text: Given the evolving nature of cybersecurity threats, the Company monitors its systems for potential vulnerabilities and relies on third-party security updates and patches to mitigate risks. While we believe our current measures are appropriate for our operations, we acknowledge that no security system is entirely immune from potential threats, including phishing attacks, malware, ransomware, and unauthorized access.

companyName: Coeptis Therapeutics Holdings, Inc.

ticker: COEP


text: The Board's oversight of cybersecurity risk management is supported by the Audit Committee of the Board, which regularly interacts with the Company's General Counsel, ERM committee, the Sr. Director, IT and executive leadership. The ERM committee is a cross-functional team of high-level leaders that meet at least quarterly to anticipate, identify, prioritize and manage material risks to the Company's strategic objectives. It conducts an extensive bi-annual survey and interview process to identify the material risks and continues to monitor for any emerging material risks between surveys. The ERM committee reports on its findings and activities twice annually to the Audit Committee of the Board. The Company conducts a self-assessment on an annual basis to evaluate performance against the National Institute of Standards and Technology Cybersecurity Framework's categories and subcategories to help the Company adapt and improve its management of cybersecurity risks.

companyName: WABASH NATIONAL Corp

ticker: WNC

secItem: Item 1C


text: To provide for the availability of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against and respond to cybersecurity incidents, we undertake the following activities: monitor emerging data protection laws and implement changes to our processes that are designed to comply with such laws;

companyName: TMC the metals Co Inc.

ticker: TMC


text: Cybersecurity Risk Management and Strategy Charles River places high importance on identifying and eliminating potential cybersecurity threats to its employees, customers, IT infrastructure, proprietary technologies and confidential information.

companyName: CHARLES RIVER LABORATORIES INTERNATIONAL, INC.

ticker: CRL


text: In addition, our cybersecurity incident response processes are designed to escalate material cybersecurity incidents to members of management as part of the enterprise level Crisis Management Framework. The CISO, CIO, CRCO and senior operating unit leaders are part of the crisis management team in an effort to promote the prompt investigation of and response to cybersecurity incidents.

companyName: ONITY GROUP INC.

ticker: ONIT


text: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our intellectual property and data. We maintain policies and procedures designed to allow management to assess, identify, and manage material risks from cybersecurity threats. We integrate our cybersecurity policies and procedures into our overall enterprise risk management program, which is implemented by management and overseen by the Board of Directors through its Audit Committee.

companyName: COHU INC

ticker: COHU


text: As of the reporting date, no risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition. See also Item 1A "Risk Factors - Risks Relating to Our Business and Industry - We rely on the use of technology, and as a result, we are exposed to the risks of cybersecurity attacks and other systems disruptions."

companyName: American National Group Inc.

ticker: ANG-PD


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. See Risk Factors – "If we fail to comply with laws, regulations and market standards regarding the privacy, use, and security of customer information, or if we are the target of a successful cyberattack, we may be subject to legal and regulatory actions and our reputation would be harmed."

companyName: Walker & Dunlop, Inc.

ticker: WD


text: Cybersecurity Risk Assessment The CISO will be responsible for assessing and managing the Company's material risks from cybersecurity threats. The Company will conduct regular risk assessments to identify, evaluate, and prioritize material cybersecurity risks to the Company, including its health plans and state contracts, shared services and IT operations, or business strategy. We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.

companyName: Elite Health Systems Inc.

ticker: EHSI


text: The Company follows the U.S. National Institute of Standards and Technology ("NIST") Cyber Security Framework to structure protocols for identifying, assessing and managing cybersecurity risks. In accordance with NIST guidance, we maintain documented information security policies and standards to protect operations, assets, data and services and to defend against, respond to and recover from potential cyber attacks.

companyName: RICHARDSON ELECTRONICS, LTD.

ticker: RELL


text: Our Sponsor engages third-party consultants for assessing, identifying and managing material cybersecurity risks, including those associated with certain third-party providers. We and our Sponsor maintain a cyber incident response plan and regularly conduct simulations and tabletop exercises.

companyName: JLL Income Property Trust, Inc.


text: The Audit Committee, whose members include seasoned technologists and technology consultants, has been delegated responsibility for overseeing the Company's management of strategy with respect to data, privacy and cybersecurity risks.

companyName: Walgreens Boots Alliance, Inc.


text: Our management team, led by our Vice President and Chief Information Officer ("CIO"), has operational responsibility for our cybersecurity and information security framework and risk management. Our CIO has extensive cybersecurity knowledge and skills gained from various roles in information technology and security for over 31 years, including serving as the Chief Information Officer at two large public companies. Our CIO is supported by a team of enterprise information system and security risk professionals. The CIO receives regular updates on cybersecurity matters, results of mitigation efforts, and cybersecurity incident response and remediation. He, in turn, provides regular updates on these matters to our Chief Financial Officer and our Chief Transformation Officer and works closely with our Legal department to oversee compliance with legal, regulatory, and contractual security requirements. In addition, in conjunction with Internal Audit, our CIO supervises any retained external cybersecurity consultants.

companyName: Knowles Corp

ticker: KN


text: Our Cybersecurity Governance Our CIO and other senior leaders regularly review the results of the assessments, tabletop exercise, cybersecurity roadmap progress, and monthly operational metrics to stay informed about risks from cybersecurity threats and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents. They report this information to the Audit Committee and ERM Committee as appropriate, together with measures to be implemented to further strengthen our IT environment as the Company grows and evolves. We have a response plan governing our assessment, response and notifications internally and externally upon the occurrence of a cybersecurity incident that is led by our CIO, in coordination with other senior leaders. Depending on the nature and severity of an incident, our CIO and CEO may escalate notification of the incident to the Audit Committee and to the Board.

companyName: ChampionX Corp


text: Managing Material Risks & Integrated Overall Risk Management We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems. Our cybersecurity program is aligned with industry standards and includes technical, administrative, and physical controls, including encryption, firewalls, anti-virus systems, and well-documented processes and policies. We continue to promote a company-wide culture of cybersecurity risk management. Cybersecurity considerations are integrated in our decision-making processes. We have an experienced Information Technology ("IT") team led by our Vice President of Information Systems who reports directly to the Chief Executive Officer and works closely with our management team to evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. Our VP of Information Systems provides regular updates on cybersecurity to the Audit Committee of the Board of Directors.

companyName: Palladyne AI Corp.

ticker: PDYN


text: Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee of the Board (the "Audit Committee") oversight of cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program.

companyName: Peakstone Realty Trust

ticker: PKST


text: Use of Independent Experts The Company engages external resources in connection with our processes for assessing, identifying and managing material risks from cybersecurity threats. These resources include, but are not limited to, regular internal and external penetration tests and assessments of our cybersecurity program by third-party experts. We plan to continue to engage independent experts to periodically test our cybersecurity policies for their effectiveness.

companyName: Sotera Health Co

ticker: SHC


text: The CISO provides our AFC with periodic updates about our cybersecurity program and material risks. This includes updates on cybersecurity practices and projects designed to strengthen internal cybersecurity and data protection.

companyName: EXACT SCIENCES CORP

ticker: EXAS


text: BNY Mellon's CIO, CISO and interim Chief Technology Risk Officer each have extensive experience in assessing and managing risks from cybersecurity threats. BNY Mellon's CISO joined BNY Mellon in 2022 and previously served as head of information security at a Fortune 500 biopharmaceutical company and an information technology company, as well as the Global Chief Technology Officer at a large cybersecurity company. BNY Mellon's CIO joined BNY Mellon in September 2024 from a large multinational company, where she was responsible for overseeing information technology and cybersecurity operations. BNY Mellon's interim Chief Technology Risk Officer joined BNY Mellon in November 2024 and has previous experience as Global Head of Cyber, Technology and Information Security Risk Management at a global systemically important financial institution and over a decade of experience serving the U.S. intelligence community in a variety of cybersecurity-related positions.

companyName: ECA Marcellus Trust I

ticker: ECTM


text: We evaluate and manage risks relating to cybersecurity as part of our overall enterprise risk management program. We perform an annual assessment across the Company to identify and review potential risks. Risks are prioritized based on threat models to improve cybersecurity throughout the Company.

companyName: Envista Holdings Corp

ticker: NVST


text: Despite security measures, unforeseen exploits create an inherent risk of cyberattacks that could materially affect our operations without notice. An event involving the destruction, modification, accidental or unauthorized release, or theft of sensitive information from systems related to our business, or an attack that results in damage to or unavailability of our key technology systems or those of critical vendors (e.g., ransomware), could result in damage to our reputation, fines, regulatory sanctions or interventions, contractual or financial liabilities, additional compliance and remediation costs, loss of employees or customers, loss of payment card network privileges, operational disruptions and other forms of costs, losses or reimbursements, any of which could materially adversely affect our operations or financial condition. Our cyber security and business continuity plans, and those of our third parties with whom we do business, may not be effective in anticipating, preventing, or effectively responding to all potential cyber risk exposures. Our insurance coverage may not be sufficient to cover all such costs or consequences, and there can be no assurance that any insurance that we now maintain will remain available under acceptable terms.

companyName: KELLY SERVICES INC

ticker: KELYA


text: We have an employee education program that is designed to raise awareness of cybersecurity threats to reduce our vulnerability as well as to encourage consideration of cybersecurity risks across functions.

companyName: ORRSTOWN FINANCIAL SERVICES INC

ticker: ORRF


text: Our Board considers cybersecurity risk as part of its risk oversight function and oversees our cybersecurity and other information technology risks and management's implementation of our cybersecurity risk management program.

companyName: FENNEC PHARMACEUTICALS INC.

ticker: FENC


text: Cybersecurity Risk Management • Risk Assessment: We regularly conduct comprehensive cybersecurity risk assessments, identifying potential vulnerabilities and threats that could impact the confidentiality, integrity, and availability of our medical devices and associated data. • Policies and Procedures: InfuSystem has established and maintains cybersecurity policies and procedures that align with industry best practices and regulatory requirements. These policies address areas such as data protection, access control, incident response, and vulnerability management. • Training and Awareness: We provide ongoing cybersecurity training and awareness programs to our employees and contractors, emphasizing the importance of their role in safeguarding sensitive information and reporting security incidents. • Use of Third-Parties: InfuSystem works with a third-party Cybersecurity risk partner who's systems ingest information regarding the current state of the Company's information and technology environment and using specialized algorithms provide assessments of the company's Cybersecurity risk exposure as well as providing targeted advice to mitigate any risks identified. • Third-Party Risk Management: InfuSystem evaluates the cybersecurity practices of third-party vendors and suppliers, ensuring that they meet our cybersecurity standards and pose no undue risk to our medical devices and data. • Incident Response Plan: We maintain a robust incident response plan that outlines the steps to be taken in the event of a cybersecurity incident. This plan includes procedures for reporting incidents, containing threats, and notifying affected parties as required by law.

companyName: InfuSystem Holdings, Inc

ticker: INFU


text: We do not believe that risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect our overall business strategy, results of operations, or financial condition over the long term. See the discussion about the Starwood Data Security Incident under the "Litigation, Claims, and Government Investigations" caption in Note 7 of our financial statements, the discussion of the same in Part II, Item 7, "Management's Discussion and Analysis of Financial Condition and Results of Operations," and the discussion of cybersecurity risk in Part I, Item 1A, "Risk Factors."

companyName: MARRIOTT INTERNATIONAL INC /MD/

ticker: MAR


text: Sponsor, its parent Valkyrie Investments Inc., and their respective affiliates (collectively, "Valkyrie") have adopted an organizational wide cybersecurity program. The program is administered by the Chief Compliance Officer ("CCO") of Valkyrie Funds, LLC, an affiliate of the Sponsor and wholly-owned subsidiary of Valkyrie Investments Inc. Valkyrie's objective, in the development and implementation of this comprehensive cybersecurity program, is to create effective administrative, technical, and physical safeguards for the protection of personal information of the organization and its clients.

companyName: CoinShares Bitcoin ETF

ticker: BRRR


text: The cybersecurity ERM process is administered by InfoSec with input from each business segment and function. InfoSec continually monitors material cybersecurity risks facing Comtech, including cybersecurity threats and threats to our internal systems, our products, services and programs for customers, and our supply chain. Our cybersecurity risk management team has extensive experience leading information technology for global organizations across communications, aerospace and defense, and works directly with our CEO, Chief Financial Officer, Executive Vice President ("EVP") of Systems and IT Controls, and other members of senior management team to assess cybersecurity threats as part of our ERM process.

companyName: COMTECH TELECOMMUNICATIONS CORP /DE/

ticker: CMTL


text: Management's Role in Assessing and Managing Cybersecurity Threats — Our information technology team is responsible for assessing, identifying and managing cybersecurity risks. Top cybersecurity risks are also integrated into our overall ERM framework and overseen at the management level by the ERM Steering Committee. Our Director of Information Technology, who reports directly to the CFO and Executive Vice President ("EVP") and is a member of the ERM Steering Committee, is responsible for our efforts to comply with applicable cybersecurity standards, establish cybersecurity protocols and protect the integrity, confidentiality and availability of our information technology infrastructure. Technology and cybersecurity policy decisions are made by our Director of Information Technology in consultation with our CFO and EVP. In addition, our Director of Information Technology has a direct line of communication with the Office of the Interim Chief Executive Officer and General Counsel as needed. Our Director of Information Technology has over 20 years of experience in cybersecurity, holds a Master of Science in Cybersecurity from the University of Houston and is a Certified Information Systems Security Professional and a Boardroom Certified Qualified Technology Expert.

companyName: TALOS ENERGY INC.

ticker: TALO


text: maintain technologies designed to provide network and endpoint monitoring, regular vulnerability assessments, and annual penetration testing to improve our information systems, as such term is defined in Item 106(a) of Regulation S-K; carry information security risk insurance that provides protection against the potential losses arising from a cybersecurity incident;

companyName: PDF SOLUTIONS INC

ticker: PDFS


text: Team and Strategy—Our cybersecurity team, which includes both our employees and those of our managed services provider, is comprised of subgroups focused on distinct functional areas of responsibility. The team maintains a Security Operations Center, staffed 24 hours a day, that delivers day-to-day execution support for our cybersecurity risk management program.

companyName: TENET HEALTHCARE CORP

ticker: THC


text: Audit Committee member education is provided throughout the year through presentations and discussions led by members of management, third-party consultants, our independent registered public accounting firm and legal counsel, on topics including information security, among others. Members of our Audit Committee have expertise in the technology industry as well as corporate risk management strategies.

companyName: ZILLOW GROUP, INC.

ticker: ZG


text: Our Board of Directors ("Board") is responsible for the oversight of cybersecurity risk management. Annually, and on an as needed basis, the Chief Financial Officer ("CFO") provides updates to the Board on our cybersecurity risk management program, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards. The CFO also notifies the Board of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.

companyName: Inrad Optics, Inc.


text: We recognize the critical importance of maintaining the safety and security of our systems and data and take a holistic approach to overseeing and managing cybersecurity, which is supported by both management and our Board of Directors. The Company's Board, the Audit Committee of the Board and management devote significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats in a timely and effective manner. Our approach to cybersecurity risk management is multi-layered and includes governance and risk, monitoring and incidence response, data security, application security, endpoint security, network security and perimeter security.

companyName: First American Financial Corp

ticker: FAF


text: Incident Response and Reporting In the event of a cybersecurity incident, we follow an Incident Response Manual and process led by our CISO which governs our assessment, response, escalation and notifications process, both internally and externally. Depending on the nature and severity of an incident, this process includes review by an incident response team, made up of members of the Information Security Office, with escalating notifications up to our CIO, Legal Department, CFO, and CEO followed by our Audit Committee and the full Board.

companyName: BRIGHT HORIZONS FAMILY SOLUTIONS INC.

ticker: BFAM


text: Our CTO, with over 28 years of experience in IT and operational technology security, has the primary responsibility of overseeing our cybersecurity risk management program and assessing and managing any material risks related to cybersecurity threats. Our CTO supervises efforts to help prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal information systems personnel and reports produced by security tools deployed in the technical environment.

companyName: Lifevantage Corp

ticker: LFVN


text: Oversight of Cybersecurity Risks Our cybersecurity risks and associated mitigation strategies are evaluated by our management and the Information Security Team as needed, but no less frequently than annually. On at least a quarterly basis, the Information Security Team reports to our Board on developments to cybersecurity risks we face. Such reports include, among other things, an overview of the controls and procedures related to assessing, identifying, and managing risks related to cybersecurity threats, oversight of third-party service providers and related cybersecurity threats, and Information Security Team's evaluation of cybersecurity risks that are material to us.

companyName: Stellus Capital Investment Corp

ticker: SCM


text: Our Senior VP of Global IT and System Operations in conjunction with the IT Security Officer implements programs and policy recommendations to integrate cybersecurity risk considerations into our overall risk management strategy and works with the information security team to communicate key priorities. Our Senior VP of Global IT and System Operations and IT Security Officer are responsible for helping to prepare the Company for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.

companyName: ENZO BIOCHEM INC


text: Our Board of Directors is responsible for the oversight of cybersecurity risks and threats. The Board has delegated certain information security and data privacy oversight to the Audit Committee of the Board. The Audit Committee oversees compliance with information security and data privacy laws and has oversight responsibility for cybersecurity risks related to accounting, audit and financial matters. The Audit Committee and management report to the Board on a periodic basis regarding our information security and data privacy functions, including any cybersecurity threats.

companyName: LSI INDUSTRIES INC

ticker: LYTS


text: Our chief technology officer and the Cybersecurity Incident Response Team ("IRT") are responsible for assessing and managing cybersecurity risks. The IRT is comprised of individuals with expertise in information security, technology, legal and risk management. The IRT continually monitors cybersecurity incidents and potential threats. It liaises with external cybersecurity experts and industry partners to stay current on emerging threats and best practices. The diverse expertise of the IRT members enables comprehensive risk assessment and swift responses to mitigate the potential impact of breaches or other cybersecurity incidents.

companyName: ARBOR REALTY TRUST INC

ticker: ABR


text: Our management team, including our CISO and CCO, is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our CISO's experience includes over 25 years of helping to build global cybersecurity programs in companies ranging from Fortune 50 to early stage entities. Our CCO, who is responsible for our technology risk management program, has over 25 years of experience building and leading risk management and compliance programs in large institutions across multiple geographies.

companyName: ALKAMI TECHNOLOGY, INC.

ticker: ALKT


text: The Company's Chief Financial Officer oversees a corporate risk analysis that organizes the Company's enterprise risks, including cybersecurity, into categories to assess the potential likelihood and impact of each, and to periodically review and update with the board of directors.

companyName: DARLING INGREDIENTS INC.

ticker: DAR


text: As an externally managed, closed-end management investment company that has elected to be regulated as a BDC under the 1940 Act, our day-to-day operations are managed by the Adviser, Administrator and our executive officers under the oversight of our Board of Directors. As such, we rely on the cybersecurity policies and procedures implemented by Prospect Capital Management for assessing, identifying and managing material risks to our business from cybersecurity threats. Below are details of Prospect Capital Management's cybersecurity program that are relevant to us.

companyName: Prospect Floating Rate & Alternative Income Fund, Inc.


text: Our external audits and assessments identify and evaluate material risks from cybersecurity threats against our overall business objectives on a periodic basis and form the basis of internal reports, which can be shared with the management team, the Audit Committee of the Board of Directors, and the Board of Directors to evaluate our overall enterprise risk.

companyName: OptimizeRx Corp

ticker: OPRX


text: Our CISO leads the strategy, engineering and operations of cybersecurity across the Company and is responsible for providing annual updates to our Board, the ERMC and the ORMC on our TRIS program, as well as ad hoc updates on information security and cybersecurity matters. Our current CISO has held a series of roles in telecommunications, networking and information security at American Express, including promotion to the CISO role in 2013, and is also responsible for technology risk management. Prior to joining American Express, our current CISO served in a variety of technology leadership roles at a public pharmaceutical and biotechnology company for 14 years. Our CISO reports to the Chief Information Officer, information about whom is included in "Information About Our Executive Officers" under "Business." For more information on our risk governance structure, see "Risk Management — Governance" and "Risk Management —Operational Risk Management Process" under "MD&A."

companyName: AMERICAN EXPRESS CO

ticker: AXP


text: Cybersecurity threats pose a risk to the Company, as crimes committed through or involving the internet, such as phishing, hacking, denial of service attacks, stealing information, unauthorized intrusions into internal systems or the systems of third-party vendors could adversely impact the Company's operations or damage its reputation. The Bank manages cybersecurity threats proactively and maintains robust controls to protect its critical systems and data by investing in secure, reliable and resilient technology infrastructure, fostering a culture of technology risk awareness and continuously improving its technology risk management practices. The Company's process for monitoring and mitigating cybersecurity risk is designed in conjunction with its overall Enterprise Risk Management Policy. The Company's Information Security Program follows ISO 27002, an international standard for information security controls, as well as references to the National Institute of Standards and Technology ("NIST") Cybersecurity Framework, the Federal Financial Institutions Examination Council Information Examination Handbook, and other regulatory guidance and industry standards.

companyName: INDEPENDENT BANK CORP

ticker: INDB


text: Procyon Corporation has processes in place for identifying, assessing and managing material risks from potential unauthorized access to electronic information held by the Company for business and/or commercial purposes. We have safeguards in place to protect the confidentiality of information residing on the systems that include controls, mechanisms and technologies designed to prevent, detect and/or mitigate data theft or misuse. The data includes proprietary information that we routinely collect, process, store and transmit while conducting business with our customers. We contract third party consultants to assist providing security hardware and software, as well as providing reporting and recommendations to strengthen our systems.

companyName: PROCYON CORP


text: We are a special purpose acquisition company with no business operations. Since our Initial Public Offering, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk. Our management is generally responsible for the oversight of risks from cybersecurity threats, if any. Information regarding any cybersecurity incidents would be shared with our board of directors or audit committee to enable assessments related to disclosure and notice requirements. We have not encountered any cybersecurity incidents since our Initial Public Offering.

companyName: Evolution Metals & Technologies Corp.

ticker: EMAT


text: To date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. It is for this reason we are constantly reevaluating our cybersecurity stance, posturing against industry standards to try and effectively mitigate our risk.

companyName: PIONEER POWER SOLUTIONS, INC.

ticker: PPSI


text: The Adviser has developed an incident response plan that provides guidelines for responding to cybersecurity incidents. The incident response plan includes notification to the applicable members of cybersecurity leadership, including the Adviser's Chief Information Security Officer ("CISO"), and, as appropriate, escalation to other relevant individuals. Incidents may also be reported to the audit committee or full board of directors of the Adviser, as well as to the Audit Committee, if appropriate.

companyName: HPS Corporate Lending Fund


text: Related to Cybersecurity Risks Our cyber risk management program and related operations and processes are managed by our Director of Information Technology, in consultation with the legal and human resources teams. Currently, the Director of Information Technology role is held by an individual who has over 17 years of cybersecurity, information technology, and systems engineering experience. The Director of Information Technology reports to the Chief People Officer.

companyName: C4 Therapeutics, Inc.

ticker: CCCC


text: The Board of Directors is responsible for general oversight of the Company's risk management program, including cybersecurity risks. The Board of Directors receives an annual report from senior management through the ORM program and material risk assessments and mitigation strategies, including with respect to cybersecurity risks.

companyName: OSHKOSH CORP

ticker: OSK


text: We believe that the use of external service providers improves our operational capabilities, and we have implemented a vendor qualification and management program that applies to our service providers that handle protected health information, personal information, or other information subject to protection under applicable privacy and data protection regulations. This program is designed to address and mitigate cybersecurity and data protection risks that arise from our use of such service providers. We do not have full visibility into the cybersecurity risk management processes of our service providers. We rely on our third-party service providers to provide notification of, and remediate, significant cybersecurity threats and cybersecurity incidents that jeopardize the confidentiality, integrity, or availability of information that we own or use.

companyName: Celcuity Inc.

ticker: CELC


text: As part of its responsibilities pursuant to our corporate governance guidelines, our board of directors oversees our policies with respect to risk assessment and risk management, including with respect to cybersecurity risks. The board of directors administers its risk oversight function by receiving regular reports from our executive officers on areas of material risk to us, which reports include any updates regarding cybersecurity incidents or other developments.

companyName: Strategic Realty Trust, Inc.


text: The Board of Directors is primarily responsible for overseeing, and is regularly updated on the nature of, the Company's efforts to manage risks associated with cybersecurity threats.

companyName: Everi Holdings Inc.


text: The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. The Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.

companyName: DH ENCHANTMENT, INC.

ticker: ENMI


text: Cybersecurity risk oversight and management is a top priority for the Company and the Board of Directors. The Company offers a broad portfolio of industrial cybersecurity solutions to its customers, and an understanding of cybersecurity risks is critical to both the Company internally and to our customers and business partners. The Company identifies, assesses, and manages cybersecurity risk as part of both the enterprise cybersecurity program and the enterprise risk management program. The Company's expertise, dedicated resources and proven technology in cybersecurity management are evident in the Company's enterprise cybersecurity program. The Company's Cybersecurity Committee (described below) is a subcommittee of and reports to the Audit Committee, which oversees the enterprise risk management program.

companyName: BELDEN INC.

ticker: BDC


text: In November 2023, the Board adopted cybersecurity processes, which strengthened and formalized company-wide procedures related to identifying, managing and assessing cybersecurity threats. In the event of a cybersecurity incident which is potentially material, the SVP of IT must report such incident to the Company's CEO, CFO, General Counsel and the chair of the Cybersecurity Special Committee, and these executives and board member determine whether, based on materiality or potential materiality, to report the cybersecurity incident to the Cybersecurity Special Committee, which committee makes a determination if such cybersecurity incident requires a public filing.

companyName: ARKO Corp.

ticker: ARKO


text: Cybersecurity risk is the risk of harm or loss resulting from misuse or abuse of technology or the unauthorized disclosure of data.

companyName: AIRWA INC.

ticker: YYAI


text: Through strategic investments over several years, we have established and enhanced a comprehensive cybersecurity program consisting of security toolsets, people, policies, and contracted third-party service providers that provide technical, organizational, and administrative safeguards to protect against and timely respond to cybersecurity threats and incidents. Our cybersecurity strategy is based foremost on defense in depth, and secondarily on resilience. Defense in depth is a strategy of layered security, in which we employ a variety of overlapping controls, tools, and processes to defend against threat actors. Resilience is a strategy focused on business continuity and disaster recovery, with the goal of rapidly restoring, rebuilding, and recovering from any adverse cyber impacts to our business. These controls, tools and processes include technologies designed to detect and defend against unauthorized access to our systems and infrastructure, relevant corporate policies, periodic cybersecurity and privacy training programs, and incident response protocols for preventing, detecting, responding to and recovering from cybersecurity incidents. We use the National Institute for Standards in Technology security framework to evaluate our cybersecurity controls, which we work to continuously enhance.

companyName: COPART INC

ticker: CPRT


text: Our Board, including the Governing Body, considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee of the Board (the "Audit Committee") oversight of cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program.

companyName: Endeavor Group Holdings, Inc.


text: Nitin Raina has been our Chief Information Security Officer ("CISO") since 2022. Prior to that, Mr. Raina was Vice President of Cyber and Information Security between 2020 and 2022. From 2015 to 2022, he was Global Director of Information Security. Mr. Raina has over 25 years of work experience in information technology and cybersecurity. Mr. Raina earned a Bachelor of Engineering, Electronic and Telecommunications from the COEP Technology University in Pune, India and a Post Graduate Diploma in Information Technology from the Symbiosis Centre for Distance Learning. Mr. Raina also holds the Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) industry certifications and Board Qualified Technology Executive (QTE).

companyName: Thoughtworks Holding, Inc.


text: Board of Directors The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The audit committee is informed of material risks, when applicable, from cybersecurity threats by the Company's Chief Executive Officer. Updates on cybersecurity matters, including material risks and threats, are provided to the Company's audit committee, and the audit committee provides updates to the Company's board of directors at regular board meetings.

companyName: MDWerks, Inc.

ticker: MDWK


text: As of the date of this report, we have not identified cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected us, including our business strategy, results of operations or financial condition. We and our third-party service providers have, however, been the target of cybersecurity threats and we expect these threats to continue. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this annual report on Form 10-K.

companyName: IO Biotech, Inc.

ticker: IOBT


text: The Audit Committee receives periodic reports relating to risk assessment and risk management, including cybersecurity threats, from our senior management, including our Chief Executive Officer, Chief Financial Officer, General Counsel, Chief Information Security Officer, the head of our Internal Audit Department, and our Vice President of Risk Management. A cybersecurity update is provided to the Audit Committee at least quarterly. Members of our Audit Committee, and certain of our executive officers, including our Chief Executive Officer, General Counsel, and Chief Information Security Officer, are participants in IANS, an industry leading cybersecurity education platform. Our Chief Information Security Officer has more than 40 years of experience in security practice, processes, and standards, and holds various cybersecurity certifications.

companyName: EMCOR Group, Inc.

ticker: EME


text: We recognize the importance of developing, implementing and maintaining robust measures to safeguard our electronic information systems and we have established processes, described below, to assess, identify, manage and mitigate risks from cybersecurity threats and cybersecurity incidents. We believe our processes are reasonable for real estate companies of our size and complexity.

companyName: CubeSmart

ticker: CUBE


text: The responsibility for day-to-day management of cybersecurity risks lies with our management team, including the Chief Financial Officer and Chief Executive Officer. This team will be at the forefront of our cybersecurity initiatives, coordinating both internal and external resources to anticipate, identify, and mitigate cyber threats. Our approach will include regular updates from our third-party security expert consultant, leveraging intelligence from various sources, and utilizing advanced security tools to protect our digital environment.

companyName: NexMetals Mining Corp.

ticker: NEXM


text: In the ordinary course of our business, we receive, process, retain, transmit and store proprietary information and sensitive or confidential data, including certain public and nonpublic personal information concerning employees, borrowers and other customers and potential customers. In addition, we enter into relationships with third-party vendors to assist with various aspects of our business, some of which require the exchange of personal employee or customer information. The secure maintenance of this information and our information technology systems is important to our operations and business strategy. To this end, we have implemented processes designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems, including those pertaining to third-party service providers, that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein. These processes are managed and monitored by dedicated information security teams, including technology risk, cybersecurity operations, cybersecurity engineering, and identity and access management, led by our Chief Information Security Officer ("CISO"). These teams collectively manage and monitor mechanisms, controls, technologies, systems, and other processes designed to prevent or mitigate data loss, theft, misuse, access, or other security incidents or vulnerabilities affecting our data, digital assets and systems in furtherance of maintaining a secure information technology environment. For example, we conduct penetration and vulnerability testing, data recovery testing, security audits, and ongoing risk assessments, including due diligence on and audits of our key technology vendors, and other contractors and suppliers. We also conduct regular employee training on cyber and information security topics, phishing and simulations. In addition, we consult with outside advisors and experts, when appropriate, on a regular basis to assist with assessing, identifying, and managing cybersecurity risks, including to anticipate future threats and trends, and their impact on the Company's risk environment. We also utilize a third party for cybersecurity incident monitoring and response.

companyName: loanDepot, Inc.

ticker: LDI


text: Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. These individuals' expertise in IT and cybersecurity generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. They are informed by their respective cybersecurity teams and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above.

companyName: VICTORY CLEAN ENERGY, INC.

ticker: VYEY


text: Third-party vendors are vetted through our Advisor's service delivery program to ensure they have an established cybersecurity program. Our Advisor has also engaged a managed security provider to manage a supply chain defense subscription that will help obtain clear visibility into cybersecurity risks across third party vendors by proactively identifying, prioritizing, and driving remediation for cyber risks posed by critical business partners. Our Advisor's managed security provider's risk operations center will escalate certain alerts regarding third-party vendors directly to the appropriate business partners thus providing direct collaboration with third parties, saving time and improving risk reduction while safeguarding our relationships with such third parties.

companyName: Net Lease Office Properties

ticker: NLOP


text: As of the date of this Annual Report on Form 10-K, we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. For additional information about our cybersecurity-related risks, see Item 1A. Risk Factors in this Annual Report on Form 10-K.

companyName: Broadcom Inc.

ticker: AVGO


text: Our Vice President of Information Technology reports to the Company's Chief Financial Officer and is the head of the Company's cybersecurity team. This role is responsible for assessing and managing the Company's cyber risk management program, informing senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents and supervising such efforts. Senior leadership has been specifically trained and is credentialed in cybersecurity risk assessment and oversight.

companyName: Ranger Energy Services, Inc.

ticker: RNGR


text: The Company has in place an incident response and recovery plan that addresses the Company's response to a cybersecurity incident.

companyName: QUICKLOGIC Corp

ticker: QUIK


text: Risk Assessment and Management: We conduct risk assessments to identify potential cybersecurity threats and vulnerabilities. This includes evaluating the likelihood and potential impact of various threats, such as data breaches, malware attacks, and insider threats. Based on these risk assessments, we develop and implement risk management strategies to mitigate identified risks.

companyName: INTERLINK ELECTRONICS INC

ticker: LINK


text: Cybersecurity Management Team and Board Oversight ADT's Board of Directors, through its Audit Committee, has primary responsibility for overseeing cybersecurity risk management and receives at least annual updates on the status of ADT's cybersecurity program from our CISO. This update is provided in a special Audit Committee session and includes reports on ADT's security posture and SecurityScorecard assessment (rating and benchmarking), incident response, and vulnerability management. The Audit Committee reviews and discusses with management the Company's cybersecurity threats, vulnerabilities, defenses, and planned responses. Additionally, the Audit Committee will receive and discuss reports from management with the purpose of identifying threats and vulnerabilities, and it will monitor the effectiveness and progress of the actions and initiatives undertaken to mitigate such threats. ADT's Cybersecurity Incident Response Plan has been approved by the Audit Committee. In addition, the Audit Committee participates in ADT's annual Cybersecurity Incident Tabletop exercises and event simulations.

companyName: ADT Inc.

ticker: ADT


text: Our management and board of directors recognize the critical importance of maintaining the trust and confidence of our customers, business partners and employees, including the importance of managing cybersecurity risks as part of our larger risk management program. While all personnel at our company play a part in managing cybersecurity risks, as discussed in more detail under "—Governance" below, our board of directors, through delegation to the audit committee of the board of directors, or the audit committee, and our senior management team are involved in the oversight of our cybersecurity risk management program. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, integrity, and availability of the information that we collect and store by identifying, preventing, and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. Our information security program is aligned to our overall enterprise risk management program and utilizes an overarching framework to address enterprise information security governance, which seeks to protect information assets and systems against attacks and incidents while establishing appropriate security as a priority throughout the product development process. It is a risk-based program that aligns with industry-standard frameworks, such as the National Institute of Standards and Technology Cybersecurity Framework and use of a Cyber Security Incident Response Team, to incorporate security principles applicable to our regulatory and contractual obligations. This program is managed by a dedicated Chief Information Security Officer, or the CISO, who reports to the Chief Executive Officer and oversees a team responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes.

companyName: Alteryx, Inc.


text: DIRTT's Senior Vice President of Technology ("SVP of Technology"), who reports to the President and Chief Operating Officer, is responsible for DIRTT's cybersecurity and has over 15 years of technology experience. The SVP of Technology is supported by dedicated cybersecurity staff and Governance, Risk and Compliance ("GRC") staff. DIRTT's cybersecurity team leader has over 20 years of experience in cybersecurity, multiple industry standard cybersecurity certifications, and extensive offensive and defensive cybersecurity tactical skills. DIRTT's GRC lead has over 20 years of GRC experience and industry standard certifications. Cybersecurity incidents, response and remediation activities and statuses are reported directly to the SVP of Technology.

companyName: DIRTT ENVIRONMENTAL SOLUTIONS LTD

ticker: DRTTF


text: Our IT team, led by our Chief Information Officer, is responsible for assessing and managing our significant risks from cybersecurity threats and has primary responsibility for our risk management process and overall cybersecurity risk management program. This team includes in-house personnel devoted to these efforts, as well as a third-party IT firm, and they collectively have extensive knowledge of the technologies and applications we have adopted to address our cybersecurity risk.

companyName: SmartStop Self Storage REIT, Inc.

ticker: SMA


text: Our board of directors has ultimate oversight for risks relating to our data security plan. In addition, the board of directors has delegated primary responsibility to the Audit Committee for assessing and managing data privacy and cybersecurity risks, reviewing data security and cybersecurity policies and processes with respect to data privacy and cybersecurity risk assessment and management, reviewing steps management has taken to monitor and control such risks, and regularly inquires with our management team, internal auditors and independent auditors in connection therewith. The Audit Committee is also responsible for overseeing our investigation of, and response to, any cybersecurity attacks or threats.

companyName: Shimmick Corp

ticker: SHIM


text: To further bolster the Board's understanding of cybersecurity issues, management facilitates ongoing educational opportunities. The Board routinely engages in discussions with cybersecurity experts on building resilience to cyber risk and receives updates regarding management tabletop exercises. These educational initiatives empower Board members to make informed decisions and actively contribute to the oversight of cybersecurity governance.

companyName: RED ROBIN GOURMET BURGERS INC

ticker: RRGB


text: The Company, together with our IT consultants and auditors, has processes that thoroughly vet third-party service providers, continuously monitoring to ensure compliance with our cybersecurity standards. The Company has not encountered cybersecurity threats that have materially impacted our business or operations.

companyName: Epsilon Energy Ltd.

ticker: EPSN


text: Our processes also address cybersecurity threat risks associated with our use of third-party service providers, including our suppliers and manufacturers or who have access to patient and employee data or our systems. In addition, cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence. Additionally, we generally require those third parties that could introduce significant cybersecurity risk to us to agree by contract to manage their cybersecurity risks in specified ways, and to agree to be subject to cybersecurity audits, which we conduct as appropriate.

companyName: TMC the metals Co Inc.

ticker: TMC


text: We rely extensively on various information systems and other electronic resources to operate our business. In addition, nearly all of our customers, service providers and other business partners on whom we depend, including the providers of our online banking, mobile banking and accounting systems, use their own electronic information systems. Any of these systems can be compromised, including by employees, customers and other individuals who are authorized to use them, and bad actors using sophisticated and a constantly evolving set of software, tools and strategies to do so. The nature of our business, as a financial-services provider, and our relative size, make us and our business partners high-value targets for these bad actors to pursue. See "Risks Related to Information Security and Business Interruption" section of the Risk Factors included in Item 1A of this Form 10-K for additional information.

companyName: WEST BANCORPORATION INC

ticker: WTBA


text: The information required by this Item is set forth in the "MD&A – Cybersecurity" section in the Annual Report, which is incorporated herein by reference.

companyName: Bank of New York Mellon Corp

ticker: BK


text: The Audit Committee oversees the Company's risk management program, including the management of cybersecurity threats. The Audit Committee receives prompt and timely information regarding any cybersecurity risk that meets pre-established reporting thresholds, as well as ongoing updates regarding any such risk. On an annual basis, the Audit Committee discusses the Company's approach to overseeing cybersecurity threats with the Company's CFO and other members of senior management.

companyName: Canopy Growth Corp

ticker: CGC


text: As of December 31, 2023, the Company has not identified any cybersecurity threats, including previous incidents, that have materially impacted our business strategy, results of operations, or financial condition. This assertion signifies our diligent efforts in managing and mitigating cybersecurity risks, contributing to the stability and continuity of our operations.

companyName: Intelligent Hotel Group Ltd.

ticker: ZHJD


text: We face numerous cybersecurity risks in connection with our business. Such risks can impact our systems, results of operations and financial condition. We have, from time to time, experienced threats to and breaches of our data and systems, including malware, ransomware and computer viruses. Our customers, suppliers, subcontractors and business partners face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our operations, performance and results of operations. As of the date of this Form 10-K, we have not identified any risks from cybersecurity threats that have materially affected our business strategy, our results of operations or our financial condition. For more information about the cybersecurity risks we face and the potential impacts on our Company due to a cybersecurity incident, please refer to Item 1A - Risk Factors - "Risks Related to Intellectual Property, Cybersecurity and Information Technology and Data Privacy".

companyName: Qorvo, Inc.

ticker: QRVO


text: Board oversight of risks from cybersecurity threats Our Board provides strategic oversight on cybersecurity matters, including risks associated with cybersecurity threats. Our Board receives periodic updates from the CCO of the Company, the CIO, the CISO, and the Head of Operational Risk, regarding the overall state of Morgan Stanley's Cybersecurity Program, information on the current threat landscape, and risks from cybersecurity threats and cybersecurity incidents impacting the Company.

companyName: Morgan Stanley Direct Lending Fund

ticker: MSDL


text: We conduct regular testing to identify vulnerabilities before they can be exploited by attackers. We examine and validate our program with third parties, measuring it against industry standards and established frameworks to help identify areas for focus, improvement and compliance. We have comprehensive plans to ensure that any non-routine events are properly escalated. These plans are validated through cyber incident exercises to consider the types of decisions that would need to be made in the event of a cyber incident. We have engaged in scenario planning exercises around cyber incidents with cybersecurity consultants in this process.

companyName: Royalty Pharma plc

ticker: RPRX


text: The Company's Audit Committee of the Board of Directors oversees the Company's cybersecurity risk, mitigation strategies and overall resiliency of the Company's technology infrastructure. Such risk is managed as part of the Company's overall risk management and business continuity processes and is included in the ERM program, which is also overseen by the Audit Committee. The Audit Committee periodically reviews assessments of information security controls and procedures, any incidents that could have a potentially significant impact on the company's network, as well as potential cybersecurity risk disclosures. The Company's senior leadership team briefs the Audit Committee and Board of Directors at least annually on information technology and cybersecurity matters, including more frequent updates as circumstances warrant. Such annual updates include significant findings or updates by internal or external evaluations. The Audit Committee is apprised annually on emerging risks to the Company, including education on cybersecurity-related matters as needed. CSX has a cybersecurity expert on the Board and its Audit Committee to provide expanded oversight of the Company's cybersecurity and technology systems.

companyName: CSX CORP

ticker: CSX


text: Our cybersecurity management team is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for implementing our overall cybersecurity risk management program, including ongoing monitoring, and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants and professional services providers. Prior to the resignation of our Chief Information Officer ("CIO") in November 2024, the cybersecurity management team was co-led by our CIO and Director of Cybersecurity. Our Director of Cybersecurity currently leads the team and, once we hire a new CIO, we expect that individual will serve as a co-leader.

companyName: Frontier Group Holdings, Inc.

ticker: ULCC


text: The Company maintains technical and organizational safeguards, including employee training, incident response capability reviews and exercises, cybersecurity insurance and business continuity mechanisms to protect the Company's assets and operations. In addition to our internal information security team, we rely on services from various third parties, including a Managed Security Service Provider (MSSP) and services from an IT solutions organization. To evaluate the effectiveness of these internal and external efforts, Kelly adopted the National Institute of Standards and Technology Cybersecurity framework (NIST CFS) and is assessed against NIST CFS by a third-party firm at least annually. We use the assessment, reviews and exercises to ensure that the Company's information security program and processes for managing material cybersecurity risks are responsive to changes in the threat environment.

companyName: KELLY SERVICES INC

ticker: KELYA


text: We have created and regularly update our Incident Response Plan, which guides our response to a cybersecurity incident and outlines processes for forensic analysis, crisis communications, and required notifications. Disclosure of significant cybersecurity incidents are reported promptly to senior leadership and the Board of Directors. We test our Incident Response Plan through tabletop exercises. The Bank also maintains a business continuity program that addresses crisis management, business impact, and data and systems recovery.

companyName: PACIFIC PREMIER BANCORP INC


text: EnLink's Director of Information Systems reports to EnLink's Chief Information Officer and is the head of the Company's cybersecurity team. The Chief Information Officer is responsible for assessing and managing EnLink's cyber risk management program, informing senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents and supervising such efforts, including overseeing and identifying risks from cybersecurity threats associated with the use of third party cyber security partners. The Chief Information Officer also has a regular quarterly meeting with EnLink's executive team to review cybersecurity matters and the status of EnLink's cyber risk management program in detail. The cybersecurity team has decades of experience selecting, deploying, and operating cybersecurity technologies, initiatives, and processes, and relies on threat intelligence as well as other information obtained from governmental, public or private sources, including external consultants engaged by EnLink.

companyName: EnLink Midstream, LLC


text: Our ISO oversees a team of employees dedicated to the prevention, detection, mitigation, and remediation of cybersecurity incidents. He joined the Company in September 2022 with more than 20 years of technology and information security experience in banking and as a consultant, and he holds a Certified Information Security Manager certification. The team of employees includes information security professionals with a range of varying cybersecurity education and experience, many of whom have substantial experience assessing and managing cybersecurity initiatives and hold various cybersecurity certifications.

companyName: GERMAN AMERICAN BANCORP, INC.

ticker: GABC


text: The CTO, in coordination with senior management including the Chief Executive Officer, Chief Financial Officer, and General Counsel, works collaboratively across our company to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents in accordance with our incident response and recovery plans. To facilitate the success of our cybersecurity program, cross-functional teams have been established to address cybersecurity threats and respond to cybersecurity incidents. Through ongoing communications with these teams, the CTO and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents, and report such threats and incidents to the Audit and Finance Committee when appropriate.

companyName: CareDx, Inc.

ticker: CDNA


text: We believe that we have a robust cybersecurity program that is aligned to industry-standard cybersecurity frameworks. To identify and assess material risks from cybersecurity threats, our corporate risk management team considers cybersecurity threat risks alongside other company risks as part of our overall risk assessment and management process. To implement and maintain our cybersecurity program, we have a dedicated information security team that is managed by our Chief Information Security Officer. We believe our information security team is well positioned to identify risks from cybersecurity threats based on numerous job qualifications and ongoing training.

companyName: HOPE BANCORP INC

ticker: HOPE


text: The Information Security Committee, chaired by our Director of Information Security, includes IT, legal, compliance and other business leads. The Information Security Committee provides a forum for these cross-functional members of management to consider existing and emerging cybersecurity risks; review cybersecurity regulations; determine cybersecurity project prioritization; approve, review, and update policies and standards, as appropriate; and promote cross-functional collaboration to manage cybersecurity risks across the enterprise to support the Company's goals and address cybersecurity risks.

companyName: ARCBEST CORP /DE/

ticker: ARCB


text: Third-Party Service Providers : We engage leading third-party product and service providers to assist us with our cybersecurity risk management. We use an Information Prevention and Data Loss Prevention System on networks and endpoints, which is designed to prevent unauthorized access to or transfer of sensitive data. We also use centrally managed antivirus systems for blocking illegal software to detect and remove malware and illegal software from devices in real time. In particular, we use a Managed Security Service provider for Security Information and Event Management services for matters such as firewall management, intrusion detection and prevention, vulnerability management and incident response.

companyName: MAGNACHIP SEMICONDUCTOR Corp

ticker: MX


text: An in-depth update regarding cyber security is discussed during quarterly meetings with the Audit Committee. The Audit Committee is ultimately responsible for overseeing management's execution of the Company's cybersecurity risk management program.

companyName: Drilling Tools International Corp

ticker: DTI


text: Regular risk assessments by management, including our Director of Information Technology, and audits to identify vulnerabilities and areas for improvement. The Company performs annual financial and risk assessment audits aimed at identifying potential security threats. The Board has responsibility for oversight of potential threats relating to cybersecurity. In furtherance of such responsibility, the Director of Information Technology reports to the Board as needed on information about such threats, which may include the current cybersecurity threat landscape, defensibility measures implemented by the Company, the health of the Company's information security system, and the effectiveness of the Company's cybersecurity controls. Clear delineation of roles and responsibilities within the organization for cybersecurity-related tasks.

companyName: HG Holdings, Inc.

ticker: STLY


text: Our program is designed and assessed using the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"), which guides our approach to identifying, assessing, and managing material cybersecurity risks relevant to our business. While we use this framework to inform our cybersecurity practices, this does not imply compliance with any particular technical standards, specifications, or requirements.

companyName: Arcus Biosciences, Inc.

ticker: RCUS


text: Processes and Risk Assessment We rely on the cybersecurity program implemented by GECM. In order to assess, identify and manage material risks from cybersecurity threats, GECM has implemented a cybersecurity program, which is focused on (i) protecting the confidentiality of business, client, fund investor and employee information; (ii) maintaining the security and availability of its systems and data; (iii) supporting compliance with applicable laws and regulations; (iv) documenting cybersecurity incidents and its responses; and (v) notification of cybersecurity incidents to, and communications with, appropriate internal and external parties.

companyName: Great Elm Capital Corp.

ticker: GECC


text: We have designated a Chief Security Officer that reports to our Senior Vice President of Software Engineering to manage our assessment and management of material risks from cybersecurity threats. Our Chief Security Officer's cybersecurity expertise includes over 17 years of combined government and private sector assignments.

companyName: NVIDIA CORP

ticker: NVDA


text: In addition, while we take various measures to comply with all applicable data privacy and protection laws and regulations, there is no guarantee that our current security measures and those of our third-party service providers may always be adequate for the protection of our customer, employee or company data; and like all companies, we have experienced data incidents from time to time. In addition, given the size of our customer base and the types and volume of personal data on our system, we may be a particularly attractive target for computer hackers, foreign governments or cyber terrorists. Unauthorized access to our proprietary internal and customer data may be obtained through break-ins, sabotage, breach of our secure network by an unauthorized party, computer viruses, computer denial-of-service attacks, employee theft or misuse, breach of the security of the networks of our third-party service providers, or other misconduct.

companyName: ENTREPRENEUR UNIVERSE BRIGHT GROUP

ticker: EUBG


text: To our knowledge, LII's business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats within the last three years, including as a result of previously identified cybersecurity incidents. However, we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information on our cybersecurity related risks, see Item 1A, "Risk Factors."

companyName: LENNOX INTERNATIONAL INC

ticker: LII


text: After recovery, the IRT conducts a post-incident analysis to identify potential enhancements to the cybersecurity program that can mitigate the risk and/or severity of future incidents. The results of these reviews are shared with management and the Audit Committee.

companyName: Brixmor Property Group Inc.

ticker: BRX


text: As a blank check company, we have no operations and depend on the digital technologies of third-party service providers, and as noted in Item 1A. Risk Factors of this Form 10-K, any actual or perceived cyber incident or attack, such as computer malware, ransomware, viruses, vulnerabilities, social engineering (including phishing attacks), denial of service or other attacks, or security breaches, affecting us or the systems, infrastructure, cloud applications, or services of our third-party service providers, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against, identify and manage cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees our risks from cybersecurity threats. As of the date of this report on Form 10-K, we have not experienced any cybersecurity threats that have materially affected, or that we believe are reasonably likely to materially affect, us, including our business strategy, results of operations, or financial condition. We do, however, face risks from cybersecurity threats. For additional information regarding the risks we face from cybersecurity threats, please see Item 1A. Risk Factors of this Form 10-K, including the risk factors under the following heading: " Cyber incidents or attacks could result in information theft, data corruption, operational disruption and/or financial loss."

companyName: SK Growth Opportunities Corp


text: Our Information Security Program is designed to support the Company in identifying, protecting, detecting, responding to, and recovering from cybersecurity threats and incidents (collectively, "cybersecurity risks") with the intention to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: PayPal Holdings, Inc.

ticker: PYPL


text: The audit committee receives periodic reports from management, including our Chief Executive Officer concerning any cybersecurity threats and risks considered to be significant and the processes we have implemented to address them.

companyName: CANNAPHARMARX, INC.

ticker: CPMD


text: Monitoring and Incident Reporting We and our Manager continuously monitor our enterprise information systems and user activity to detect anomalous activity and identify potential security related incidents. Our cybersecurity monitoring and incident reporting program is informed by NIST guidelines and is internally and externally monitored. When a potential cybersecurity incident is detected, we and our Manager gather the necessary information to classify the incident by type and severity and activate containment plans and response teams depending on the nature of the incident. Cybersecurity incidents that may impact enterprise business operations, compromise critical systems or result in unauthorized access to critical data will be escalated to the CISO and an internal incident response team comprised of senior IT, business operations and compliance personnel to coordinate any internal and external responses. The CISO and the internal incident team will also elevate any material cybersecurity incidents or unauthorized occurrences that jeopardize the confidentiality, integrity or availability of enterprise information to senior management and our board of trustees.

companyName: PennyMac Mortgage Investment Trust

ticker: PMT


text: The independent members of the Board, through the Board's nominating procedures and requirements, considers cyber expertise in vetting nominees for the Board and recommending Board committee appointments, and the Board has determined that one of its independent Board members has cybersecurity expertise.

companyName: ACCESS Newswire Inc.

ticker: ACCS


text: There are a number of components of our risk management program. We leverage external third parties for security testing on an annual basis, including penetration testing. We consistently monitor critical risks from cybersecurity threats using automated tools and have a process to implement mitigation plans. Our Security Committee, headed by the Vice President of IT and the Chief Legal Counsel, assesses and monitors any identified security incidents that impact us or our external partners. Furthermore, we assess and review the cybersecurity practices of third parties who have access to our systems and/or process our sensitive information. This assessment may involve requesting Systems and Organization Controls Type 2 reports (SOC2 reports), conversations with our Vice President of IT, and the inclusion of contractual requirements to maintain data protection safeguards and timely notification if the third party experiences a security incident which may have a critical impact on our business or our data. Additionally, we conduct cybersecurity awareness training for employees during onboarding and throughout the year, and we conduct regular phishing simulations in an effort to raise awareness of spoofed or manipulated electronic communications and other cybersecurity threats.

companyName: Tango Therapeutics, Inc.

ticker: TNGX


text: We have also implemented processes to help identify, assess and manage cybersecurity risks associated with our use of third-party service providers.

companyName: Addus HomeCare Corp

ticker: ADUS


text: During the fiscal year ended December 31, 2024 and through the date of the filing of this Form 10-K, we have not identified any specific risks from cybersecurity threats that have materially affected, or are reasonably likely to affect, our business strategy, results of operations, or financial condition. The risk factors related to cybersecurity threats identified to be reasonably likely to affect, our business strategy, results of operations, or financial condition are included in "Item 1A. Risk Factors - Other Risks Related to Our Business".

companyName: CONMED Corp

ticker: CNMD


text: Xcel Energy employs a comprehensive risk based approach to assess the magnitude and significance of a vendor's risk to the Company. Certain third-party service providers are subject to vendor security risk assessments at the time of integration, contract execution/renewal, and upon detection of any increase in risk profile. Xcel Energy uses a variety of inputs in such risk assessments, including information supplied by providers and third parties (including information analysis centers that share daily threat intelligence and improve organizational agility associated with management of cybersecurity risks). In addition, the Company requires certain third-party service providers to meet appropriate security requirements, controls and responsibilities. The Company deploys periodic monitoring activities to assess compliance with our cybersecurity control framework and investigates security incidents that have impacted our third-party service providers as appropriate.

companyName: XCEL ENERGY INC

ticker: XEL


text: In addition, we have a disaster recovery program designed to help us respond to and recover from an interruption of critical IT services.

companyName: CONSUMER PORTFOLIO SERVICES, INC.

ticker: CPSS


text: Our assessment and management of material risks from cybersecurity threats are integrated into the Company's overall risk management processes. The Company has an IT Steering Committee made up of cross-disciplinary senior management, including (among others) the Chief Legal and Administrative Officer, Chief Financial Officer and Chief Operating Officer, along with IT leadership and representatives from several additional departments. For example, the IT department works with the IT Steering Committee and other senior management personnel to prioritize certain risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.

companyName: ACELYRIN, Inc.


text: Processes for Assessing, Identifying, and Managing Cybersecurity Threats: The Company maintains a fully defined set of documentation for assessing, identifying, and managing material risks from cybersecurity threats. We recognize the risk that cybersecurity threats pose to our operations, and cybersecurity is an integral component of our overall enterprise risk management (ERM) strategy. Our cybersecurity framework is aligned with the National Institute of Standards and Technology's special publication 800-53 and is comprised of the following four main pillars:

companyName: Vertiv Holdings Co

ticker: VRT


text: Impact of cybersecurity risks on business strategy, results of operations or financial condition Torrid (or the third parties it relies on) may not be able to fully, continuously, or effectively implement security controls as intended. As described above, we utilize a risk-based approach and judgment to determine whether and how to implement certain security controls and it is possible that we may not implement the necessary controls if we are unable to recognize or underestimate a particular risk. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate cybersecurity risks. Cybersecurity events, when detected by security tools or third parties, may not always be identified immediately or addressed in the manner intended by our cybersecurity incident response plan. While we maintain cyber risk insurance, the costs relating to certain kinds of security incidents could be substantial, and our insurance may not be sufficient to cover all losses related to any future incidents involving our data or systems. See "Risks Related to Our Business" in Item 1A, "Risk Factors" in this Annual Report for a discussion of cybersecurity risks that may materially impact us.

companyName: Torrid Holdings Inc.

ticker: CURV


text: Use of Third-Parties To regularly assess whether our cybersecurity strategies and processes remain appropriate to prevent, investigate and address cyber-related issues, the Company engages with information security and forensics firms with specialized industry knowledge. Our collaboration with these third parties includes the administration of third-party security questionnaires, risk assessments and testing, and consultation on security enhancements to attempt to mitigate threats. We also collaborate with third parties, regulators, and law enforcement, when appropriate, to resolve security incidents and assist in efforts to prevent unauthorized access to our processing systems.

companyName: CORPAY, INC.

ticker: CPAY


text: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity processes to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. Our approach to assessing, prioritizing, and effecting cybersecurity processes and projects is based on standards from the National Institute of Standards and Technology ("NIST").

companyName: TENNANT CO

ticker: TNC


text: We leverage the support of third-party information technology and security providers, including for periodic security testing and vulnerability scanning, as part of our risk management process, designed to identify, assess, and manage cybersecurity risks. We, especially MED, has utilized services from AliCloud Hong Kong since its inception, employing the AliCloud WAF firewall to effectively block potential conventional cyber-attacks. We actively cooperate and engage with AliCloud Hong Kong security team, to conduct penetration testing on our entire system regularly, to identify and address any vulnerabilities promptly. Being a key client of AliCloud Hong Kong, we have established and maintained a group chat including account manager and support team of AliCloud, through which any anomaly issues can be immediately responded and resolved.

companyName: SCIENTIFIC ENERGY, INC

ticker: SCGY


text: At eHealth, information security is everyone's responsibility, and we value the trust consumers and business partners place in us to protect their sensitive information. We have established policies and processes for assessing, identifying, and managing risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes.

companyName: eHealth, Inc.

ticker: EHTH


text: The Company's information technology systems, as well as those of the Company's third party service providers, are subject to cybersecurity threats. Significant cybersecurity threats, including intrusions into, compromises of or disruptions in the information technology systems of the Company or its third party service providers, could adversely affect the Company's financial condition and results of operations. The Company maintains and updates its information technology systems to mitigate the risk of cybersecurity threats.

companyName: PUBLIX SUPER MARKETS INC


text: Our cybersecurity program has been designed to protect our organization's sensitive information, mitigate cyber threats, and ensure our critical assets' confidentiality, integrity, and availability even as the threat landscape evolves. This is accomplished by a layered security approach through implementing security measures across various levels of our people, systems, and infrastructure with leading-edge cybersecurity tools combined with a 24/7 Security Operations Center and advanced vulnerability and incident management capabilities. Our safeguards also include employee training and awareness programs around phishing, malware, and other cybersecurity risks.

companyName: RADIUS RECYCLING, INC.


text: Oversight of risks relating to IT and cybersecurity has been delegated by our Board to its Audit Committee. The Audit Committee includes members of the Board who, in addition to each being designated as an "audit committee financial expert," possess backgrounds and experience which we believe enable them to provide effective oversight of our IT and cybersecurity risks. Our management routinely reports to the Audit Committee on the status of the Cybersecurity Program and material risks from cybersecurity threats at the Audit Committee's quarterly meetings. Such reports generally detail any testing, observations or developments concerning the Cybersecurity Program that occurred during the prior quarter. The results of periodic testing related to the Cybersecurity Program are also described in the Chief Compliance Officer's annual report to the Board, provided pursuant to Rule 38a-1 under the 1940 Act. The crisis response team leader also collaborates with the Audit Committee chair to ensure that the Board is apprised of any material cybersecurity incident.

companyName: MSC INCOME FUND, INC.

ticker: MSIF


text: At the management level, our cybersecurity program is managed by our Senior Director, IT, who is tasked with the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks. Our Senior Director, IT reports to the Senior Vice President, Research & Development Strategy and Operations (SVP, R&D). Our Senior Director, IT has over twenty-five (25) years of experience in information technology, and also leverages the experience of a third-party managed systems provider. Our Senior Director, IT regularly reports to the SVP, R&D, as well as to other executive management on cyber matters, as appropriate.

companyName: Bicara Therapeutics Inc.

ticker: BCAX


text: The Cigna Group's comprehensive cybersecurity program is supported by policies and procedures designed to protect our systems and operations as well as the sensitive personal information and data of our clients and customers from foreseeable cybersecurity threats. This program is an integral component of our enterprise risk management program.

companyName: Cigna Group

ticker: CI


text: In addition, we have engaged cybersecurity consultants, unaffiliated with our MSP, to advise management, assess our technology tools and review our cybersecurity practices. Our consultants utilized the National Institute of Standards and Technology ("NIST") Cybersecurity Framework to assess our cybersecurity risk and governance practices. The NIST Cybersecurity Framework enables organizations, regardless of size, to apply principles and best practices of risk management to improve security and resilience.

companyName: ClearSign Technologies Corp

ticker: CLIR


text: Our ERC Committee oversees our overall approach to enterprise risk management, of which cybersecurity is an important component. The ERC Committee and its Chair, in coordination with the Information Security Team and CISO, regularly review the categories of risk the Company faces, including any cybersecurity risk exposures, as well as the likelihood of occurrence, the potential impact of those risks, and the steps management has taken to monitor, mitigate and control such exposures. To facilitate these reviews, the Information Security Team and CISO report at least quarterly to the ERC Committee with respect to cybersecurity risks, including those identified through review of our business, of rising threats in the industry, and of the current state of our cybersecurity and information security program. The ERC Committee makes regular reports to the full Board of Directors regarding updates on cybersecurity and other risks.

companyName: AXON ENTERPRISE, INC.

ticker: AXON


text: We continue to evaluate our cybersecurity requirements to address the evolving cybersecurity risks that the Company faces in an increasingly technically capable environment. The Company has implemented policies for its personnel, including awareness programs, travel security programs and other related cybersecurity best practices. The information technology team manages the Company's cybersecurity policies, including employee training, with the ultimate goal of preventing cybersecurity incidents, if possible, while also maintaining IT system performance and data integrity to minimize the business impact should an incident occur. The Company is coordinating closely with the Board's Risk Committee to ensure that the Company will implement the appropriate cybersecurity technologies to protect the Company and its intellectual property.

companyName: Quantum Computing Inc.

ticker: QUBT


text: Talkspace recognizes the importance of assessing, identifying, and managing material risks associated with cybersecurity threats as a vital component to the success of our business. We have established policies and processes for assessing, identifying, and managing the material risk from cybersecurity threats which may include, among other things, operational risks; fraud; extortion; harm to our business, employees or customers; violation of privacy or security laws and other litigation and legal risk; and reputational risks.

companyName: Talkspace, Inc.

ticker: TALK


text: The Company's cybersecurity risk mitigation program involves a combination of internal resources and the use of third parties. Through a third-party vendor, the Company's internal information technology team performs monthly vulnerability scanning and performs an annual risk assessment based on best practices from the Cybersecurity and Infrastructure Security Agency ("CISA"). We also use a third-party vendor to, among other things, undertake periodic penetration and vulnerability testing, and the results of all internal and third-party assessments and testing are reported to the Board of Directors. We actively engage with key vendors, industry participants, and intelligence and law enforcement communities as part of our continuing efforts to evaluate and enhance the effectiveness of our information security policies and procedures.

companyName: William Penn Bancorporation


text: The ISO plays a pivotal role in informing the Board of Directors on cybersecurity risks. The ISO, other information security staff, and members of senior management meet regularly as the Technology Steering Committee. Reports of their meetings are shared with the boards of our subsidiary banks. Committee reports provide comprehensive briefings to both the Board and the Audit Committee as part of managements reporting. These briefings encompass a broad range of topics, including: Current cybersecurity landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies;

companyName: Kentucky First Federal Bancorp

ticker: KFFB


text: Our cybersecurity risk management program incorporates multiple components, including, but not limited to, policies, guidelines, procedures, infrastructure, and systems that are designed to protect the confidentiality, integrity and availability of our critical systems and information.

companyName: KULICKE & SOFFA INDUSTRIES INC

ticker: KLIC


text: Managing Material Risks & Integrated Overall Risk Management The Company has integrated cybersecurity risk management into its broader risk management framework in order to promote a culture that values protecting sensitive information. This integration is intended to promote the inclusion of cybersecurity considerations in decision-making processes throughout the Company. The Bank's general risk management personnel, including the Chief Risk Officer ("CRO"), work closely with their information technology and security counterparts to evaluate and address cybersecurity threats in alignment with our business objectives and operational needs.

companyName: Metropolitan Bank Holding Corp.

ticker: MCB


text: Our cybersecurity risk management is designed to provide a framework for assessing, identifying, and managing material risks from cybersecurity threats and to respond to cybersecurity incidents, including material risks associated with the use of services provided by third-party service providers. We rely on the cybersecurity protections of many of our third-party service providers.

companyName: NIOCORP DEVELOPMENTS LTD

ticker: NB


text: We recognize the importance of assessing, identifying, and managing risks associated with cybersecurity threats. These risks include, among other things, operational risks; intellectual property theft; fraud; extortion; harm to employees, violation of privacy or security laws and other litigation and legal risk; and reputational risks. We are committed to maintaining robust governance and oversight of these risks and to implementing mechanisms, controls, technologies, and processes designed to help us assess, identify, and manage these risks. While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, there can be no guarantee that we will not experience such an incident in the future.

companyName: MetaVia Inc.

ticker: MTVA


text: Our Board considers cybersecurity risk as part of its risk oversight function and has delegated oversight of cybersecurity and other IT risks to the Audit Committee. The Audit Committee oversees management's implementation of our cybersecurity risk management program.

companyName: MeiraGTx Holdings plc

ticker: MGTX


text: Use of Consultants and Advisors. We engage various third -party cybersecurity service providers to assess and enhance our cybersecurity practices and assist with the protection and monitoring of our systems and information. This encompasses a range of services, including network monitoring, endpoint protection, vulnerability assessments, and penetration testing. Additionally, we engage cybersecurity consultants, auditors, and other third parties, such as a third -party consulting firm, to rigorously evaluate our cyber processes. This includes a comprehensive assessment of our incident response procedures, ensuring they meet the highest standards of readiness and effectiveness.

companyName: TRANSCAT INC

ticker: TRNS


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us. For more information on our cybersecurity-related risks, see Item 1A - "Risk Factors."

companyName: BM Technologies, Inc.


text: Additionally, the Company is subject to the requirements of the Sarbanes-Oxley Act of 2002 and information technology general controls are an important part of the Company's internal control over financial reporting and are subject to controls testing. Control deficiencies that represent cybersecurity risks would be reported by management to the Audit Committee.

companyName: MACERICH CO

ticker: MAC


text: The plans are reviewed annually for enhancements and inter-department alignment. Tabletop exercises are conducted to measure the effectiveness of the plans and any findings are factored in towards further revisions of the plans.

companyName: Crexendo, Inc.

ticker: CXDO