text: We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example: professional services firms (including legal counsel), threat intelligence service providers, cybersecurity consultants, cybersecurity software and managed service providers, penetration testing firms, and forensic investigators.

companyName: Zoom Communications, Inc.

ticker: ZM


text: Our CISO reports quarterly to the Audit Committee of our board of directors (the "Audit Committee"), which is responsible for overseeing the Company's cybersecurity risk management program and cybersecurity risks. As part of that report, our CISO covers topics such as (i) an overview of our overall cybersecurity strategy and posture, (ii) results and recommendations from cybersecurity risk assessments and audits, (iii) vulnerabilities in our information systems, (iv) progress towards pre-determined risk-mitigation goals, (v) identified and potential cybersecurity risks and threats, (vi) cybersecurity incidents of certain impact in accordance with the Company's cybersecurity policies, and (vii) programs related to mitigation of cybersecurity risks and potential threats, among other things. The Audit Committee reports to the full board of directors regarding its activities, including reports that it receives from our CISO.

companyName: Compass, Inc.

ticker: COMP

secItem: Item 1C


text: The Company maintains a formal Information Security Steering Committee comprised of a cross-functional group of business leaders. This committee meets at least quarterly to discuss performance of the prevention, detection, and mitigation plans that are being carried out by the Company's information security function, as well as the identification of any material new or heightened cybersecurity risks or incidents not already communicated by the CIO and Senior Director of IT.

companyName: REV Group, Inc.


text: Our Board of Directors has a Risk Committee to assist it in fulfilling its oversight responsibility with respect to the management of cybersecurity risks related to our products and services as well as our information technology and network systems. The responsibilities of the Risk Committee include overseeing our implementation and maintenance of cybersecurity measures, data governance, and compliance with applicable information security laws. The Risk Committee receives reports from management concerning our significant cybersecurity threats and risk and the processes we have implemented to address them. In addition, our Audit Committee has oversight responsibility over our internal financial controls and our risk management program, including disclosure controls related to cybersecurity. Senior management is responsible for the day-to-day operations of protecting the Company's information systems and periodically provides cybersecurity briefings to the entire board of directors. This includes a full brief and update to the Board of Directors from the Chief Information Officer and Chief Information Security Officer on the state of the Company's cybersecurity program on at least an annual basis.

companyName: Everything Blockchain, Inc.

ticker: EBZT


text: We use the Federal Financial Institutions Examination Council's Cybersecurity Assessment Tool to help us identify our cybersecurity risks and determine our cybersecurity preparedness. This assessment tool incorporates regulatory guidance as well as concepts from other industry standards, including the National Institute of Standards and Technology Cybersecurity Framework. The results of the assessment are used to determine risk management practices and controls in order to align our cybersecurity preparedness to address the identified risks within our risk appetite. We engage a third-party to provide an annual risk assessment of our compliance with interagency guidelines for safeguarding confidential customer information. This risk assessment focuses on our information security program and the controls in place to protect client information. The results of the risk assessment are analyzed and used to improve our information security program where needed. Internal audits, regulatory examinations and third-party assessments of our processes in information technology and information security also help us assess our cybersecurity preparedness and whether risk management practices and controls need adjustment. Risk issues are identified through assessments, audits, examinations and security testing. Findings are tracked and reported to the Bank's Technology Committee, and the Audit Committee of the Board of Directors.

companyName: FVCBankcorp, Inc.

ticker: FVCB


text: Management of the identified risks is embedded into business processes and key decision making at every level of the Company. Our enterprise risk management team works closely with our CSO and IT risk management team to evaluate and address material cybersecurity risks in alignment with our business strategy and operational needs.

companyName: BLACK HILLS CORP /SD/

ticker: BKH


text: Although, as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our trust account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our initial public offering. In addition to our own cybersecurity risks, any proposed business combination target, such as Nidar, may have been subject to, or may in the future be subject to, cybersecurity incidents.

companyName: Cartica Acquisition Corp

ticker: CRTAF


text: Our CRO works closely with our IT support to assess, monitor, and manage our cybersecurity risks. Our IT support regularly provides updates and reports to our CRO of all aspects related to cybersecurity risks and incidents, which are then presented to the Chief Executive Officer ("CEO") and Chief Financial Officer ("CFO"), as necessary. This helps ensure that the highest levels of management are kept abreast of the cybersecurity potential risks facing the Company. Furthermore, significant cybersecurity matters and strategic risk management decisions, if any, are escalated to our Board of Directors, ensuring that they have comprehensive oversight and can provide guidance on critical cybersecurity issues.

companyName: LogicMark, Inc.

ticker: LGMK


text: As a company managing the use and disclosure of PHI and PII, our Program incorporates annual independent Systems and Organization Control 2 (SOC 2) Type 2 audits that are conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants, which provide an independent evaluation of the design and operating effectiveness of our controls. We also annually undergo independent HIPAA Security Rule risk assessments of our administrative, physical, and technical safeguards for protecting the confidentiality, integrity, and availability of data; independent attestations of compliance with the Payment Card Industry Data Security Standard (PCI-DSS); and Health Information Trust Alliance (HITRUST) certification. In addition, external assessors periodically evaluate our safeguards against multiple frameworks, including NIST.

companyName: R1 RCM Inc. /DE


text: Most of the information generated and collected by us is stored and maintained by third-party vendors and service providers. We believe that each of these providers has its own cybersecurity protocols to which our management believes to be adequate for protecting our files in their possession. For more information about these risks, please see "Item 1.A – Risk Factors – Risks Related to Our Business and Industry – Significant disruptions of our information technology systems or breaches of our data security could adversely affect our business." in this annual report.

companyName: Charging Robotics Inc.

ticker: CHEV


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and a vendor management policy for service providers.

companyName: New Asia Holdings, Inc.

ticker: NAHD


text: Cyber partners are a key part of our cybersecurity infrastructure. KULR partners with leading cybersecurity companies, leveraging third-party technology and expertise. KULR engages with these partners to monitor and maintain the performance and effectiveness of products and services that are deployed in KULR's environment.

companyName: KULR Technology Group, Inc.

ticker: KULR


text: On an ongoing basis, we identify, categorize, assess, monitor and respond to business risks. We consider the various ways in which risks may affect our business by measuring the impact of those risks against a consistent set of criteria, which include the potential impact to our operations, financial performance, clients, technology, reputation, business strategy and regulatory environment. The risk committee of the board of directors reviews and approves a list of top enterprise risks and the risk appetite relating to such risks. Among the top risks included in our ERM program is cybersecurity risk. Response plans are developed, tracked and implemented for residual risks that are above the acceptable tolerance level.

companyName: FISERV INC

ticker: FISV


text: Our cybersecurity risk management framework is integrated into our overall ERM process which is managed, administered, and governed by our senior executive team under the oversight of the Board. As part of our ERM program, our senior executive team collaborates with the ERC, which is comprised of executives from various operating segments and functional departments across the Company, in the initial identification and assessment of the Company's leading risks to an ERC, inclusive of information security.

companyName: Schneider National, Inc.

ticker: SNDR


text: The CISO and the CIO present cybersecurity updates regularly and, as necessary, to the CFO. The CFO will engage the Board to participate in assessing cybersecurity risk as part of the Company's overall risk assessment. In addition, the Board is informed when a cybersecurity issue is identified that may pose significant risk to the Company.

companyName: MOOG INC.

ticker: MOG-A


text: Our Senior Director, IT & Facilities and our Senior Manager, IT Infrastructure and Operations are responsible for helping to integrate cybersecurity risk considerations into our overall risk management strategy and communicating key priorities to relevant personnel. Our Senior Director, IT & Facilities and our Senior Manager, IT Infrastructure and Operations are responsible for helping prepare for cybersecurity incidents, approving cybersecurity processes and reviewing security assessments and other security-related reports.

companyName: CERUS CORP

ticker: CERS


text: While we have experienced cybersecurity incidents in the past, to date none have materially affected us or our business strategy, results of operations, financial condition and/or cash flows. Moreover, we have not identified any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, financial condition and/or cash flows. See Item 1A, Risk Factors above for more information. While we continually work to safeguard the information systems we use, and the proprietary, confidential, and personal information residing therein, and mitigate potential risks, there can be no assurance that such actions will be sufficient to prevent cybersecurity incidents or mitigate all potential risks to such systems, networks, and data or those of our third-party providers.

companyName: TTM TECHNOLOGIES INC

ticker: TTMI


text: Cybersecurity Governance Apollo's Board of Directors' oversight of cybersecurity risk management is supported by the audit committee of Apollo's Board of Directors ("Apollo's audit committee"), the AAM Global Risk Committee ("AGRC"), the Operational Risk Forum (the "ORF"), the Cybersecurity Working Group and management. Apollo's Board of Directors, Apollo's audit committee, the AGRC, the ORF and the Cyber Security Working Group receive regular updates on Apollo's information technology, cybersecurity risk profile and strategy, and risk mitigation plans from Apollo's risk management professionals, Apollo's Chief Security Officer ("CSO"), the CISO, the AHL CISO. other members of management and relevant management committees and working groups. The Cyber Security Working Group is chaired by the CISO and has representation from Apollo's Technology, Legal, Compliance, and ERM teams. The group meets at least once a quarter to discuss cybersecurity and risk mitigation activities, among other topics. The CISO regularly reports to the ORF regarding cyber risk, and the ORF in turn reports to the AGRC on a quarterly basis, noting any cyber updates when necessary or appropriate. In turn, Apollo's Board of Directors and/or Apollo's audit committee receive quarterly risk updates from risk management professionals, as well as at least annual updates on cyber risk specifically. The full Apollo Board of Directors or Apollo's audit committee receives presentations and reports on cybersecurity risks from Apollo's CSO or CISO, as well as from AHL's CISO, at least annually.

companyName: Apollo Debt Solutions BDC


text: Use of Third Parties Cybersecurity Service Providers and Third-Party Consultants. At least annually we engage independent cybersecurity consultants, auditors and other third parties to assess and enhance our cybersecurity risk assessment and practices. These third parties conduct independent assessments, penetration testing and vulnerability assessments to identify weaknesses and recommend improvements. Additionally, we employ a number of third-party tools and technologies as part of our efforts to enhance cybersecurity functions and monitoring.

companyName: Alpha Metallurgical Resources, Inc.

ticker: AMR


text: We have defined policies and procedures for cybersecurity incident detection, containment, response and remediation and have adopted physical, technological and administrative cybersecurity and data privacy controls. In particular the Company has established a cybersecurity incident response plan includes classification of cybersecurity incidents, to whom to escalate an incident, and when to escalate a cybersecurity incident, including direct communication to the VP of IT, Director and President. The Company regularly conducts vulnerability assessments and tracks remediation to completion. Critical systems are periodically audited against industry standards.

companyName: DIODES INC /DEL/

ticker: DIOD


text: In the ordinary course of our business, we use, store and process data including data of our employees, partners, collaborators, and vendors. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management program, which is comprised of a wide array of policies, standards, architecture, and processes. The cyber risk management program falls under the responsibility of our Director of IT & GxP Quality Systems, who has more than 15 years of experience, including cross-functional expertise in IT compliance and GXP systems. Under the guidance of our Director of IT & GxP Quality Systems, reporting up to our Chief Financial Officer, we develop, maintain, and evidence the policies, standards, and processes in a manner consistent with applicable legal requirements. We also utilize a variety of cybersecurity software from reputable vendors in cybersecurity.

companyName: Genprex, Inc.

ticker: GNPX


text: Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, our security management partners work with our Chief Financial Officer to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business. In addition, our Chief Financial Officer evaluates material risks from cybersecurity threats against our overall business objectives and reports to the audit committee of the board of directors, which evaluates our overall enterprise risk.

companyName: VYNE Therapeutics Inc.

ticker: VYNE


text: Our Board of Directors is responsible for understanding the primary risks to our business, including any cybersecurity risks. The Board of Directors is responsible for reviewing periodically our and the Adviser's information technology security controls and related compliance matters, with management. Sixth Street's Head of Technology Risk reports to the Board of Directors at least annually on cybersecurity matters, including risks facing us and the Adviser and, as applicable, certain incidents. In addition to such periodic reports, the Board of Directors may receive updates from management as to our and the Adviser's cybersecurity risks and Sixth Street cybersecurity program developments.

companyName: Sixth Street Specialty Lending, Inc.

ticker: TSLX


text: The Board of Directors, both directly and through the Audit Committee, oversees Management's responsibility of ensuring proper functioning of our cybersecurity risk management program. In particular, the Audit Committee assists the Board in its oversight of management's responsibility to assess, manage and mitigate cybersecurity risks. The Audit Committee receives a cybersecurity update at each regular meeting of the Board covering cybersecurity risks, cybersecurity staffing and staff development including certifications and training. These updates are given either in person by the CIO and CISO or in written presentations created by them.

companyName: OPPENHEIMER HOLDINGS INC

ticker: OPY


text: The Company currently uses a third-party system for training our people on cybersecurity risks as well as strategies to mitigate those risks through interactive learning and tests. The Company tracks the compliance and performance of the relevant people who participate in the training.

companyName: Thermon Group Holdings, Inc.

ticker: THR


text: Our enterprise risk management process includes an evaluation of cybersecurity risk together with other company risks. The Company has established a cybersecurity risk management program (the "program") designed to assess, identify, and manage material cybersecurity risks. Our program is designed based on industry best practices and is aligned with the core components of frameworks established by the National Institute of Standards and Technology (NIST), Center for Internet Security (CIS) and International Organization for Standardization (ISO).

companyName: J&J SNACK FOODS CORP

ticker: JJSF


text: has primary responsibility for the development and oversight of Alternus's cybersecurity team and the development and maintenance of the company's related cybersecurity policies and procedures. The CIO has over 20 years' experience working in the information and operational technology field. The company's cybersecurity team continuously assesses the evolving cyber threat landscape based on their expertise and that of our third-party partners. They then work with all parts of Alternus to protect against, detect, identify, respond to, and recover from the risks that cybersecurity threats present. The cybersecurity team views and responds to cybersecurity risks in a holistic manner, applying a comprehensive multilayered strategy to prevent, detect, and mitigate them. They have identified Alternus's critical cyber assets and taken appropriate steps to protect them. External expertise is regularly engaged to assess Alternus's cybersecurity program and help the cybersecurity team to strengthen the organization's monitoring, alerting, prevention, mitigation, and recovery capabilities. Third party cyber vulnerability assessments, maturity assessments, and partnerships are used to assess and refine all elements of our cybersecurity program. In addition to managing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of third-party service providers. Risk assessments are performed against third-party service providers with a specific focus on any sensitive data that is to be shared with them. The internal business owners of Alternus's applications are required to document user access reviews regularly. We request a System and Organizational Controls (SOC) 2 report from the vendors of our enterprise cloud applications. If they do not provide us with a SOC 2, we seek additional compensating risk assurance in our contract language with them. Risks associated with the use of third-party service providers are managed as part of our overall cybersecurity risk management framework.

companyName: Alternus Clean Energy, Inc.

ticker: ALCE


text: The Company's senior leadership, including the Safety, Legal, Government Affairs, Operations, Aviation Security, Finance, Communications and Digital Technology functions, as well as others as needed, support the CDR and contribute to the management of cybersecurity and digital risk by attending regular cybersecurity risk reviews and participating in cybersecurity drills.

companyName: United Airlines Holdings, Inc.

ticker: UAL


text: Our management team, including our Vice President of Information Technology, is responsible for assessing and managing our material risks from cybersecurity threats, and takes steps to stay informed about and monitor efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include information obtained from governmental, public or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in our IT environment. Our management team has developed and implemented a risk management program that includes cybersecurity risks as a risk category and is intended to protect the confidentiality, integrity, and availability of our critical systems and information. Management has primary responsibility for our overall cybersecurity risk management program and supervising internal staff and external consultants assisting with cybersecurity matters, including those that assist management in staying informed about cybersecurity risks and incidents. Management updates the Committee periodically on our cyber risk management program, and the Committee reports to the full board of directors regarding its activities, including those related to cybersecurity.

companyName: Tamboran Resources Corp

ticker: TBN


text: Our Chief Information Officer is responsible for timely informing management regarding cybersecurity incidents, including prevention, detection, mitigation, and remediation activities. Our Chief Information Officer and Director of Cybersecurity communicate at least annually with the Audit Committee and the Board on matters such as data protection and cybersecurity. These individuals have extensive cybersecurity knowledge and skills, with over 15 years of collective experience in the management of cybersecurity threats. We maintain cybersecurity incident response plans, which address defined actions to be taken in response to risks from cyber incidents. In the event of a material cybersecurity incident, the Chief Information Officer must notify management, the Audit Committee and the Board.

companyName: OIL STATES INTERNATIONAL, INC

ticker: OIS


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things, operational risks; intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy or security laws and other litigation and legal risk; and reputational risks. These risks affect us, as well as our suppliers, customers, and ultimately their consumers.

companyName: Luminar Technologies, Inc./DE

ticker: LAZRQ


text: Our control over the security posture of and ability to monitor the cybersecurity practices of third-party vendors and service providers is limited and there can be no assurance that we can prevent, mitigate or remediate the risk of any compromise or failure in the cybersecurity infrastructure owned or controlled by third parties.

companyName: Forward Industries, Inc.

ticker: FWDI


text: The Company has procedures and safeguards designed to detect and/or prevent unauthorized access to confidential information and defend against cyber-attacks, both internally and with the assistance and partnership of cybersecurity experts, with a view toward addressing the ever-evolving threat landscape and changing cybersecurity regulations. As part of its role in risk oversight, the Audit & Finance Committee of the Company's Board (Audit & Finance Committee) reviews the Company's program for managing information security risks, including data privacy and data protection. Our cybersecurity framework, which is based on the National Institute of Standards and Technology Cybersecurity Framework, includes risks and controls embedded into our processes and technology, and measured and monitored by cybersecurity subject matter specialists. All employees and contractors with access to our Company's systems must also complete mandatory comprehensive cybersecurity trainings periodically and participate in simulations which are deployed to educate and prepare users for cyber-attacks and similar risks.

companyName: Endo International plc


text: Our global risk management policy provides a uniform approach for monitoring, identifying, measuring and responding to enterprise-wide risk to minimize potential disruptions to business operations and harm to reputation. Our global risk management policies framework encompasses, enterprise risk management, business continuity and cybersecurity. Cybersecurity risk is a key component of our overall global risk management policy. The Company's cybersecurity program is focused on the following areas: • Governance: In furtherance of the Board's risk management oversight goals, the Company convenes a Risk Committee comprised of key functional and business leaders. Among other members, the Risk Committee includes our Chief Information Security Officer ("CISO"), our Director of Global Risk and Property Management, our Vice President, Internal Audit, and our Vice President, Environmental, Health and Safety. This diverse group supports a strong focus on cybersecurity, business continuity, and associated enterprise risks. The Risk Committee's members are charged with, among other things, identifying and assessing significant and emerging risks, as well as working with executive leadership teams to develop and execute plans, responses and mitigation strategies to address significant cybersecurity risks, that could otherwise negatively impact our ability to achieve our objectives. The Risk Committee's cybersecurity management function addresses the Company's information security challenges and risks from various IT-related sources. • Collaborative Approach: The Company has developed and implemented a robust approach to identify, prevent and mitigate cybersecurity threats and incidents. This is supported by clear and direct cross-functional escalation paths to ensure proper handling and analysis so that decisions regarding response, materiality and any resulting disclosure and reporting of such incidents are clearly allocated and can be made in a timely manner. • Technical Safeguards: The Company employs industry accepted security tools, techniques, and system monitoring to protect the confidentiality of our systems and data. Maintaining the privacy and security of our associate, customer, and supplier data is paramount. The company deploys technical safeguards which include, but are not limited to, encryption, multi-factor authentication, network segmentation, privilege access management and, endpoint detection and response. These safeguards are evaluated on a routine basis with the intention of identifying and remediating potential vulnerabilities and enhancing the overall security framework. • Incident Response and Recovery Planning: The Company has established and maintains a comprehensive cyber incident response policy. This policy provides direction and guidance to address and manage security incidents, including identification, classification, and response. • Third-Party Risk Management: The Company maintains a risk-based approach to third party engagement and the cybersecurity risks associated therewith. This approach adheres to Company-policy, which includes regularly evaluating and identifying material risks from cybersecurity threats associated with third parties' access to our systems, as well as the systems of third parties that could adversely impact our business in the event of a cybersecurity incident affecting those third-party systems.

companyName: REGAL REXNORD CORP

ticker: RRX


text: We also have controls and procedures for reporting material cybersecurity incidents, including review of significant cybersecurity incidents by a cross-functional team to determine whether further escalation is necessary. We also periodically conduct practice exercises with management to familiarize the management team with our cyber incident response capabilities and processes. We also conduct internal and third-party assessments or penetration tests to validate our cybersecurity controls and improve our security posture. We also maintain cybersecurity liability insurance coverage.

companyName: AAR CORP

ticker: AIR


text: The ISO reports to the BRCC on the status and impact of any information security related developments and strategic initiatives, and depending on the severity of the situation, directly to the Board of Directors. In addition to regular meetings, the BRCC, the ISO, Chief Risk Officer, Chief Information Officer, and Chief Executive Officer maintain an ongoing dialogue regarding emerging or potential cybersecurity risks that we face, particularly as a financial institution. The Company's Management Risk and Compliance Committee also reports directly to the BRCC regarding our risk management initiatives. The BRCC also receives quarterly reports from the Executive IT Committee and IT department in order to say informed on all aspects of cybersecurity risk affecting the Company.

companyName: OP Bancorp

ticker: OPBK


text: We recognize that third-party service providers introduce cybersecurity risks to our business. In an effort to mitigate these risks, before engaging with any third-party service provider, we conduct due diligence to evaluate their cybersecurity capabilities. Additionally, we endeavor to include cybersecurity requirements in our contracts with these providers and endeavor to require them to adhere to security standards and protocols, as applicable.

companyName: Solaris Energy Infrastructure, Inc.

ticker: SEI


text: In the ordinary course of our business, we collect, use, store, and transmit digitally large amounts of confidential, sensitive, proprietary, and personal information. The secure maintenance of this information and our information technology systems is important to our operations and business strategy. To this end, we have implemented processes designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein.

companyName: EXPRO GROUP HOLDINGS N.V.

ticker: XPRO


text: We have certain processes for assessing, identifying and managing cybersecurity risks, which are built into our overall risk management program and information technology function and are designed to help protect our information assets and operations from cyber threats, protect employee and patient information from unauthorized access or attack, as well as secure our networks and systems. Such processes include physical, procedural and technical safeguards, and routine review of our operations to identify risks and enhance our practices. We engage certain external parties, including consultants and computer security firms, to enhance our cybersecurity oversight. We consider the internal risk oversight programs of third-party service providers when engaging them in order to help protect us from any related vulnerabilities.

companyName: Trevi Therapeutics, Inc.

ticker: TRVI


text: Additionally, InterDigital's team of dedicated cybersecurity experts/professionals maintain a comprehensive set of cybersecurity policies and standards, including a security incident response framework. The framework is a set of coordinated procedures and tasks that the InterDigital incident response team executes to ensure timely and accurate reporting and resolution of computer security incidents. The framework details who, how and when appropriate persons or committees, including the Audit Committee are kept informed on the status of potential cybersecurity incidents. A summary of recent incidents is also presented by the Chief Information Officer ("CIO") at each regular Audit Committee meeting. Our policies and standards were developed in collaboration with a wide range of disciplines, such as information technology, cybersecurity, legal, compliance and business. Our cybersecurity strategy and policies are continually reassessed to ensure they attempt to identify and proactively address the constant changes in the global threatscape, including through the use of tabletop exercises. Decision makers such as the CIO, executive team, and Audit Committee are regularly kept up to date on cybersecurity trends. Ongoing collaboration with stakeholders throughout the business also helps to build continued awareness and visibility of future needs.

companyName: InterDigital, Inc.

ticker: IDCC


text: 1.The service center's CIO and CISO lead the Information Security ("IS") team in developing, documenting, reviewing, and testing security and incident management procedures;

companyName: Pennant Group, Inc.

ticker: PNTG


text: Key elements of our cybersecurity risk management program include, but are not limited to, the following: cybersecurity awareness training and communications for employees;

companyName: COGENT COMMUNICATIONS HOLDINGS, INC.

ticker: CCOI


text: Our cybersecurity incident response processes are designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including our ISO. The ISO works with our CSIRT to help us mitigate and remediate cybersecurity threats or incidents of which they are notified. The ISO is responsible for designing and promoting general security awareness and training, as well as defining and training relevant participants on our incident response processes. Our security and incident response processes include escalation and reporting to the CSIRT, Disclosure Committee, senior management and Audit Committee for certain information security incidents, as warranted under the circumstances.

companyName: DYNAVAX TECHNOLOGIES CORP

ticker: DVAX


text: Until November 2023, our Board had oversight responsibility for cybersecurity threats, and the SVP of IT provided cybersecurity-related information to the Board on a periodic basis. In November 2023, the Board formed a Cybersecurity Special Committee which has oversight over our management of cybersecurity threats and is charged with periodically reporting on cybersecurity matters to the Board. Currently, the Cybersecurity Special Committee consists of four independent directors. The Board's oversight, including through the Cybersecurity Special Committee, includes receiving periodic reports from the SVP of IT and other information technology team members on various cybersecurity matters, including risk assessments, mitigation strategies, areas of emerging risks, incidents and industry trends, and other areas of importance. In addition, the Cybersecurity Special Committee is now tasked with oversight of our annual cybersecurity assessment of key cybersecurity risks, which was previously overseen by the Board.

companyName: ARKO Corp.

ticker: ARKO


text: Risks from Material Cybersecurity Threats As of the date of this report, the Company has not identified any cybersecurity threats that have materially affected or are reasonably likely to have a material effect on the Company's business strategy, results of operations, or financial condition. Although the Company has not experienced cybersecurity incidents that are individually, or in the aggregate, material, the Company and its service providers have experienced cyber-attacks in the past, which the Company believes have thus far been mitigated by preventative, detective, and responsive measures put in place. For a detailed discussion of the Company's cybersecurity related risks, see "Item 1A Risk Factors—Information Technology, Cybersecurity, and Data Privacy Risks."

companyName: SOUTHWEST AIRLINES CO

ticker: LUV


text: We maintain processes to inform and update management and, as needed, the audit committee, regarding security incidents that may pose a significant risk for the business, as applicable. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition; however, like other companies in our industry, we and our third-party vendors have experienced threats and security incidents relating to our and our third-party vendors' information systems. For more information, please see "Item 1A, Risk Factors."

companyName: Societal CDMO, Inc.


text: The Company, through its information technology partner, deploys technical safeguards that are designed to protect the Company's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti- malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.

companyName: Longeveron Inc.

ticker: LGVN


text: CEO is responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside consulting firm to monitor activity and advise the company of cybersecurity protocols.

companyName: SATIVUS TECH CORP.

ticker: SATT


text: In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. In June 2022, we experienced a previously disclosed network outage which required us to, among other things, limit access to our applications and services by our employees and customers. In response, we incurred considerable costs to restore the security of our internal systems and networks and adopted various enhancements. Please refer to "Item 1A. Risk Factors" for further information about the material risks associated with various cybersecurity threats.

companyName: Exela Technologies, Inc.

ticker: XELA


text: Governance and Oversight EQT's cybersecurity governance structure is led by the CISO, responsible for EQT's cybersecurity program. The CISO has 15 years of experience working with cybersecurity, business continuity, risk management and technology across several industries and holds a Master and a Bachelor of Computer Science and Engineering. The CISO heads the Security and Platform Engineering Team ("SPET") of dedicated information security professionals and platform engineers, concentrating on the security and stability of the technical platform. SPET collaborates closely with other technology teams, such as the EQT information technology operations team. The CISO reports to the Information Security Steering Committee (the "Steering Committee"), comprised of select Executive Committee members of EQT. The Steering Committee receives quarterly updates from the CISO. Furthermore, the CISO also reports annually to EQT's Audit Committee and twice a year to a member of EQT's board appointed to oversee cybersecurity risk. In addition, the Group Risk Function reports to the Risk Committee at least three times per year.

companyName: EQT Exeter Real Estate Income Trust, Inc.


text: The Cybersecurity Incident Response Team ("CIRT"), which is led by the CTO, is responsible for the prevention, detection, mitigation, and remediation of cybersecurity incidents and conducts primary incident response efforts. Our CTO, who is responsible for assessing and managing the Company's cybersecurity risks, has over 30 years of industry experience, including serving in similar roles leading and overseeing cybersecurity programs at Raycom Media prior to the Raycom Merger. Other team members of the CIRT also have relevant educational and industry experience, including holding similar positions at large companies. Incidents can be escalated up to our executive leadership team, depending on the severity of the incidents. Our President and/or CTO regularly report to our Board, and our CISO and General Counsel regularly report to our Audit Committee about our cybersecurity health and initiatives. In addition, the Board receives quarterly reports on risk management activities across Gray operations, including with respect to cybersecurity.

companyName: GRAY MEDIA, INC

ticker: GTN


text: The AEOC regularly discusses with management, including our CTO, our enterprise risk management process, including our cybersecurity exposures, the steps management has taken to monitor and control such exposures and guidelines and policies to govern our risk assessment and risk management processes. The AEOC periodically reports to the Board regarding significant matters identified with respect to the foregoing, including, among others, our risk assessment and risk management approach to cybersecurity.

companyName: RADIANT LOGISTICS, INC

ticker: RLGT


text: Pismo Coast Village has not had a material or data breach. Our strategy is to mitigate risks preventatively. The is implemented through best-in-class cybersecurity strategies preventative measures carried out by our vendor CompuData. Our identifiable risk areas are twofold: First within accounting and second, within taking payments. Our accounting department is hosted on a cloud system utilizing SSL for access and encryption. Our Managed Services company, CompuData, manages risk and preventative cyber security to that server. Within our taking of payments, we are fully PCI compliant within our payment processing service, Clover. No Credit card information is stored or transferred outside of that system.

companyName: PISMO COAST VILLAGE INC


text: Cybersecurity Risk Management & Strategy We have strategically integrated cybersecurity risk management into our broader enterprise risk management program to ensure cybersecurity risks are identified, evaluated and addressed alongside our operational objectives. Overall, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, integrity and availability of our data and information by identifying, preventing and mitigating cybersecurity threats and being prepared to effectively respond to cybersecurity incidents when they occur. As a global company, we are also committed to respecting individual privacy and complying with applicable data privacy laws throughout the world, such as the European Union's General Data Protection Regulation ("GDPR"), U.K. Data Protection Act and the California Consumer Privacy Act ("CCPA").

companyName: WORLD KINECT CORP

ticker: WKC


text: Our Board of Directors has delegated oversight of our cybersecurity program to our Audit Committee, and this oversight responsibility is reflected in our Audit Committee charter. Our Audit Committee receives quarterly updates from our chief information security officer on the status of these programs. Our Audit Committee also receives a detailed presentation from our chief information security officer on our cybersecurity program annually, which includes the results of an external third-party assessment. Our Audit Committee is comprised solely of independent directors, with one member who is a subject matter expert in technology and cybersecurity.

companyName: COPART INC

ticker: CPRT


text: BancShares has implemented a threat awareness program that includes cross-organizational information sharing capabilities for threat intelligence and membership and engagement with intelligence communities, including but not limited to, the Financial Services Information Sharing and Analysis Center, the Financial Services Sector Coordinating Council, the Federal Bureau of Investigation, and the U.S. Department of Homeland Security. BancShares also utilizes external experts and third-party assessors to maximize its risk intelligence coverage and to enhance risk detection and remediation. BancShares engages internal auditors, external assessors, and consultants to benchmark, scale, manage, and identify cybersecurity threats. Consultants also assess BancShares' cybersecurity systems and complete vulnerability testing.

companyName: FIRST CITIZENS BANCSHARES INC /DE/

ticker: FCNCA


text: Notwithstanding our cybersecurity risk management and governance, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While our business strategy, results of operations, and financial condition have not been materially affected by risks from cybersecurity threats, including as a result of previously identified cybersecurity incidents, we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information regarding the cybersecurity risks we face, see Item 1A, Risk Factors, elsewhere in this Annual Report, under the caption "Data security incidents, including cybersecurity attacks, or other significant disruptions of our information technology systems could harm our reputation, cause us to modify our business practices, and otherwise adversely affect our business and subject us to liability."

companyName: ROKU, INC

ticker: ROKU


text: Risks from Cybersecurity Threats Based upon the information that we have as of the end of the year covered by this report, we do not believe that any risks from any cybersecurity threat or from any previous cybersecurity incident have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, the risks from cybersecurity threats and incidents continue to increase, and the preventative actions we have taken and continue to take to reduce the risk of cybersecurity threats and incidents may not successfully protect against all such threats and incidents, and, as a result, there can be no assurance that we or the third parties we interact with will not experience a cybersecurity event in the future that will materially affect us. For more information on risks to us from cybersecurity threats see Item 1A, "Risk Factors," under the heading "Our operations are subject to cyber-attacks and other information technology disruptions that could have a material adverse effect on our business, results of operations and financial condition."

companyName: Integer Holdings Corp

ticker: ITGR


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For more information, please refer to Item 1A: Risk Factors for further insights into cyber attack-related risks. considers cybersecurity risks as part of its risk oversight function of cybersecurity and other information technology risks.

companyName: AgEagle Aerial Systems Inc.

ticker: UAVS


text: Cybersecurity is an important part of our risk management program and an area of increasing focus for our Board of Directors and management. We use a risk-based approach to identify, assess, protect, detect, respond to and recover from cybersecurity threats. While management is responsible for the day to day risk management, the Board of Directors, is responsible for the Company's overall risk oversight function, including cybersecurity risks. The Nominating & Governance Committee ("NGC") supports the Board of Directors by overseeing cybersecurity risks, policies and objectives. The Audit Committee supports the Board of Directors in overseeing the framework for risk assessments and enterprise risk management ("ERM") process. The Company's cybersecurity policies, standards and processes are designed and implemented in light of the requirements of the National Institute of Standards and Technology ("NIST") frameworks for cybersecurity and privacy.

companyName: PERRIGO Co plc

ticker: PRGO


text: As part of the Company's data protection and privacy program, it maintains a cyber risk management program that seeks to address key risk management concepts, including mission and vision, escalation path for risk mitigation, risk assessments, and risk treatment. The Company does so by conducting a variety of planning and preparedness activities, including employing monitoring tools to identify suspicious or anomalous activity, vulnerabilities, or signs of compromise across its networks, systems, and data. The Company utilizes data from attack surface management tools to produce a prioritized set of vulnerabilities for remediation. A key area for the program is employee cybersecurity education. The Company's employees play a key role in cybersecurity and participate in mandatory cybersecurity training, phishing attack simulations, educational events, and receive news bulletins. The Company's data protection and privacy program is designed to adhere to and adapt to global privacy and data protection laws.

companyName: FRANKLIN ELECTRIC CO INC

ticker: FELE


text: The Bank's Security Governance Committee is led by the chief information security officer and has a cross-functional membership comprised of representatives from the Bank's operational risk, information security, information technology, legal, operations, and other departments that provide both operational, specialized, technical and multidisciplinary expertise to the committee. The committee has integrated oversight of the information security program, the physical security program, and is responsible for reviewing security policies and procedures, security exceptions and violations, the processes and standards to implement the policies and procedures defined in the cybersecurity risk management program, the Bank's cyber incident response plan, the security awareness program and implementation reports, and for providing guidance and monitor progress on major information security projects, and regulatory changes and requirements.

companyName: Federal Home Loan Bank of Atlanta


text: Our VP IT, who reports to the Chief Financial Officer, is primarily responsible for assessing and managing our material risks from cybersecurity, as well as our overall cybersecurity risk management program, including supervision of our retained external cybersecurity consultants. Our management team has experience with implementing IT organizational policies and procedures, working in multiple platform environments, and overseeing corporate networking and hardware framework.

companyName: InvenTrust Properties Corp.

ticker: IVT


text: For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, please refer to Item 1A, "Risk Factors," in this annual report on Form 10-K, including the risk factor entitled, "Our actual or perceived failure to protect consumer information or other personal information or confidential information could result in harm to our business."

companyName: HAWAIIAN HOLDINGS INC


text: We comply with various laws, regulations, standards, and guidance related to cybersecurity, such as the Sarbanes-Oxley Act of 2002, the Payment Card Industry Data Security Standard, the National Institute of Standards and Technology ("NIST") Cybersecurity Framework and the SEC's guidance on cybersecurity disclosures.

companyName: WEYCO GROUP INC

ticker: WEYS


text: As part of our Partner Security Risk Management program, we perform initial risk assessments prior to engaging third-party service providers and ongoing risk assessments annually thereafter, which follow an established process designed to identify, assess, and periodically review our exposure to risk through our partners.

companyName: HEALTHEQUITY, INC.

ticker: HQY


text: Apollo's cybersecurity incident response plan provides for proper escalation of identified cybersecurity threats and incidents, including, as appropriate, to the Company's management. These discussions provide a mechanism for the identification of cybersecurity threats and incidents, assessment of cybersecurity risk profile or certain newly identified risks relevant to the Company, the Operating Manager, and evaluation of the adequacy of the Company's cybersecurity program (as coordinated through the Operating Manager and Apollo), including risk mitigation, compliance and controls.

companyName: Apollo Asset Backed Credit Co LLC


text: Incident Response Plan. To ensure that information security incidents can be recovered from quickly and with the least impact to the Company and its customers, the Company maintains a structured and systematic incident response plan (the "IRP") for all information security incidents that affect any of the IT systems, network, or data of the Company, including the Company's data held, or IT services provided by third-party vendors or other service providers. The CIO is responsible for implementing and maintaining the IRP, which includes:

companyName: Generations Bancorp NY, Inc.

ticker: GBNY


text: The Board of Directors oversees risks stemming from cybersecurity threats. Their strategic guidance and informed decisions serve as the cornerstone of our cybersecurity framework. Complementing this oversight, our third-party IT vendor plays a pivotal role in the implementation of comprehensive company-wide cybersecurity policies. Beyond this, they are entrusted with the deployment and management of critical protective software, serving as our frontline defenders against evolving cyber threats. To ensure seamless communication and swift action, they maintain a direct reporting line to the company's IT administrator. This structured reporting mechanism enables prompt notification and collaborative response to any detections or anomalies, fostering a proactive and vigilant stance towards safeguarding our digital assets and operations.

companyName: BeyondSpring Inc.

ticker: BYSI


text: We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, we and our third-party vendors experienced threats and security incidents that could affect our information or systems. For more information, please see Section 1A. Risk Factors.

companyName: Century Therapeutics, Inc.

ticker: IPSC


text: Managing Material Risks and Integrated Overall Risk Management The Company maintains documented processes, procedures, and controls for assessing, identifying, and managing material risks from cybersecurity threats. Cybersecurity threats are identified utilizing risk assessments, detection tools, information gathering and performing internal, external, and third-party contracted security assessments.

companyName: FLUSHING FINANCIAL CORP

ticker: FFIC


text: Although none of the members of the Audit Committee has any work experience, degree, or certifications related to information security or cybersecurity, the Audit Committee works closely with members of our employee team with relevant expertise, and we have engaged third-party service providers to further enhance our cybersecurity efforts.

companyName: Xtant Medical Holdings, Inc.

ticker: XTNT


text: The Board of Directors oversees cybersecurity as part of its enterprise risk management responsibilities. The Audit Committee reviews cybersecurity risks, including IT internal controls, the use of artificial intelligence, business continuity plans, disaster recovery programs, and data protection initiatives. The Audit Committee also receives regular reports from management, including the CISO (as defined below), on key cybersecurity metrics, threat landscapes, risk mitigation strategies, and significant cybersecurity or data privacy incidents (if any).

companyName: Astrana Health, Inc.

ticker: ASTH


text: As a leader in business process solutions, we leverage cloud computing, artificial intelligence, machine learning, automation and advanced analytics, our systems and information technology, and that of our third-party providers, and our interfaces with our customers are critical to our business, operating results, growth, prospects and reputation.

companyName: CONDUENT Inc

ticker: CNDT


text: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including "Service disruptions or failures, security incidents impacting Lionsgate or its third-party service providers' information systems, data and networks may disrupt its businesses, damage its reputation, expose it to regulatory investigations, actions, litigation, fines and penalties or have a negative impact on its results of operations including but not limited to loss of revenue or profit, loss of customers or sales and other adverse consequences."

companyName: Lionsgate Studios Corp.

ticker: LION


text: Assessment, Identification and Risk Management of Cybersecurity Threats We employ a range of tools and services, including regular network and endpoint monitoring, managed detection and response, system patching, managed security services, server and endpoint scheduled backups, awareness training and testing, periodic vulnerability assessment and penetration testing, to update our ongoing risk management and strategy. Furthermore, we have a cybersecurity assessment process that is conducted regularly with our current information technology (IT) services provider. -We proactively engage with our IT services provider as part of our continuing efforts to evaluate and enhance the effectiveness of our information security policies and procedures. We also have used an additional third-party services provider to perform internal and external penetration testing and social engineering employee challenge testing.

companyName: AGILE THERAPEUTICS INC


text: Cybersecurity risk management is an important part of the Company's overall risk management efforts. We maintain a comprehensive enterprise-wide information security program that comprises policies and controls designed to identify, safeguard against, detect, respond to, mitigate and manage reasonably foreseeable cybersecurity risks and threats. Our approach utilizes diverse security tools to prevent, identify, investigate, resolve and recover from vulnerabilities and security incidents. These include, but are not limited to, internal reporting, monitoring and detection tools. We use a collaborative, enterprise-wide strategy to address cybersecurity risks and allocate significant resources to our cybersecurity and risk management processes, which efforts are intended to adapt to the evolving cybersecurity landscape and promptly address emerging threats. Our cybersecurity risk management program aligns with the National Institute of Standards and Technology (NIST) framework and is organized into five key functions: identification, protection, detection, response and recovery. We regularly assess the threat landscape and employ a layered cybersecurity strategy to prevent, detect and mitigate threats.

companyName: SRx Health Solutions, Inc.

ticker: SRXH


text: We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition; however, like other companies in our industry, we and our third-party vendors may, from time to time, experience threats and security incidents relating to our and our third-party vendors' information systems. See Item 1A "Risk Factors" in this Annual Report on Form 10-K for more information.

companyName: Tectonic Therapeutic, Inc.

ticker: TECX


text: Management's Role in Cybersecurity Risk Management The Advisor's management team, including its CTO, collaborates to execute and oversee the Company's cybersecurity program. Responsibilities include: • Incident Management: Addressing and remediating cybersecurity incidents that may impact the Company. • Compliance Oversight: Ensuring adherence to regulatory standards and best practices for cybersecurity. • Risk Evaluation: Ongoing assessment of risks posed by third-party service providers and internal operations. • Enhancements to the Program: Ongoing improvements necessitated by the changing environment.

companyName: 5C Lending Partners Corp.


text: To date, we have not experienced any material cybersecurity incidents and the expenses we have incurred from cybersecurity incidents were immaterial. For a description of the risks from cybersecurity threats that may materially affect NetScout and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K.

companyName: NETSCOUT SYSTEMS INC

ticker: NTCT


text: Our CISO has implemented a management-level governance structure and process to assess, identify, manage and report cybersecurity risks, and manage our overall information security program. The Information Security Board, led by our CISO and comprised of leaders from all of our lines of business and key functional areas such as Global Risk Management, Privacy and Compliance, as well as members of our information security team, meets quarterly, and is responsible for overseeing our information security program, including our information security strategy and related policies and standards. The information security team manages cybersecurity risks and controls, and continually enhances a global security control framework with the ultimate goal of preventing cybersecurity incidents to the extent feasible, while simultaneously minimizing the business impact should an incident occur.

companyName: ASSURANT, INC.

ticker: AIZ


text: In 2022, Clarium Managed Services, LLC ("Clarium") conducted a Cybersecurity Assessment for the Bank. The assessment gauged the overall Cybersecurity Risk Posture of the Bank and resulted in a score of 4.8 on a scale of 0 to 5. In the last three fiscal years, the Company has not experienced any material cybersecurity incidents. No specific cybersecurity threats or incidents, including those resulting from any previous cybersecurity incidents, have materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, results of operations or financial condition. See Item 1A "Risk Factors" for a discussion of our cybersecurity risks.

companyName: BankUnited, Inc.

ticker: BKU


text: Our management team, including our CISO, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our CISO has over 20 years of experience in the technology sector, including 18 years dedicated to information security. He has held multiple executive security roles in a large Fortune 500 company, overseeing product security, mergers and acquisitions security, marketplace security, and enterprise security. He holds a Bachelor of Science in Information Systems Management and a Masters of Business Administration.

companyName: Guidewire Software, Inc.

ticker: GWRE


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face material cybersecurity threats. However, we do depend on the digital technologies of third parties, including information systems, infrastructure and cloud applications and services, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. We have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. In the event of a cybersecurity incident impacting us, the management team will report to the board of directors and provide updates on the management team's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss.

companyName: ASPAC II Acquisition Corp.

ticker: ASCBF


text: Our business strategy, results of operations, and financial condition have not been materially affected by risks from cybersecurity threats, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information on our cybersecurity related risks, see Risk Factors under Part I, Item 1A of this Form 10-K.

companyName: Western Midstream Operating, LP


text: Our Chief Technology Officer and members of the Engineering Security team typically meet bi-annually with the Audit Committee to review the Company's significant cybersecurity threats and risks, as well as the processes the Company has implemented to address them. The Chair of the Audit Committee, in turn, reports to the full Board.

companyName: YELP INC

ticker: YELP


text: Our Chief Technology and Product Officer, in coordination with our internal security staff, is responsible for assessing and managing our material risks from cybersecurity threats, and has primary responsibility for our overall cybersecurity risk management program and supervising both our internal cybersecurity personnel and our retained external cybersecurity consultants.

companyName: Opendoor Technologies Inc.

ticker: OPEN


text: Board oversight of cybersecurity risk management is supported by the Audit Committee, which regularly reviews internal reports from management with respect to information technology and cybersecurity issues, and interacts with our enterprise risk management function and our Chief Information Officer ("CIO") regarding major cybersecurity risk areas and recommended actions to address such risks.

companyName: VAIL RESORTS INC

ticker: MTN


text: We protect all the assets of our clients and safeguard the proprietary and confidential information of Westwood and its employees, which is a fundamental responsibility of every Westwood employee. Westwood is responsible for distributing our policies and procedures to employees and conducting appropriate employee training to ensure employees' adherence to our policies and procedures. Repeated or serious violations of our policies by employees or independent contractors may result in disciplinary action against such persons, which may include restricted permissions or prohibitions and/or termination.

companyName: WESTWOOD HOLDINGS GROUP INC

ticker: WHG


text: The Company has not experienced any material operational or financial impact as the result of a cybersecurity risk or incident and, at this time, the risks from cybersecurity threats are not reasonably likely to materially affect the Company's business strategy, results of operations or financial condition. However, it is prepared to mitigate and respond to such an event should it occur. The Company has prepared a comprehensive Cybersecurity Incident Response Plan, as well as an Information Technology Disaster Recovery Plan. These plans are reviewed, updated and tested on a regular basis. Specifically, the Company conducts cybersecurity tabletop exercises that include participation by Audit Committee members, senior management and third-party cybersecurity consultants.

companyName: Core Natural Resources, Inc.

ticker: CNR


text: annual security awareness trainings are required to be completed by employees, and monthly phishing campaigns and additional function-specific cybersecurity trainings are also conducted; security and risk metrics are reviewed monthly and reported to leadership quarterly; external penetration tests are conducted annually by independent third parties and appropriate actions are taken to strengthen controls;

companyName: TE Connectivity plc

ticker: TEL


text: On February 7, 2024, the Board established the Cybersecurity Subcommittee of the Audit Committee (the "Cybersecurity Committee") to assist the Board in fulfilling its oversight responsibilities with respect to assessing and mitigating the Company's cybersecurity risks. The Company's management, under the guidance of the IT Security Team, is responsible for the preparation, presentation, and self-assessment of the Company's cybersecurity policies and practices. The Cybersecurity Subcommittee shall be comprised of at least one independent director, and is tasked with reviewing and providing high level guidance on cybersecurity-related issues of importance to the Company.

companyName: MSP Recovery, Inc.

ticker: MSPR


text: The IT and Security teams monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through various processes. These processes include risk assessments, vulnerability assessments, penetration testing, program exercises, security incident and event management, continuous monitoring, and threat intelligence gathering.

companyName: MidWestOne Financial Group, Inc.

ticker: MOFG


text: We regularly assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities. We use widely adopted risk quantification models including those described in National Institute of Standards and Technology (NIST) special publications as well as the FAIR Institute's Factor Analysis of Information Risk (FAIR) methodology for Quantifying and Managing Risk to identify, measure and prioritize cybersecurity and technology risks and develop related security controls and safeguards. We conduct regular reviews and tests of our information security program and also leverage audits by our internal audit team, tabletop exercises, penetration and vulnerability testing, red team exercises, simulations, and other exercises to evaluate the effectiveness of our information security program and improve our security measures and planning. We also engage an external firm to assist in our annual Payment Card Industry Data Security Standard (PCI DSS) self-attestation of compliance, as well as third-party penetration testing of our cardholder environment and related systems. We continuously enhance our cybersecurity measures by providing ongoing training for our employees, including simulated phishing exercises, to ensure they are fully prepared to address potential threats. The results of these assessments are reported to the Audit Committee as discussed below under "--Cybersecurity Governance."

companyName: Emerald Holding, Inc.

ticker: EEX


text: Due to our reliance on digital technology and electronic communications to run our business, cybersecurity threats and incidents pose an ongoing and escalating risk to our internal and third-party provided information systems and data, reputation and shareholder value, results of operations and financial condition. Our Chief Technology Officer, who reports directly to our Chief Executive Officer, holds over 25 years of experience in information technology, specifically infrastructure, information security and fraud, and identity solutions at large global companies, and our Vice President of Information Technology ("IT") Governance, who reports to our Chief Technology Officer, holds over 20 years of experience in various information security roles. Together, our Chief Technology Officer and Vice President of IT Governance ("IT leadership") oversee and lead our information security program and our business strategy, financial planning and capital allocation around our cybersecurity risk management and governance practices. We also have an established Incident Response Team ("IRT") to respond to and manage cybersecurity events. This team includes our IT leadership as well as senior leadership from our accounting, legal, corporate communications and risk management departments with subject-matter expertise and established tenure at Prologis in their respective areas. The IRT is tasked with taking appropriate action to safeguard the integrity of our information systems, data and network resources, investigate whether a breach occurred, define disclosures, communicate effectively with key audiences, including the Board as necessary, mitigate cybersecurity incident risks and provide a resolution through our cybersecurity incident communication protocols. Additionally, on an annual basis the IRT is involved and engaged in security initiatives, including tabletop exercises facilitated both internally and externally, to stay relevant on current practices in the areas of cybersecurity.

companyName: Prologis, Inc.

ticker: PLD


text: We rely on a multidisciplinary team, including our information security function, legal department, management, and third-party service providers, as described further below, to identify, assess, and manage cybersecurity threats and risks. We identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment and our risk profile using various methods including, for example, using manual and automated tools, subscribing to reports and services that identify cybersecurity threats, analyzing reports of threats and threat actors, conducting scans of the threat environment, evaluating our industry's risk profile, utilizing internal and external audits, and conducting threat and vulnerability assessments.

companyName: ALEXANDRIA REAL ESTATE EQUITIES, INC.

ticker: ARE


text: Lord Abbett's cybersecurity risk management processes are integrated into its overall enterprise risk management processes. Lord Abbett has established an Enterprise Risk Management Function, overseen by its Chief Legal Officer. The Chief Legal Officer relies on Lord Abbett's Chief Information Security Officer (" CISO "), who is responsible for implementing the Information/Cybersecurity Program. The CISO is assisted by a team of Information Security professionals, the Information Technology department, and digital leads with the support of Lord Abbett's Information Security Council and its Standards and Practices Committee.

companyName: Lord Abbett Private Credit Fund


text: Industry and Economic Risks • our dependence on the U.S. government for a substantial portion of our business • significant delays or reductions in appropriations and/or for our programs, and U.S. government funding and program support more broadly, including as a result of a prolonged continuing resolution and/or government shutdown, and/or related to the global security environment or other global events • significant delays or reductions in payments as a result of or related to a breach of the debt ceiling • the use of estimates when accounting for our contracts and the effect of contract cost growth and our efforts to recover or offset such costs and/or changes in estimated contract costs and revenues, including as a result of inflationary pressures, labor shortages, supply chain challenges and/or other macroeconomic factors, and risks related to management's judgments and assumptions in estimating and/or projecting contract revenue and performance which may be inaccurate • increased competition within our markets and bid protests • continued pressures from macroeconomic trends, including on costs, schedules, performance and ability to meet expectations

companyName: NORTHROP GRUMMAN CORP /DE/

ticker: NOC


text: Impact of Cybersecurity Risks In 2023, we did not experience a material cybersecurity incident. While we do not believe that our business strategy, results of operations or financial condition have been materially adversely affected by any cybersecurity incidents, we describe whether and how future incidents could have a material impact on our business strategy, results of operations or financial condition in "Risks Related to Our Business and Structure— We may face a breach of our cyber security, which could result in adverse consequences to our operations and exposure of confidential information."

companyName: Onex Direct Lending BDC Fund


text: The Company's Board of Directors (the "Board") recognizes the critical importance of maintaining the trust and confidence of our customers, clients, business partners, and employees. Together with Executive management, the Board is actively involved in oversight of the Company's risk management program, and cybersecurity represents an important component of the Company's overall approach. The Company seeks to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, integrity, and availability of the information that the Company collects and stores by identifying, preventing, and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: BRC Inc.

ticker: BRCC


text: Technology operations, including change management, incident management, capacity and resilience; and Third-party risk management, including vendor management and governance, and cybersecurity and business resiliency on vendor assessments.

companyName: Goldman Sachs Physical Gold ETF

ticker: AAAU


text: The Company's cybersecurity risk management processes are integrated into our overall risk management system. The Company has a formalized enterprise risk management program overseen by the Board of Directors and committees of the Board of Directors that addresses strategic, operational, financial, compliance, legal and information technologies and cybersecurity risks. In addition, the Enterprise Risk Management Council ("ERM Council") is a management-level team comprised of senior vice presidents and other business leaders responsible for managing enterprise risks and planning and organizing the activities of our organization to minimize the effects of risk on the Company's business and financial results. The ERM Council regularly reports to the Board of Directors on areas of risk and risk management. The Chief Financial Officer serves as the ERM Council Lead. The Chief Audit Executive serves as the ERM Council Process Owner.

companyName: INTERNATIONAL PAPER CO /NEW/

ticker: IP


text: The Company's operating entities in Botswana are governed in accordance with applicable local laws and entity-wide governance principles. The directors and management of the Company's operating entities in Botswana are generally comprised of a majority of senior management employees and where required by local laws, local residents, who are generally longstanding local management level employees, or local corporate counsel. In addition, certain members of the Company's management have experience conducting business in Botswana, as detailed below, where the Company has maintained operations since 2021. Operating in Botswana requires greater internal controls and adherence to a regulatory framework which creates challenges in relation to decision-making, communication, and compliance. The Company has experienced management and has retained legal advisors and consultants to help facilitate adherence to regulatory requirements in order to meet this challenge.

companyName: NexMetals Mining Corp.

ticker: NEXM


text: Our program's overall maturity and operational readiness are regularly evaluated internally by RadNet IT Governance and Compliance teams and by independent expert auditors using the NIST's Cybersecurity Framework. Our program, and the results of the evaluation and testing efforts, are regularly reviewed by our senior management and members of our Board of Directors.

companyName: RadNet, Inc.

ticker: RDNT


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, as noted in Item 1A. Risk Factors of this Annual Report. Any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in Item 1A. Risk Factors of this Annual Report.

companyName: USA Rare Earth, Inc.

ticker: USAR


text: During the year ended December 31, 2023, the Company experienced a cybersecurity incident that resulted in a $0.7 million term loan payment being initiated in error to an account provided in a fraudulent email the Company received. As a result of this incident, with the assistance of an outside independent consultant, the Company reviewed and strengthened its procedures in and around the approval of wire transfers of funds, and believe that these enhanced procedures will protect the Company against the reoccurrence of such incidences in future periods.

companyName: MARIMED INC.

ticker: MRMD


text: Security and data privacy awareness and training is provided to new employees and annually for current Aptar employees, is designed to educate employees on recognizing information security and cybersecurity concerns, how they can help protect the organization and how to inform the cybersecurity team of potential incidents. In addition, Aptar implements stringent processes to oversee and manage risks associated with our third-party providers. As set forth in our Sustainable Purchasing Charter, third-party providers are expected to, among other things, protect personal data and implement security and protection measures in relation thereto. We conduct security assessments of third-party providers before engagement and monitor their compliance with our cybersecurity standards on an ongoing basis. The monitoring includes periodic and ongoing assessments by our Information Security Department. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties. In addition, we maintain cybersecurity insurance as part of our overall insurance portfolio.

companyName: APTARGROUP, INC.

ticker: ATR


text: However, as with all companies, we remain exposed to the risk of cybersecurity threats. The controls currently in place provide a meaningful level of protection, and the Company is committed to continuing to strengthen its cybersecurity posture as resources allow.

companyName: Genvor Inc

ticker: GNVR


text: Longbridge's cybersecurity program is focused on the following key areas: • Governance: As discussed in more detail below under "Governance," our Board of Directors' oversight of cybersecurity risk management is completed through the Audit Committee, which regularly interacts with both our and Longbridge's management teams who are responsible for assessing and managing material risks from cybersecurity threats at Longbridge. • Collaborative Approach: Longbridge has implemented a cross-functional approach to identifying and evaluating, preventing, mitigating and remediating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents. Such escalation allows us to make decisions regarding its response to such incidents and whether disclosure to senior management, our Audit Committee and/or the public is appropriate. • Technical Safeguards: Longbridge deploys technical safeguards that are designed to protect information systems from cybersecurity threats. These systems cover many facets of cyber security such as anti-virus and anti-malware defense, data loss prevention, endpoint protection (including managed detection and response services), patch and vulnerability management and others. Longbridge continuously evaluates new technologies as the cyber security landscape evolves. • Incident Response and Recovery Planning: Longbridge has established and maintains incident response and recovery plans that we believe properly address the response to a cybersecurity incident or other business disruption. To the extent feasible such business disruption plans are tested and evaluated on a regular basis. • Third-Party Risk Management: Longbridge maintains a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of Longbridge's systems, as well as the systems of third-parties that could adversely impact Longbridge's business in the event of a cybersecurity incident affecting their systems. Third-party service providers are regularly evaluated by Longbridge to assess their cyber security posture and general information technology practices to determine if they are suitable partners; where applicable, relevant certifications are obtained such as SOC 2 or ISO 27001. • Education and Awareness: Longbridge: (i) provides regular, mandatory cyber security training to all personnel to equip them with tools to identify and address cybersecurity threats; (ii) communicates evolving information security policies, standards, processes and practices to employees via a variety of communication methods; and (iii) conducts phishing tests to assess user alertness, and retains an external cybersecurity vendor to conduct similar tests on an annual basis.

companyName: Ellington Financial Inc.

ticker: EFC


text: Like every major financial services institution, Wintrust faces significant and persistent cybersecurity risks. Whether in the form of data theft, ransomware, phishing, denial of service, or third-party vendor incidents, threat actors continue to become more sophisticated and escalate their efforts against financial institutions. At Wintrust, the Board of Directors and executive management are committed to devoting the necessary resources into monitoring, detecting, preventing and mitigating cyber risk. As a regulated financial institution, we are required to comply with various regulations applicable to cybersecurity, as well as guidance issued by our regulators, and our cybersecurity program closely tracks to those requirements. Additionally, Wintrust leverages global cybersecurity standards as general guides, including the National Institute of Standards and Technology Cybersecurity Framework and the International Organization Standardization 27001 Information Security Management System Requirements.

companyName: WINTRUST FINANCIAL CORP

ticker: WTFC


text: We also have a team of employees, including at the senior management level, who are dedicated to assisting the Board in fulfilling its oversight responsibility for cyber and information security. Valley's Chief Information Security Officer (CISO), who is responsible for developing and implementing our cyber and information security program, has over 23 years of experience leading cyber security oversight and holds a Certified in Risk and Information Systems Controls certification, and others on our information security team have cybersecurity experience or certifications. The CISO and Director of Cyber Risk Management, both of whom participate in all meetings of the Cyber Subcommittee, contribute over 60 years collectively of expertise in cyber and information security across industries and at some of the world's largest banks and at various technology firms.

companyName: VALLEY NATIONAL BANCORP

ticker: VLY


text: As one of the largest global pharmaceutical sourcing and distribution services companies engaged in helping both healthcare providers and pharmaceutical and biotechnology manufacturers, we are exposed to various cybersecurity threats. These threats include both those typical of companies operating in many industries, like ransomware and denial-of-service attacks, as well as more sophisticated and persistent threats from highly organized adversaries that specifically target the healthcare sector and other critical infrastructure. The emergence of artificial intelligence has provided additional tools for those who perpetrate these attacks, including through social engineering, the development of customized malware, and an enhanced ability to evade detection. Our suppliers, third-party vendors, service providers, customers, contractors, those who work for our contractors, and other business partners (collectively, our "third-party business partners") are also vulnerable to similar cybersecurity risks, and any cyber incident affecting us and/or our third-party business partners could significantly disrupt our operations. In light of these risks, cybersecurity is a priority for the Company, management, and our Board of Directors (the "Board"), and we believe that it is essential for us to invest substantial resources in our cybersecurity efforts.

companyName: Cencora, Inc.

ticker: COR


text: The CIO continually assesses industry best practices, frameworks, and standards, and leverages them to advance our cybersecurity program. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. Our cybersecurity risk management program includes the deployment of tools and activities designed to prevent, detect, and analyze current and emerging cybersecurity threats, and plans and strategies to address threats and incidents. Program highlights include: a. Employing a multi-layer strategy of defense designed to ensure the safety, security, and responsible use of information and data.

companyName: CURTISS WRIGHT CORP

ticker: CW


text: Our Board considers cybersecurity risk as part of its overall risk oversight function and has delegated to the Nominating and Corporate Governance Committee oversight of cybersecurity matters and other policies and internal controls regarding information security risks. The Nominating and Corporate Governance Committee oversees management's implementation of our cybersecurity risk management program.

companyName: AMBARELLA INC

ticker: AMBA


text: Although as a blank check company, we do not have any operations, we are nonetheless subject to the risk of cybersecurity incidents. Among other things, the investments in our Trust Account and bank deposits may be vulnerable to such incidents, and we may depend on the digital technologies of third parties. We and third parties may be subject to cybersecurity attacks or security breaches. To the extent that we rely on the technologies of third parties, we depend upon the personnel and the processes of such third parties to protect against cybersecurity incidents, and we have no personnel or processes of our own for this purpose. In the event of a cybersecurity incident impacting us, our Management Team will report to the Board of Directors and provide updates on the Management Team 's incident response plan for addressing and mitigating any risks associated with such an incident. As an early-stage company without significant investments in data security protection, we may not be sufficiently protected against such occurrences. We also lack sufficient resources to adequately protect against, or to investigate and remediate any vulnerability to, cyber incidents. It is possible that any of these occurrences, or a combination of them, could have material adverse consequences on our business and lead to financial loss. We have not encountered any cybersecurity incidents since our Initial Public Offering. In addition to our own cybersecurity risks, any proposed Business Combination target may have been subject to, or may in the future be subject to, cybersecurity incidents.

companyName: Andretti Acquisition Corp. II

ticker: POLE


text: As of the date hereof, the Company is not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to have been identified or are anticipated to have a material adverse effect on the Company's business strategy, results of operations, and financial condition. Despite its efforts to maintain processes which mitigate cybersecurity risks, there is no guarantee that such risks may not have a material effect on the Company's business strategy, results of operations, and financial condition in the future. For additional information on cybersecurity risks the Company may face, see Part I, Item 1A. Risk Factors – "Information technology system failures, network disruptions or cybersecurity breaches could adversely affect our business."

companyName: Limbach Holdings, Inc.

ticker: LMB


text: Blackstone has a process designed to assess the cybersecurity risks associated with the engagement of third-party vendors, including those of companies sponsored by Blackstone such as BXINFRA. This assessment is conducted on the basis of, among other factors, the types of services provided and the extent and type of Blackstone data accessed or processed by a third-party vendor. On the basis of its preliminary risk assessment of a third-party vendor, Blackstone may conduct further cybersecurity reviews or request remediation of, or contractual protections related to, any actual or potential identified cybersecurity risks. In addition, where appropriate, Blackstone seeks to include in its contractual arrangements with certain of its third-party vendors provisions addressing its requirements and industry best practices with respect to data and cybersecurity, as well as the right to assess, monitor, audit and test such vendors' cybersecurity programs and practices. Blackstone also utilizes a number of digital controls, which are reviewed at least annually, to monitor and manage third-party access to its internal systems and data.

companyName: Blackstone Infrastructure Strategies L.P.


text: We evaluate the risks associated with technology and cybersecurity threats and monitor our information systems for potential weaknesses. We review and test our information technology system on an as-needed basis and also utilize internal team personnel to evaluate and assess the efficacy of our information technology system and enhance our controls and procedures. The results of these assessments are reported to our [Audit Committee] and, from time to time, our Board of Directors.

companyName: Thunder Power Holdings, Inc.

ticker: AIEV


text: We rely on a multidisciplinary team, including our information security function, legal department, management, and third-party service providers, as described further below, to identify, assess, and manage cybersecurity threats and risks. These processes include, among other things, annual security awareness training for employees, programs to increase awareness of phishing attempts, tools to detect and monitor unusual network activity, and processes to contain, escalate and respond to incidents. In addition, we have an enterprise Information Security Policy describing our cybersecurity program and governance structure and the processes and procedures in place to identify, mitigate and remediate cybersecurity threats and risks.

companyName: Vita Coco Company, Inc.

ticker: COCO


text: Internal and external networks, including the networks on which the Company relies, are assessed for vulnerabilities. Bain Capital also engages with independent third parties to conduct relevant technical assessments.

companyName: Bain Capital Specialty Finance, Inc.

ticker: BCSF