats and are committed, as part of our continuing growth, to implementing and maintaining an adequate information security program to manage such risks and safeguard our systems and data. Data used and stored on our information systems currently is limited to basic information related to our core business operations, which at this time are not materially dependent on information technology. Also, we do not store in our systems any customer or similar data.

companyName: Atlas Lithium Corp

ticker: ATLX


text: currently manage our cybersecurity risk through practices that are applicable to all users of our information technology and information assets, including our employees and contractors. We notify these users of expectations regarding acceptable uses of our information systems and alert them to potential sources of cybersecurity threats. We use a combination of technology and monitoring to prevent security incidents. The technologies we utilize for cybersecurity monitoring across our information technology environment are designed to prevent, detect and minimize cybersecurity attacks, as well as alert management of such attacks.


text: In the last three years, we have not experienced a cybersecurity threat or incident that materially affected our business strategy, results of operations, or financial condition. However, there can be no guarantee that we will not experience such an incident in the future.


text: management team is responsible for the development of our policies and procedures relating to our risk management, including cybersecurity risks. Our board of directors has ultimate oversight of our risk management processes, including any cybersecurity-related risk and activities.


text: In particular, our Audit Committee is responsible for monitoring compliance with legal and regulatory requirements, in addition to considering and discussing guidelines and policies to govern the process by which risk assessment and mitigation is undertaken.


text: are a special purpose acquisition company with no business operations. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our board of directors is generally responsible for the oversight of risks from cybersecurity threats, if any.

companyName: Currenc Group Inc.

ticker: CURR


text: of the date of this Annual Report on Form 10-K, we have not encountered risks from cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations or financial position. For more information about the cybersecurity risks we face, see the risk factor entitled " Cyber incidents or attacks directed at us could result in information theft, data corruption, operational disruption and/or financial loss " in Item 1A- Risk Factors.


text: Management and Strategy regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities, and test those systems pursuant to our cybersecurity policies, processes, and practices, which are integrated into our overall risk management program. To protect our information systems from cybersecurity threats, we use various security tools that are designed to help identify, escalate, investigate, resolve, and recover from security incidents in a timely manner. Our board of directors assesses risks based on probability and potential impact to key business systems and processes as part of our overall risk management program overseen by the board of directors. Risks that are considered high are incorporated into our overall risk management program. We collaborate with third parties to assess the effectiveness of our cybersecurity prevention and response systems and processes and to assist in the identification, verification, and validation of cybersecurity risks, as well as to support associated mitigation plans when necessary. We have also developed a third-party cybersecurity risk management process to conduct due diligence on external entities, including those that perform cybersecurity services. Cybersecurity threats, including those resulting from any previous cybersecurity incidents, have not materially affected our Company, including our business strategy, results of operations, or financial condition. Refer to the risk factor captioned "Cyber security risks and the failure to maintain the integrity of company, employee or guest data could expose us to data loss, litigation and liability, and our reputation could be significantly harmed." in Part I, Item 1A. "Risk Factors" for additional details regarding cybersecurity risks and potential impacts on our business.


text: Meetings of our board of directors include discussions and presentations from management regarding specific risk areas throughout the year, including, among others, those relating to cybersecurity threats, and reports from management on our enterprise risk profile on an annual basis. The board of directors reviews our cybersecurity risk profile with management on a periodic basis using key performance and/or risk indicators. These key performance indicators are metrics and measurements designed to assess the effectiveness of our cybersecurity program in the prevention, detection, mitigation, and remediation of cybersecurity incidents. We take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and incidents.


text: cybersecurity risk management process is a component of our overall approach to managing material risks that could impact our operations, including cybersecurity threats. In general, we seek to manage material internal and third-party cybersecurity risks through an approach that focuses on: (i) protecting information systems and the information residing therein; (ii) identifying, preventing, and mitigating cybersecurity threats; and (iii) assessing and responding to cybersecurity incidents when they occur. Maintaining, monitoring, and updating our information security program—in an effort to ensure that it remains reasonable and appropriate in light of changes in the security threat landscape, available technology, and applicable legal and contractual requirements—is an ongoing effort.

companyName: Celcuity Inc.

ticker: CELC


text: have implemented and maintain various processes, procedures, and measures to support our overall risk management strategy and to manage and mitigate the material risks posed by cybersecurity threats to our systems and data. With respect to cybersecurity, these measures include conducting risk assessments of our operations and using a risk register to assess identified risks; developing business continuity, disaster recovery and incident response plans; implementing technical safeguards and tools; conducting ongoing cybersecurity awareness training; and using contractual protections where appropriate. Our incident response plan outlines the procedures for reporting, investigating, and remediating cybersecurity incidents, including a framework to facilitate the escalation to our management team and board of cybersecurity incidents, so that our management team is alerted in a timely manner to material information that would be required to be disclosed or reported.


text: Chief Financial Officer works with our IT Director regarding incident prevention and response, as well as disclosure determinations, and is accountable at the management level for our overall risk management program. She receives information about cybersecurity from our IT Director to consider as part of that program. Additionally, our Chief Executive Officer receives updates from the Chief Financial Officer and IT Director about significant threats and incidents involving cybersecurity and data protection.


text: use third-party service providers for a variety of services throughout our business, ranging from infrastructure support and maintenance, cybersecurity incident response, data protection and privacy compliance. In addition, we engage with contract research organizations, contract manufacturing organizations, distributors, and other supply chain resources.


text: believe that the use of external service providers improves our operational capabilities, and we have implemented a vendor qualification and management program that applies to our service providers that handle protected health information, personal information, or other information subject to protection under applicable privacy and data protection regulations. This program is designed to address and mitigate cybersecurity and data protection risks that arise from our use of such service providers. We do not have full visibility into the cybersecurity risk management processes of our service providers. We rely on our third-party service providers to provide notification of, and remediate, significant cybersecurity threats and cybersecurity incidents that jeopardize the confidentiality, integrity, or availability of information that we own or use.


text: periodically evaluate, test, and update our policies, standards, and processes to mitigate cybersecurity threats and manage incidents effectively. These efforts include risk assessments, vulnerability assessments and remediations, phishing tests and employee education, and external scans. Additionally, to enhance our capabilities, we periodically engage third-party service providers, including cybersecurity consultants, to incorporate threat intelligence into our processes.


text: of the date of this Form 10-K, we are not aware of any risks from cybersecurity threats, including those resulting from any previous cybersecurity incidents experienced by us or, to our knowledge, by any of our third-party service providers, that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For further discussion of cybersecurity and data privacy risks that may materially affect the Company and how they may do so, see "Risk Factors—If our information technology systems or data, or those of third parties upon which we rely, are or were compromised, we could face clinical trial delays; regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational Governance


text: Board oversees Celcuity's management of risks arising from cybersecurity threats. Our management team is implementing processes for delivering periodic briefings to the Board on material cybersecurity risks that are pertinent to our business operations. Additionally, we have processes to promptly notify the Board of a significant cybersecurity incident and to inform the Board of remediation progress, as appropriate.


text: IT Director has overall responsibility for our information security program, with support from our management team and specialized partners in cybersecurity incident response and privacy. The process includes managing our incident response strategy. If a cybersecurity incident meets certain criteria, however, our CEO and CFO will become involved with the response strategy, including decisions about public disclosure and reporting. Our IT Director also coordinates with our CEO and CFO to determine strategic cybersecurity priorities and to establish believe our business leaders have the appropriate expertise, background and depth of experience to manage risks arising from cybersecurity threats. Our IT Director has served in various roles in information technology and information security for over a decade, which includes experience in the biotech, pharmaceutical and healthcare industries and experience in cybersecurity risk management and data privacy the ordinary course of our business, we, and the third parties upon which we rely, collect, process, receive, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, share and store (collectively, "process") proprietary, confidential, and sensitive information, including protected health information, personal information, credit card and other financial information, or other sensitive information owned or controlled by ourselves or our customers, payors, and other parties.


text: At QHSLab, Inc., we prioritize the security and privacy of all data, with a special emphasis on the personal health, financial, and insurance information entrusted to us by our medical practice clients and their patient electronic personal health information (ePHI). Recognizing the unique vulnerabilities of the digital medicine sector, we have developed an internal cybersecurity risk management framework that incorporates industry-leading practices and technologies to safeguard against cyber threats.


text: Our Approach to Cybersecurity Risk Management Our cybersecurity framework is built around a comprehensive strategy that includes ongoing risk assessment, threat detection, swift incident response, and continuous improvement of our cybersecurity defenses. Key elements of our program include:


text: Framework Adoption: Utilization of the CIS Critical Security Controls (CIS Controls) Cybersecurity Framework as a benchmark for evaluating the effectiveness of our cybersecurity measures.


text: Cybersecurity Assessments: Regular assessments of our cybersecurity through both internal evaluations and planned periodical third-party audits, ensuring adherence to the highest standards of security.


text: Training and Awareness: Mandatory cybersecurity training for all employees upon onboarding and through annual refreshers, fostering a culture of security awareness across the organization.


text: Incident Response and Preparedness: A well-defined incident response plan that enables us to quickly identify, contain, and mitigate the impact of cybersecurity incidents.


text: Third-Party Risk Management: Evaluation of third-party vendors' security practices to ensure they meet our strict standards, especially when they have access to sensitive data. Investment in Security Infrastructure: Investment in cybersecurity technologies and infrastructure to stay ahead of emerging threats.


text: During the year ended December 31, 2023, the Company has not identified risks from cybersecurity threats, including as a result of prior cybersecurity incidents, that have materially affected or are reasonably anticipated to materially affect the Company, including its business strategy, results of operations, or financial condition. Nevertheless, the Company recognizes cybersecurity threats are ongoing and evolving. For more information on the Company's cybersecurity risks, refer to Item 1A, "Risk Factors".


text: Governance and Oversight Cybersecurity governance at QHSLab, Inc. is a board-level priority, with our Board of Directors playing an active role in overseeing our cybersecurity strategy and risk management.


text: Insurance and Risk Mitigation We maintain cybersecurity insurance to mitigate the financial impact of potential incidents. However, we recognize that insurance is only one component of a multifaceted risk management strategy. Incident Response and Risk Management at QHSLab, Inc.


text: Central to our enterprise risk management efforts, QHSLab, Inc. has developed a comprehensive incident response plan to swiftly and effectively address cybersecurity incidents. This plan is a cornerstone of our commitment to maintaining the highest levels of data security and patient privacy.


text: Incident Assessment and Response Procedures Upon identification of a potential cybersecurity incident, management initiates a structured initial assessment, guided by predefined criteria to gauge the incident's severity and potential impact. This evaluation is critical for determining the scope of the incident and crafting an appropriate response.


text: Immediate Assessment: Conducted by the incident response team to determine the incident's nature, scope, and potential impact on QHSLab, Inc.'s operations and sensitive patient data.

stage1Category: Incident Disclosure


text: Commitment to Continuous Improvement Recognizing the dynamic nature of cyber threats, particularly in the digital medicine sector, our incident response plan is subject to ongoing review and refinement. We will regularly update our procedures to incorporate any lessons learned from past incidents and emerging best practices in cybersecurity.


text: all companies that utilize technology, we are subject to threats of breaches of our technology systems. To mitigate the threat to our business, we take a comprehensive approach to cybersecurity risk management. Our Board and our management actively oversee our risk management program, including the management of cybersecurity risks. We have established policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats, including those discussed in our Risk Factors. We have devoted financial and personnel resources to implement and maintain security measures to meet regulatory requirements and shareholder expectations, and we intend to continue to make investments to maintain the security of our data and cybersecurity infrastructure. While there can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective, we believe that the Company's sustained investment in people and technologies have contributed to a culture of continuous improvement that has put the Company in a position to protect against potential compromises, and we do not believe that risks from prior cybersecurity threats have materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that past or future attacks will not materially affect us, including our business strategy, results of operations, or financial condition.

companyName: Cocrystal Pharma, Inc.

ticker: COCP


text: operate in the biopharmaceutical industry, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft, fraud, extortion, harm to employees or customers, violation of privacy laws and other litigation and legal risk, and reputational risk. We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect information and prevent data loss and other security breaches, including a cybersecurity risk assessment program. Both management and the board of directors are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Pulmatrix, Inc.

ticker: PULM


text: current cybersecurity risk assessment program includes identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats and is informed by previous cybersecurity incidents we have observed in our industry.


text: these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for the day-to-day assessment and management of risks from cybersecurity, including the prevention, mitigation, detection, and remediation of cybersecurity incidents, rests with an IT consultant who reports to management.


text: part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.


text: engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws, to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company.


text: of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the audit committee.


text: describe whether and how risks from cybersecurity threats have or are reasonably likely to affect our financial position, results of operations, and cash flows under the heading "Risk related to cybersecurity, intellectual property and regulatory compliance," which is included as part of Item 1A. Risk Factors of this Annual Report on Form 10-K, which disclosures are incorporated by reference herein.

companyName: CVD EQUIPMENT CORP

ticker: CVV


text: To date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, interfere with the progress of our clinical trials, interfere with our efforts to pursue regulatory approvals for our product candidates, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We have attempted to preemptively mitigate the financial impact of any cybersecurity incident and currently maintain a cyber liability insurance policy. However, our cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all. In addition, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations. For further information regarding risks from cybersecurity threats, please refer to "Item 1A. RISK FACTORS—Risks Related to Our Business".


text: management and strategy recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to protect our information systems and protect the confidentiality, integrity, and availability of our data. We have established policies and procedures to assess, identify, and manage material risk from cybersecurity threats. We assess risks from cybersecurity threats against our information systems that may result in adverse effects on our information systems or any information residing therein. We conduct periodic and ad-hoc assessments to identify cybersecurity threats.

companyName: Greenpro Capital Corp.

ticker: GRNQ


text: these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to mitigate identified risks and reasonably address any identified gaps in existing safeguards. Our IT specialist reports to our Chief Executive Officer (CEO)


text: to manage the risk assessment and mitigation process. We monitor and test our safeguards and train our employees on the implementation of such safeguards, in collaboration with human resources, IT, and management. We aim to promote a company-wide culture of cybersecurity risk management.


text: from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing during the financial year ended December 31, 2023.


text: board of directors is responsible for monitoring and assessing strategic risk exposure. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the audit committee. Our executive management team inform our audit committee on cybersecurity risks on a regular basis, at least once per year.


text: cybersecurity coordinator is responsible for assessing and managing our material risks from cybersecurity threats, in close collaboration with our IT team and reports to our CEO. This ensures that the senior management are kept abreast of the cybersecurity posture and potential risks faced by our group.


text: have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems. We use recognized commercially reasonable measures, tools, and methodologies to manage cybersecurity risk, which are tested regularly. We also monitor and evaluate our cybersecurity posture on an ongoing basis through regular malware scans, penetration tests, and third-party reviews. Specific controls that are used to some extent include endpoint threat detection, identity and access management (IAM), privileged access management (PAM), logging and monitoring, multi-factor authentication (MFA), firewalls and intrusion detection and prevention, and vulnerability and patch management.


text: manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we undertake the below listed activities: Monitor emerging data protection laws and implement changes to our compliance processes; annual cybersecurity assessments for employees who use our system to evaluate training needs; onboarding and cyber security training for all employees on an ongoing basis;


text: regular phishing email simulations for all employees; and cybersecurity risk insurance that protects against the potential losses from a cybersecurity incident.


text: incident response plan coordinates the activities that we and our third-party cybersecurity provider take to prepare to respond to and recover from cybersecurity incidents. These include processes to triage, assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. We have an IT continuity plan that we continuously review and update in line with our evolving applications architecture.


text: Board of Directors and Audit Committee oversee our cybersecurity efforts to ensure effective governance in managing risks associated with cybersecurity threats. Our Director of Information Technology provides periodic updates to the Board of Directors and Audit Committee regarding our cybersecurity program, including status updates on various projects to enhance our overall cybersecurity posture.


text: have implemented various processes designed to identify, assess and manage material risks from cybersecurity threats to our information networks, third-party hosted services, communications systems, hardware and software (collectively, our "Systems"), and our data and our clients' data (together, "Data").

companyName: INTELLINETICS, INC.

ticker: INLX


text: cybersecurity risk management efforts leverage the National Institute of Standards and Technology (NIST) cybersecurity framework, that also directly conforms to the SP800-53 r5 Information Security controls framework. Our cybersecurity personnel identify and assess risks using various methods and security tools designed to help prevent, identify, protect, detect, escalate, respond, and recover from identified vulnerabilities and security incidents in a timely manner.


text: maintain various technical, physical, and organizational measures, in the form of policies, standards, processes, and technical capabilities, designed to manage and mitigate material risks from cybersecurity threats to our Systems and Data, including, among other things, internal reporting, annual and ongoing cybersecurity awareness training for employees, mechanisms to detect and monitor unusual network activity, as well as threat detection, containment, incident response and backup recovery tools.


text: conduct tests of our cybersecurity program on a regular basis that are designed to identify our cybersecurity risks. We use third-party security service providers and cybersecurity consultants to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats and review our cybersecurity program. The results of such reviews are reported to certain members of our senior management, who evaluate material risks from cybersecurity threats against our overall business objectives and report to the Board of Directors (Board), which evaluates our overall enterprise risk. Within our senior management our Chief Financial Officer and Chief Technology Officer (CTO) review our cybersecurity program at least quarterly. Our CTO is one of our founders and has been in technology since 1996.


text: One of our board members is CEO of a technology company and another has been employed with a cyber security company.


text: use third-party service providers to perform a variety of functions throughout our business, such as Amazon Web Services, Expedient (Columbus, OH), and Corespace (Dallas, TX). Depending on the nature of the services provided, certain providers are subject to cybersecurity risk assessments at the time of onboarding. We also use various inputs to assess the risk of our third-party service providers, including information supplied by them.


text: we have not, as of the date of this Annual Report on Form 10-K, experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, please see "Risk Factors"


text: included in Part I, Item 1A of this Annual Report on Form 10-K, including "Risks Related to Product Development" and "Financial Risks."


text: are a blank check company with no business operations. Since our initial public offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. We depend on the digital technologies of third parties, and any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data and could have a material adverse effect on our business, financial condition or reputation.

companyName: DT Cloud Acquisition Corp


text: Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.


text: board of directors is generally responsible for the oversight of risks from cybersecurity threats, if there is any. Our management will promptly report to the board of directors on incidents of material cybersecurity risks facing us and any third parties and the measures that may be taken to mitigate such risks. In the event of a cybersecurity incident, we intend to follow an incident response plan, which outlines the steps to be followed from incident identification, mitigation, recovery and notification to legal counsel, senior leadership and the board of directors. We have not encountered any cybersecurity incidents since our initial public offering.


text: Following these risk assessments, responses may include re-design, implementation, and maintenance of reasonable safeguards to minimize identified risks and address any identified gaps in existing safeguards and regularly monitoring of the effectiveness of our safeguards.

companyName: Harvard Apparatus Regenerative Technology, Inc.

ticker: HRGN


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and a third-party risk management process for key service providers, suppliers, and vendors.

companyName: Walker & Dunlop, Inc.

ticker: WD


text: Risk management and strategy We understand the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Processes to manage risks from cybersecurity threats have been incorporated as a part of our overall risk assessment process. Our cybersecurity risks include theft of business data, fraud or extortion, lack of access to our information systems, harm to employees, harm to business partners, violation of privacy laws, potential reputational damage, and litigation or other legal risk if a cybersecurity incident were to occur. It is difficult to assign a monetary materiality assessment to these risks or to the impact if we were to sustain a breach of our systems. Our approach is based on the premise that any cybersecurity incident could result in material harm to our company.

companyName: Vivos Therapeutics, Inc.

ticker: VVOS


text: We utilize a seasoned and mature artificial intelligence-based security system that learns and monitors the actions of individuals that have access to our networks and systems, including location of access (notably from international locations), email, and SAAS platforms that we don't host. The system not only protects based off of the specific rules implemented, it also takes action based on user activity (including remote access to our systems by our employees) that is outside their normal behavior pattern. Additionally, our employees go through cybersecurity awareness training as part of their onboarding procedures.


text: If a threat is detected, our system automatically notifies our internal information systems management ("ISM") team of all activities and ranks those activities based on their level of threat to the system and/or deviation of behavior from normal. Severe threats notify the ISM team via text message, regardless of hours of operation. In addition to the notification, the system will automatically take action to secure the system, up to and including blocking user accounts and access. The ISM team will then review the notification, assess the action that was taken against the actual threat, and then clear the condition or take further action.


text: To mitigate risk, we periodically evaluate and assess the threat landscape and our security controls, through assessments, regular network and endpoint monitoring. We also have processes to oversee and identify material cybersecurity risks associated with our use of third-party service providers, including performing diligence on certain third parties that have access to our systems, data or facilities that store such systems or data, continually monitoring cybersecurity threat risks identified through such diligence


text: Under our framework, cybersecurity issues, including those involving vulnerabilities introduced by our use of third-party software, are analyzed by subject matter experts for potential financial, operational, and reputational risks, based on, among other factors, the nature of the matter and breadth of impact.


text: As of the date of this Report, there have been no cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, operations, or financial condition.


text: determined to present potential material impacts to our financial results, operations, and/or reputation would immediately be reported by our Senior Vice President of Technology to our Chief Financial Officer and escalated, as appropriate, to our board of directors or individual members or committees thereof, in accordance with our escalation framework. Given the lack of material cybersecurity incidents relating to our company, we have not been required to escalate any matters to our board of directors, although management keeps the board of directors periodically informed of cybersecurity matters. In addition, we have established procedures to ensure that members of our management responsible for overseeing the effectiveness of disclosure controls are informed in a timely manner of known cybersecurity risks and incidents that may materially impact our operations and that timely public disclosure is made, as appropriate.


text: management and strategy the assistance of our IT vendor, we established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with an information technology (IT) consultant who reports to our Chief Financial Officer, to manage the risk assessment and mitigation process. Our Board of Directors provides oversight to our cybersecurity efforts to ensure effective governance in managing risks associated with cybersecurity threats. Our CFO provides periodic updates to the Board of Directors regarding our cybersecurity program, including information about cyber risk management governance and status updates on various projects intended to enhance the overall cybersecurity posture of the Company.


text: conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.


text: have not encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to " Cyber-attacks or other failures in telecommunications or information technology systems and deficiency in our, or those of third parties upon which we rely, cybersecurity could result in information theft, data corruption and significant disruption of our business operations." under


text: Board of Directors is responsible for overseeing our risk management and strategy and cybersecurity is a critical element of this strategy.

companyName: Guardion Health Sciences, Inc.


text: Management is responsible for the day-to-day administration of our risk management strategy and our cybersecurity policies, processes, and practices. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our operations, business strategy, results of operations or financial condition. For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, refer to Part I, Item 1A. Risk Factors for additional information about cybersecurity risks and potential related impacts on our Company.