text: As a result of this enterprise risk management process, cybersecurity threats have been and continue to be identified as one of the Company's top risks, with Ford Credit's Chief Technology Officer assigned as the executive risk owner. Ford Credit's Board is responsible for the oversight of cybersecurity and information technology risks, and Ford Credit's preparedness for these risks.

companyName: FORD MOTOR CREDIT CO LLC


text: As a financial institution, our business depends on the continuous operation of its information and data processing systems and the security of information received from customers, employees and others. We have developed and implemented a cybersecurity program intended to protect the reliability of our critical systems and the confidentiality of nonpublic information.

companyName: California BanCorp

secItem: Item 1C


text: Technical Safeguards We regularly assess and deploy technical safeguards designed to protect our information systems from cybersecurity threats. Such safeguards are regularly evaluated and improved based on vulnerability assessments, cybersecurity threat intelligence and other developing cybersecurity practices.

companyName: SmartStop Self Storage REIT, Inc.

ticker: SMA


text: Management is responsible for the day-to-day handling of risks facing our Company, while the Board of Directors, as a whole and through its committees, oversees risk management, including cybersecurity risks. The Board has delegated certain risk management responsibilities with respect to cybersecurity to our Audit and Compliance Committee.

companyName: HCA Healthcare, Inc.

ticker: HCA


text: Management of Cybersecurity Risk Our senior management is responsible for identifying, assessing, and managing the company's material cybersecurity risks. Our CISO oversees our programs for identifying, assessing, and managing our cybersecurity risks. Our CISO reports to our Chief Operating Officer (COO) and regularly provides updates to our CEO on significant cybersecurity-related matters. Our CISO also provides written monthly and quarterly reports on our cybersecurity program and risks to the CEO, Chief Technology Officer, and other key executives. Our CISO has more than 19 years' experience in cybersecurity, networking, and related technologies. Our CEO has more than 28 years' experience in e-commerce technology, engineering, and other related areas.

companyName: GoDaddy Inc.

ticker: GDDY


text: We take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and incidents.

companyName: RYTHM, Inc.

ticker: RYM


text: In addition, we engage with our third-party business partners to enforce our internal cybersecurity practices. We rely on all third-party business partners to maintain appropriate security programs; however, we cannot ensure in all circumstances that their efforts will be successful. We assess third-party cybersecurity controls through a detailed cybersecurity assessment and review, and include security and privacy requirements to our contracts, where applicable. We also require that our third parties report material cybersecurity incidents to us, allowing us the ability to assess the impact of any reported incident on our operations. The Company's incident response plans include emergency response, systems recovery, and other plans that would be enacted in the event of certain types of cybersecurity attacks.

companyName: VOXX International Corp


text: Our enterprise risk management program is designed to identify, measure, monitor and control all significant risks across various aspects of our company. Cybersecurity risk management processes are integrated into this program, given the increasing reliance on technology and potential of cyber threats. Our Chief Information Security Officer ("CISO") is primarily responsible for our cybersecurity program and is a key member of the risk management function, reporting directly to the Chief Risk Officer ("CRO") and to the Enterprise Risk Committee of our Board of Directors.

companyName: BANC OF CALIFORNIA, INC.

ticker: BANC


text: Education and Awareness Our policies require each of our employees to participate in our data security efforts. We regularly remind employees of the importance of handling and protecting customer and employee data, including through annual privacy and security training to enhance employee awareness of how to detect and respond to cybersecurity threats. We also conduct regular phishing email exercises and training to test employees of security practices to mitigate this threat.

companyName: CVB FINANCIAL CORP

ticker: CVBF


text: The board of director's audit committee and the internal cybersecurity team help identify, assess and manage the Company's cybersecurity threats and risks, including through the use of our risk register. Our internal cybersecurity team includes our information security function, security management, engineering operations, legal, risk management and third-party service providers. Our cybersecurity team identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment and Personalis' risk profile using various methods including, for example: using manual and automated tools, conducting scans of the threat environment, evaluating our and our industry's risk profile, evaluating threats reported to us, conducting threat assessments, employee reporting, and regular reviews and internal and external audits.

companyName: Personalis, Inc.

ticker: PSNL


text: Enforcing multi-factor authentication (MFA) for all systems Deploying anti-phishing solutions to detect and block suspicious emails Using single sign-on (SSO) solutions integrated with secure identity providers Simulating phishing attacks to measure awareness and improve training programs Implementing Security Information and Event Management (SIEM) systems for continuous monitoring and logging.

companyName: DAILY JOURNAL CORP

ticker: DJCO


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, under the heading "Our internal computer systems, or those of our collaborators or other contractors or consultants, may fail or suffer cybersecurity incidents, which could result in a material disruption of our product development programs," which disclosures are incorporated by reference herein. In the last three fiscal years, we have not experienced any cybersecurity incidents which have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.

companyName: SYNLOGIC, INC.

ticker: SYBX


text: Our Board of Directors has delegated the primary responsibility for oversight and review of guidelines and policies with respect to risk assessment and risk management to the Audit Committee. Blue Owl's Chief Technology Officer periodically reports to the Audit Committee as well as the full Board, as appropriate, on cybersecurity matters. Such reporting includes updates on Blue Owl's cybersecurity program, the external threat environment and Blue Owl's programs to address and mitigate the risks associated with the evolving cybersecurity threat environment. These reports also include updates on Blue Owl's preparedness, prevention, detection, responsiveness and recovery with respect to cyber incidents.

companyName: Blue Owl Capital Corp II


text: The cybersecurity incident response plan is integrated into our overall crisis management plan and process, for which our CSPO has ultimate day-to-day responsibility. Our CSPO and CISO share joint responsibility for providing regular cybersecurity updates to our Audit and Compliance Committee, including updates on our key technology initiatives, including those involving cybersecurity, and their status.

companyName: CENTENE CORP

ticker: CNC


text: Education and Awareness BancPlus' cybersecurity program requires each of the Company's employees to contribute to the Company's data security efforts. The Company regularly educates and tests employees on the importance of the proper handling and protection of customer and employee data, including through annual privacy and security training to enhance employee awareness of how to detect and respond to cybersecurity threats.

companyName: BANCPLUS CORP


text: Recognizing the complexity and evolving nature of cybersecurity threats, we also retain a range of external experts, including cybersecurity assessors, consultants and auditors in evaluating and testing our information security processes and systems. These engagements enable us to access specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our engagements with these third parties include regular audits, threat assessments and consultation on security enhancements. We also regularly conduct information security training to ensure that all employees, including those who may come into possession of confidential financial or personally identifiable information, are aware of information security risks and are equipped to take steps to mitigate such risks. The results of such tests, assessments, reviews and trainings are evaluated by senior management and our cybersecurity policies, processes and practices are refined as necessary based on the information provided.

companyName: CubeSmart

ticker: CUBE


text: We have experienced cybersecurity incidents that were immaterial and, as previously disclosed, in the third quarter of fiscal year 2023, we experienced a material cybersecurity incident as the personal information of a significant number of individuals was accessed by an unauthorized third-party exploiting a zero-day vulnerability in a third-party vendor's file transfer application used by many organizations, including us. We recorded expenses in connection with the investigation and remediation activities related to this incident; further details are included in "Note 15. Commitments and Contingencies" in Item 8 of this Annual Report on Form 10-K. To date, we are not aware of any other cybersecurity incidents that have had a material effect on our business. Despite our preventative and remediation efforts, we may continue to experience cybersecurity incidents in the future. There can be no guarantee that such efforts will be sufficient to protect our information systems, information, and other assets from significant harm and that future cybersecurity incidents will not have a material adverse effect on our results of operations or financial condition or cause reputational or other harm to us. Refer to Item 1A of this Form 10-K, which includes a section on "Risks Pertaining to Data and Data Security," for further discussion of the associated risks.

companyName: MAXIMUS, INC.

ticker: MMS


text: The Audit and Risk Committee receives information from the CISO and other members of management on at least a quarterly basis which is supplemented by a more extensive briefing from the CISO and management on at least a semi-annual basis on cybersecurity matters, including updates on cybersecurity training programs and the results of external assessments, as applicable. The CISO provides at least an annual briefing to the Board of Directors on these same topics.

companyName: AUTOLIV INC

ticker: ALV


text: Cybersecurity Governance Board Oversight of Risks from Cybersecurity Threats Our Board of Directors plays an important role in overseeing cybersecurity risks. Our Board of Directors has established an oversight structure for monitoring the effectiveness of and risks related to the cybersecurity program. Designated by the Board to oversee cybersecurity and information technology risks, the Audit Committee receives quarterly cybersecurity updates from our CISO, and the chair of the Audit Committee meets with the CISO individually on a quarterly basis. These updates often address topics such as ongoing efforts to improve our cybersecurity posture, operational metrics, incident metrics, and mitigation actions, and may include key metrics such as those related to cybersecurity maturity, risk reduction, cybersecurity program health, and audit and compliance activities. The Audit Committee updates the Board on its activities at each regularly scheduled Board meeting. Risks related to cybersecurity events are provided to the Board on an annual basis as part of an overall ERM update. In addition to this regular reporting, significant cybersecurity risks may also be escalated on an as-needed basis through the company's organizational structure in accordance with the IRP.

companyName: GILEAD SCIENCES, INC.

ticker: GILD


text: We recognize the importance of maintaining the trust and confidence of our tenants, business partners and employees with respect to the integrity of our IT network and related systems. We seek to address cybersecurity risks and preserve the confidentiality, security and availability of the information collected and stored on our IT networks and related systems through a comprehensive approach focused on (i) identifying, evaluating and managing our cybersecurity risks, (ii) preventing or mitigating potential threats, and (iii) responding appropriately to security breaches, cyber-attacks, IT network failures and other incidents, if and when they occur. While risk management is primarily the responsibility of our senior management team, our board of directors plays a role in overseeing our cybersecurity risk management program. Our board of directors administers this oversight function directly and with support from its audit committee, which has been delegated the responsibility to evaluate our major financial risks, including our policies and practices to govern the process by which risk assessment and management is undertaken.

companyName: STAG Industrial, Inc.

ticker: STAG


text: Our Board of Directors oversees management's processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives. The full Board retains oversight of cybersecurity because of its importance. In the event of an incident, we intend to follow our detailed incident response playbook, which outlines the steps to be followed from incident detection to mitigation, recovery, and notification, including notifying functional areas (e.g., legal), as well as senior leadership and the Board, as appropriate. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risk.

companyName: Jacksam Corp

ticker: JKSM


text: Our Tellenger subsidiary engages consultants for security assessments and quality system reviews to provide feedback on existing processes and recommend improvements. Additionally, Tellenger has completed numerous assessments for contract and Federal compliance of our internal systems and the systems we work on.

companyName: FIREFLY NEUROSCIENCE, INC.

ticker: AIFF


text: Vendor risk management program – We have implemented processes to identify and manage risks from cybersecurity threats associated with our use of third-party service providers. Our vendor risk management program establishes governance, processes and tools for managing various risks related to third-party service providers, including information security and supplier-related risks. As a condition of working with KORE, suppliers who access sensitive business or customer information are expected to meet certain information security requirements.

companyName: KORE Group Holdings, Inc.

ticker: KORE


text: We engage the expertise of third-party organizations to assist us to design and implement our cybersecurity procedures, as well as to monitor and test our safeguards in the context of recognized industry standards and practices. This process aims to confirm that our security infrastructure is robust and efficient, and that it is designed to resist diverse security threats. We use the critical insights gained from these third-party assessments to continue to improve our security controls and protect our systems and data.

companyName: Alector, Inc.

ticker: ALEC


text: Management's Expertise Our IT AVP also ensures he is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Staying informed on developments in the cyber industry is crucial to the Company's effective prevention, detection, mitigation and remediation of any cybersecurity incidents. In addition, the Company's CEO and IT AVP each hold undergraduate degrees and graduate degrees in their respective fields, and each have over 20 years of experience managing risks at the Company or at similar companies, including risks arising from cybersecurity threats.

companyName: Heritage Insurance Holdings, Inc.

ticker: HRTG


text: We employed email correspondence anti-leakage software and firewall system to our website. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. Nevertheless, the changes in our business and operations may impact our cybersecurity program in the future.

companyName: BAIYU Holdings, Inc.


text: As of the date of this Form 10-K, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this Form 10-K. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factor beginning on page 8 of the section entitled "Item 1A. Risk Factors" in this Form 10-K.

companyName: Inuvo, Inc.

ticker: INUV


text: The Company does not believe that there are currently any known risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company's business strategy, results of operations, or financial condition. However, the Company could face risks from cybersecurity threats in the future that could have a material adverse effect on its business strategy, results of operations, or financial condition. For more information on the Company's cybersecurity-related risks, see Item 1A, Risk Factors, of this Form 10-K.

companyName: FEDERAL SIGNAL CORP /DE/

ticker: FSS


text: In the event of a cybersecurity incident, we maintain a cybersecurity incident response plan designed to govern the actions required for responding to and reporting security incidents involving our information assets, including by escalating certain incidents to members of management, including the Vice President of Information Technology and Facilities and the Head of Cybersecurity. Pursuant to the plan and its escalation protocols, and depending on the nature, severity, and other circumstances of each potential cybersecurity incident, designated personnel may be responsible for assessing the severity of an incident and associated threat, containing the threat, remediating the threat, including recovery of data and access to systems, analyzing any reporting obligations associated with the incident, and performing post-incident analysis.

companyName: Immunovant, Inc.

ticker: IMVT


text: Upon verifying that a cybersecurity incident has occurred or is occurring, the Executive Leadership Team or their designees, in cooperation with IHM, will promptly conduct a preliminary assessment of the severity level of the cybersecurity incident. Following this assessment, IHM will report the cybersecurity incident to the Chief Executive Officer, who in consultation with the General Counsel, will inform the chair of the Audit Committee, who will then report such cybersecurity incident to the Board as the chair deems appropriate. All Level 1 (High Severity) cybersecurity incidents will be reported to the Board.

companyName: Chatham Lodging Trust

ticker: CLDT


text: Our program is informed by the International Standards Organization ("ISO") 27000, ISO 27001, and National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"). This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the ISO 27000, ISO 27001 and NIST CSF as guides to help us identify, assess, and manage cybersecurity risks relevant to our business.

companyName: Sunstone Hotel Investors, Inc.

ticker: SHO


text: QNB Bank's information technology resources are managed by the Information Technology Department, which is responsible for identifying, assessing, and managing material risks from cybersecurity threats. The present COO, who reports directly to the current President and Chief Executive Officer ("CEO"), has been with QNB Bank for over eight years and has over twenty-five years of experience in banking technology and operations. He has an MBA in Management Information Systems and is a current Certified Information Systems Security Professional. QNB's IT Director and ISO report directly to the COO. Additionally, the ISO has a reporting line to the Audit Committee to ensure independence and transparency. The Information Technology Department is managed by the IT Director. The present IT Director has been employed by QNB Bank in the information technology area for ten years has been in the technology industry for over fifteen years and holds numerous technology certifications. QNB's ISO, whose responsibilities include security relating to QNB's information systems, is a Certified Information Systems Security Professional and a Certified Information Security Manager. The ISO, among other duties, supervises internal employee training relating to cybersecurity risks, conducts access reviews relating to QNB's information systems, and monitors implemented checks and balances relating to access to information. Information relating to cybersecurity risks and cybersecurity incidents, if any, is reported by the COO and the ISO and to both the Information Technology Committee and the Information Security Committees. Additionally, cyber security incidents are reported to QNB's Board of Directors by the COO no less than quarterly.

companyName: QNB CORP.

ticker: QNBC


text: We are not presently engaged in, and we will not engage in, any operations until after the consummation of the Initial Business Combination that could face material cybersecurity threats. However, we do depend on the digital technologies of third parties, including information systems, infrastructure and cloud applications and services. Any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose.

companyName: ESH Acquisition Corp.

ticker: ESHA


text: The Company engages in the periodic assessment and testing of the Company's policies, standards, processes and practices that are designed to address cybersecurity threats and incidents. These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. The Company regularly engages third parties to perform assessments on our cybersecurity measures, including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness. The results of such assessments, audits and reviews are reviewed by the Cybersecurity team and the Company adjusts its cybersecurity policies, standards, processes and practices as necessary based on the information provided by these assessments, audits and reviews.

companyName: EQUITY BANCSHARES INC

ticker: EQBK


text: Recognizing the complexity and evolving nature of cybersecurity threats, we engage independent third parties to penetration test our systems, consult on security enhancements, and perform industrial control system audits. In addition, our IT-related internal controls over financial reporting are audited by both our internal auditors and independent external auditors. These practices allow us to leverage specialized knowledge and insights, identify risks, and continuously improve our information technology internal controls and processes to respond to the evolving cybersecurity threats.

companyName: BOISE CASCADE Co

ticker: BCC


text: We identify such threats by, among other things, monitoring the threat environment using manual and automated tools, subscribing to reports and services that identify cybersecurity threats, analyzing reports of threats and actors, conducting scans of the threat environment, evaluating our and our industry's risk profile, evaluating threats reported to us, logging and monitoring our IT environment, conducting threat assessments for internal and external threats and conducting vulnerability assessments to identify vulnerabilities.

companyName: Cardlytics, Inc.

ticker: CDLX


text: As of the date of this Form 10-K, to the best of our knowledge and based on available data, we have not experienced a material cybersecurity incident that has resulted in a material adverse impact to our business or operations. However, there can be no guarantee that we will not experience such an incident in the future. See Item 1A Risk Factors of this Annual Report on Form 10-K for more information on our cybersecurity risks and product vulnerability risks.

companyName: Gitlab Inc.

ticker: GTLB


text: The Corporation maintains a Cybersecurity Incident Response Plan (the "CSIRP"), which establishes an organizational framework and guidelines intended to facilitate an effective response and handling of cybersecurity incidents that could jeopardize the availability, integrity, or confidentiality of the Corporation's assets. The CSIRP outlines roles and responsibilities, criteria for measuring the severity of a cybersecurity incident, and an escalation framework, including processes for informing the General Counsel and the Board of Directors of material cybersecurity incidents. As described above, management is actively involved in assessing and managing the Bank's material cybersecurity risks. The CITSO and the VP of Information Security primarily lead these efforts. The CITSO, who reports directly to the CEO, is responsible for the oversight of the Corporation's IT operation, including the cybersecurity program, and holds a Bachelor of Science degree in Information Technology and Security and a Master of Science in Information Security and Assurance. He also holds 20 industry recognized Technology and Security certifications. The VP of Information Security reports directly to the CITSO and has responsibility for leadership of the Bank's cybersecurity program. He holds a bachelor's degree in mathematics and computer science, as well as several industry recognized information security certifications.

companyName: CNB FINANCIAL CORP/PA

ticker: CCNE


text: Our VP IT and Senior ISM provide periodic briefings to the audit committee and to the board of directors about our cybersecurity risks and activities, including cybersecurity incidents and responses, cybersecurity systems testing, third-party activities and related topics. In addition, our policies for managing and responding to cybersecurity incidents include procedures for appropriate escalations to our Chief Compliance Officer and to our audit committee chair.

companyName: IMPINJ INC

ticker: PI


text: Management is committed to continually enhancing its cybersecurity processes and practices to address the dynamic nature of the threats it faces and to ensure the security and integrity of its systems and data.

companyName: WILLIAMS COMPANIES, INC.

ticker: WMB


text: We design and assess our program based on applicable laws and regulations, and informed by industry standards and industry-recognized practices. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use such laws and regulations and industry standards and practices as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.

companyName: Expensify, Inc.

ticker: EXFY


text: We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example, outside legal counsel, threat intelligence service providers, cybersecurity consultants, cybersecurity software providers, managed cybersecurity service providers, darkweb monitoring services, and forensic investigators.

companyName: ACADIA PHARMACEUTICALS INC

ticker: ACAD


text: Our Chief Technology Officer has over 15 years of information technology experience, including over a decade in leadership positions. He is supported by IT, information security and data protection professionals from our Technology Leadership Centre with extensive experience, including from regulatory agencies. At the subsidiary level our management team has varying degrees of technology, operational and cybersecurity experience, including experience in mitigating and responding to cybersecurity incidents and managing associated risks.

companyName: Freedom Holding Corp.

ticker: FRHC


text: Cybersecurity risk management is the direct responsibility of our IT security team, which is led by our chief information officer ("CIO") and our chief information security officer ("CISO"). The IT security team develops, maintains, and enforces our information security program and information security policies, which are reviewed at least annually and are subject to approval by our information security committee. Additionally, we complete the following: • an annual enterprise risk assessment; • an annual threat and vulnerability assessment conducted in accordance with NIST guidance which considers adversarial and non-adversarial threat events that could impact our environment; • periodic IT risk assessments; • quarterly vulnerability management reviews; and • periodic cloud risk assessments.

companyName: Essent Group Ltd.

ticker: ESNT


text: The Company's Cyber Risk Committee ("CRC"), comprised of a cross-functional group of senior executives, provides advice and governance regarding the Company's strategic management of cybersecurity across the Company, including cybersecurity risk posture, projects, issues, threat intelligence and escalations. At its periodic meetings, the CRC receives reports and presentations from the CISO or third parties on internal and external cybersecurity matters, and, as appropriate, briefings from the CISO on cybersecurity incidents, the Company's incident response, recovery and remediation and actual or potential impacts.

companyName: Xylem Inc.

ticker: XYL


text: The Committee reports to the full Board regarding its activities, including those related to cybersecurity. The full Board also receives a briefing from management on our cyber risk management program at least annually. Board members receive presentations on cybersecurity matters from our Chief Information Security Officer (CISO), information security team or external experts as part of the Board's continuing education on topics that impact public companies. The CISO reports to the Chief Information Officer (CIO).

companyName: ADVANCED MICRO DEVICES INC

ticker: AMD


text: To date, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and we believe are not reasonably likely to affect the Company, including its business strategy, results of operations or financial condition. Refer to the risk factor captioned "A cyberattack that bypasses our information technology ("IT"), security systems or the IT security systems of our third-party providers, causing an IT security breach, may lead to a disruption of our IT systems and the loss of business information which may hinder our ability to conduct our business effectively and may result in lost revenues and additional costs." in Part I, Item 1A. "Risk Factors" for additional description of cybersecurity risks and potential related impacts on the Company.

companyName: FTAI Aviation Ltd.

ticker: FTAI


text: We have also established a governance structure under each of the CIOs that oversee investments in systems, resources, and processes as part of the continued maturity of our cybersecurity posture. Our CIOs have collectively over seventy years of service in various roles in the cybersecurity and information technology areas, including over forty years in their current roles or within the industry.

companyName: Distribution Solutions Group, Inc.

ticker: DSGR


text: however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. See Item 1A. "Risk Factors" for more information on cybersecurity risks.

companyName: Power REIT

ticker: PW


text: The Audit Committee receives regular reports from our Chief Information Security Officer ("CISO") regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential. The Chief Information Officer ("CIO") and CISO periodically report to the full Board regarding cybersecurity risks and our cyber risk management program. Board members periodically receive presentations on cybersecurity topics from our CIO, our CISO, or external experts as part of the Board's continuing education on topics that impact public companies.

companyName: EXTREME NETWORKS INC

ticker: EXTR


text: Overall, we believe that we have established a robust framework for confidentiality, integrity, and availability of information, adhering to relevant security standards, practices, and compliance requirements. In addition, we maintain insurance to help protect against risks associated with cybersecurity threats. As of the date of this report, we do not believe that any risks from cybersecurity threats have materially affected, or are reasonably likely to materially affect, us, including our business strategy, results of operations, or financial condition.

companyName: ACTELIS NETWORKS INC

ticker: ASNS


text: Security Leadership and Function Team: Our Chief Information Officer oversees our Security organization, which is a team of people dedicated to keeping company and personal information and systems safe from unauthorized alteration, disclosure, destruction and intrusion. Our CIO has more than 20 years of extensive information technology and cyber security management experience. Our Security Steering Committee is made up of our Chief Information Officer (CIO), Chief Technology Officer (CTO), members of our Information Security Team, and key individuals depending on the risk being addressed. The Security Steering Committee meets quarterly to review security risks and discuss upcoming priorities. The CIO, in coordination with the Security Steering Committee, works collaboratively across the Company to implement a program designed to protect the Company's information systems from cybersecurity threats, lower risk of a cybersecurity incident, and to promptly respond to any cybersecurity incidents in accordance with the Company's incident response and recovery plans. To facilitate the success of the Company's cybersecurity risk management program, multidisciplinary teams throughout the Company are deployed to address cybersecurity threats and to respond to cybersecurity incidents. We continue to invest in enterprise-grade certification of our practices. In the event of an incident, we intend to follow our detailed incident response protocol, which outlines the steps to be followed from incident detection, investigation, mitigation, recovery and communication including notifying functional areas, senior leadership and the Board, as appropriate.

companyName: Matterport, Inc./DE


text: Our third -party risk management program is integrated into our overall cybersecurity strategy. We recognize the significant challenges posed by the need to govern third -party service providers and vendors, and have implemented robust processes to oversee and manage these risks:

companyName: Guerrilla RF, Inc.

ticker: GUER


text: In addition, regular ongoing cybersecurity threat risk assessments are performed throughout the year and reported to our officers and Board of Directors by our Chief Compliance Officer ("CCO") no less than quarterly. Cybersecurity risks are assessed in general as part of the overall enterprise risk management for us, but also specifically between the ISP and our Adviser and Administrator in monitoring and determining not only the risks but also in assessing corresponding processes and procedures to mitigate those risks appropriately. Additionally, third party business applications are also incorporated in these risk assessments.

companyName: GLADSTONE COMMERCIAL CORP

ticker: GOOD


text: Equinix cybersecurity risk management activities and outcomes are guided by the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF") and assessed by a third party. In addition, our cybersecurity program is certified globally against the International Organization for Standardization ("ISO") 27001 standards. Currently, our cybersecurity program includes the following key categories of security controls with many security capabilities serving under each category Governance, Access Control, Awareness and Training, Audit and Accountability, Configuration Management, Contingency Planning, Incident Response, Data Security, Continuous Monitoring, Maintenance Controls, Media Protection, Physical Protections, Risk Assessment, Third-Party Risk Management, System and Communications Projection, and System and Information Integrity.

companyName: EQUINIX INC

ticker: EQIX


text: Operational responsibility for assessing and implementing our processes and procedures related to cybersecurity risk is led by our CIO. The CIO leads a team of internal full-time associates and external consultants and vendors that manage all aspects of our risk management tools. The CIO reports directly to the Chief Administrative Officer and General Counsel ("CAO"), who manages legal and insurance coverage matters related to cybersecurity risks. Additionally, our Chief Financial Officer and relevant associates on her staff are involved in the management of cybersecurity threats in relation to our internal controls environment, and, in the event of an incident, relevant investor relations needs. Our policies and procedures provide that the Chief Executive Officer, the Audit Committee, and the Board are to be informed in a prompt, timely manner in the event of any material cybersecurity event.

companyName: European Wax Center, Inc.

ticker: EWCZ


text: Our CISO brings over twenty years of extensive cybersecurity expertise, encompassing pivotal roles from hands-on technical positions to leadership responsibilities in designing, building and executing multiple cybersecurity teams and programs. Our CISO's career spans global organizations across different industries as retail, software and technology, medical device manufacturing and cyber advisory and audit services. Our CISO holds the following certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), and Certified in Risk and Information Systems Control (CRISC) from the Information Systems Audit and Control Association, and is a Certified Cybersecurity Information Security Officer (C-CISO) by the International Council of E-Commerce Consultants.

companyName: Aramark

ticker: ARMK


text: We are a special purpose acquisition company with no business operations and therefore, prior to the completion of a business combination, do not have any operations of our own that face cybersecurity threats. Since our initial public offering, our sole business activity has been identifying and evaluating suitable targets for a business combination. Therefore, the Company does not consider itself subject to significant cybersecurity risk and has not adopted any cybersecurity risk management program or formal processes for assessing, identifying, and managing material risks from cybersecurity threats. Our board of directors is ultimately responsible for overseeing the Company's risk management activities in general and will be informed, promptly and as deemed necessary by our management team, of any cybersecurity threats or risks that may arise, cyber incidents and industry trends, including regarding the appropriate disclosure, mitigation, or other response or actions that our board deems appropriate to take. As of the date of this Report, we did not identify any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy and results of operations. However, any such attack could adversely affect our business. We depend on the digital technologies of third parties and any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. A penetration of our systems or a third-party's systems or other misappropriation or misuse of personal information could subject us to business, regulatory, litigation and reputation risk, which could have a negative effect on our business, financial condition and results of operations. For more information about the cybersecurity risks we face, see the risk factor entitled " Cyber incidents or attacks directed at us could result in information theft, data corruption, operational disruption and/or financial loss. " in " Item 1A. Risk Factors—General Risk Factors. "

companyName: Rithm Acquisition Corp.

ticker: RAC


text: We utilize third party service providers to support and facilitate business and operational activities to achieve strategic goals. However, third parties may expose us and our customers to various risks. We have implemented a Vendor Risk Management ("VRM") framework, which provides the tools and practices utilized in the oversight of third-party service providers, with an objective to meet legal and regulatory obligations, contractual requirements, performance expectations, and our own principles and values. For the 2023 period, there were no material incidents affecting the VRM framework or controls.

companyName: BAR HARBOR BANKSHARES

ticker: BHB


text: Engaging Third Parties on Risk Management Recognizing the complexity and evolving nature of cybersecurity risk, we leverage strategic external partnerships to assess and mitigate cybersecurity threats to us. For example, in addition to our security analysts, we partner with third parties that provide 24/7 security operations monitoring, enhancing our response time. We are also audited by third parties for compliance with information security standards and assess vulnerabilities annually, providing additional expertise that strengthens our security posture.

companyName: GULFPORT ENERGY CORP

ticker: GPOR


text: Our Board of Trustees oversees management's process for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives. Senior leadership, including our Senior Vice President of Information Technology (the "SVP of IT"), meets with the Board of Trustees at least annually to present and discuss strategies and cybersecurity initiatives. This meeting includes reporting of cybersecurity incidents at least annually or more often, if identified.

companyName: CENTERSPACE

ticker: CSR


text: We have established a cybersecurity committee to oversee the implementation of policies and processes that are designed to protect against and respond to cybersecurity threats. Our cybersecurity policies and procedures are designed to ensure that appropriate cybersecurity measures and controls are developed, implemented, and maintained. These policies and procedures and the resulting safeguards are designed and evaluated in light of yearly risk assessments, which are based on guidance obtained from a recognized national standards organization. We have implemented access controls, firewalls and intrusion detection and prevention systems, vulnerability and patch management processes, and we also use a variety of other automated tools and manual processes safeguard our information systems. We maintain an incident response plan and business continuity and disaster recovery plans designed to enhance our incident response preparedness. We also require employees to undergo security awareness training when they are hired and periodically thereafter.

companyName: Viracta Therapeutics, Inc.

ticker: VIRX


text: Cybersecurity represents a critical component of the Company's overall approach to risk management. Our cybersecurity practices are integrated into the Company's enterprise risk management ("ERM") approach, and cybersecurity risks are among the core enterprise risks identified for oversight by our Board of Directors and the Board's Audit Committee through our annual ERM assessment. Our cybersecurity policies and practices follow the cybersecurity framework of the National Institute of Standards and Technology and other applicable industry standards. We generally approach cybersecurity threats through a cross-functional, multi-layered approach, with the specific goals of: (i) identifying, preventing and mitigating cybersecurity threats to the Company; (ii) maintaining the confidence of our customers, clients and business partners; (iii) preserving the confidentiality of our employee's information; and (iv) protecting the Company's intellectual property.

companyName: VEECO INSTRUMENTS INC

ticker: VECO


text: To date, our approach to cybersecurity has been effective in protecting the confidentiality, integrity, and availability of our information; however, we cannot guarantee that its efforts will be successful in preventing all cybersecurity incidents. Further, we currently maintain a cyber insurance policy that provides coverage for security breaches; however, such insurance may not be sufficient in type or amount to cover us against claims related to security breaches, cyber-attacks and other related breaches.

companyName: Stran & Company, Inc.

ticker: SWAG


text: Since the completion of our initial public offering and as of the date of this Annual Report on Form 10-K, we have not experienced any cybersecurity threats that have materially affected, or that we believe are reasonably likely to materially affect, us, including our business strategies, results of operations, or financial condition.

companyName: Future Vision II Acquisition Corp.

ticker: FVN


text: Part I | Item 1C. Cybersecurity Our cybersecurity program includes a threat and vulnerability management program to identify, assess, prevent, detect, monitor and remediate internal and external threats to, and vulnerabilities of, the Company's electronic systems, applications and data. Key components of this security program include a 24/7 Security Operations Center, which is managed internally at Jackson, with staff augmentation from third-party service vendors. The Security Operations Center monitors threats and attacks and initiates the incident response management process and associated notifications, as needed. In addition to monitoring threats and attacks, our internal management team reviews daily external threat intelligence and oversees, at least quarterly, external penetration testing of our Company's electronic systems. We provide training to all associates and regularly audit and assess our program with both internal and external resources, and through benchmarking studies and assessments against our Information Security and Privacy Policies and Standards.

companyName: Jackson Financial Inc.

ticker: JXN


text: Our cybersecurity risk management program includes a cybersecurity incident response plan. We design and assess our program primarily following the guidelines of the National Institute of Standards and Technology and Payment Card Industry Data Security Standard. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use these frameworks as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. The objectives of our programs are to protect the confidentiality, integrity, use and availability of the Company's data; to protect against unauthorized access to the Company's data, the Company's network and information technology applications; and to maintain disaster recovery plans to prepare for and respond to the potential for a disruption in the Company's informational technology. Our programs fall under the oversight of our Information Technology manager.

companyName: NATHANS FAMOUS, INC.

ticker: NATH


text: Our Chief Financial Officer and Senior Director of Information Technology are primarily responsible for assessing and managing our material risks from cybersecurity threats with assistance from third-party service providers. Our Senior Director of Information Technology leads our internal team and has over 20 years of cybersecurity experience, including the last 10 years in leadership positions, enabling him to build and transform successful cybersecurity programs and initiatives across several enterprises. His active associations include Veteran Volunteer Instructor for US Cyber Army Command (ARCYBER), Information Systems Security Association (ISSA), and Forum of Incident Response and Security Teams (FIRST), and has held many technical certifications including Strategic Planning, Policy, and Leadership (GSTRT), Certified Information Systems Security Professional (CISSP) and Certified Cloud Security Professional (CCSP). Our third-party vendors include assessors, consultants, and auditors holding (but not limited to) the following relevant certifications: Certified Information Systems Security Architecture Professional (CISSP-ISSAP), Certified in the Governance of Enterprise IT (CGEIT), Certified Data Privacy Solutions Engineer (CDPSE), and Certified Ethical Hacker (C|EH).

companyName: Whitehawk Therapeutics, Inc.

ticker: WHWK


text: from Cybersecurity Threats of the date of this report, we are not aware of any material risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. However, we cannot provide assurance that we will not experience any such event in the future.

companyName: PMGC Holdings Inc.

ticker: ELAB


text: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report, including the section titled "Risk Factors—General risk factors—If our information technology systems, or those of any of our third-party partners (such as contract research organizations and clinical trial sites), or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; additional costs; loss of revenue or profits; and other adverse consequences."

companyName: Vera Therapeutics, Inc.

ticker: VERA


text: The Company's CISO is the member of management principally responsible for overseeing the Company's cybersecurity risk management program, in coordination with the CIO and other business leaders across the Company, including legal, product engineering management, internal audit, finance and risk management. The CISO has extensive cybersecurity knowledge and skills gained from over 20 years of technical and business experience in the cybersecurity and information security fields, including as a Chief Information Security Officer and through other leadership and technical roles in IT governance and strategy, security risk and compliance, corporate product security and data privacy, and IT infrastructure. She also holds a Master of Science degree in Information and Cybersecurity from the University of California, Berkeley. The CISO reports directly to the CIO who in turn reports directly to the Chief Executive Officer. The CISO receives reports on cybersecurity threats from members of the Cyber Security Office on an ongoing basis and, in conjunction with the Senior Risk Council, regularly reviews risk management measures implemented by the Company to identify and mitigate data protection and cybersecurity risks. The CISO and CIO also work closely with the Company's legal department to oversee compliance with applicable legal, regulatory and contractual security requirements.

companyName: STANLEY BLACK & DECKER, INC.

ticker: SWK


text: Advisor and its affiliates engage vendors to enhance cybersecurity safeguards and improve incident response and update or replace systems and applications as appropriate to improve data processing and storage management and enhance security. These cybersecurity safeguards include multi-tiered backup protocols, which incorporate immutable backups, embody an innovative approach to data security, providing an additional barrier against ransomware and other cyber threats. Immutable backups ensure that data remains unmodifiable and immune to deletion for a predefined duration, thereby shielding it from unauthorized tampering or access. This technology utilizes sophisticated methods, including immutable storage repositories and ransomware-resistant backup architectures, to uphold the integrity and accessibility of vital data. Through the enforcement of stringent access controls and encryption measures, the resilience and availability of backup data is ensured, empowering an organization to swiftly and securely recover from cyber incidents.

companyName: Lightstone Value Plus REIT II, Inc.


text: The Information Security team, engaged in enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes, ensures a complete approach to safeguarding the confidentiality, integrity, and availability of sensitive information. The Information Security team consists of experienced information security professionals and is led by the CIO. The CIO has more than 25 years of information technology and banking leadership experience and holds a Certified Information Systems Security Professional ("CISSP") designation. Reporting to the CIO is the Information Security Manager who has more than 10 years of cybersecurity experience in the Financial Institution industry and possesses a master's degree in information systems management with an emphasis in cybersecurity. Complementing the independent Information Security team, is the Information Technology (IT) team. The IT System Administration & Engineering Manager has over seven years financial institution technology experience and a master's degree in information systems management with a cybersecurity management specialization and the Systems Support Manager has over 20 years of financial institution technology experience, ensuring technology operations occur with a security-focused mindset. In addition to experienced information security and information technology teams, the Company engages with industry experts for managed security services. This collaborative effort includes threat intelligence gathering, firewall management, intrusion detection system monitoring, intrusion prevention services, and security information and event management monitoring, ensuring round-the-clock protection.

companyName: FS Bancorp, Inc.

ticker: FSBW


text: Company recognizes that cybersecurity threats may pose significant business risks and has developed processes for identifying, assessing, and managing these threats. The Company has implemented a plan for cybersecurity and cyber-related management across its varied business units. This plan allows each business unit to tailor solutions to identify, manage, and mitigate risks based on their own assessment of their unique cybersecurity risks in conjunction with each business unit's overall risk management process. While this plan helps enable consistent and appropriate compliance in reporting material cyber events and risks across the Company.

companyName: Marygold Companies, Inc.

ticker: MGLD


text: Use of Consultants and Advisors. We engage various third-party cybersecurity service providers to assess and enhance our cybersecurity practices and assist with the protection and monitoring of our systems and information. This encompasses a range of services, including network monitoring, endpoint protection, vulnerability assessments, and penetration testing. Additionally, we engage cybersecurity consultants, auditors, and other third parties, such as a third-party consulting firm, to rigorously evaluate our cyber processes. This includes a comprehensive assessment of our incident response procedures, ensuring they meet the highest standards of readiness and effectiveness.

companyName: TRANSCAT INC

ticker: TRNS


text: We integrate our policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats into our enterprise risk management program based on recognized frameworks and applicable standards. Our cybersecurity program encompasses the key elements described below:

companyName: Elastic N.V.

ticker: ESTC


text: Preparation for and, where possible prevention of cybersecurity incidents involves regular and structured briefings to key management on risk remediation measures that should be taken to decrease, among other things, the likelihood and severability of incidents and to mitigate and manage their effects. The CEO, COO, CIO, CLO and other members of management receive detailed updates on cybersecurity risks on a regular basis, no less frequently than monthly, or when significant risks or incidents are identified. These briefings enable the management team to, among other things, stay informed of the latest threats, assess the effectiveness of current security measures and make timely decisions on strategic security initiatives. In addition, EchoStar's Board of Directors is regularly briefed, no less frequently than quarterly, on cybersecurity risks as part of its oversight functions and to ensure that cybersecurity practices align with the company's overall risk management framework and business objectives.

companyName: DISH DBS CORP


text: The Risk Committee receives information on cybersecurity risk, including risk appetite utilization, breaches and emerging risks, and the control environment, directly or indirectly, from various sources, including each of the CISO, the EROC, Management Committees, the Task Force, the TSRC and the ORC. Additionally, the Risk Committee reviews BancShares' information security policies and program with a focus on whether they are appropriate to protect data, records, and proprietary information of BancShares as well as that of its customers and employees.

companyName: FIRST CITIZENS BANCSHARES INC /DE/

ticker: FCNCA


text: Management also obtains, analyzes, and responds to information from various sources on cybersecurity threats and vulnerabilities that may affect the Corporation, while incorporating available information on cybersecurity events into our ISP. Additionally, management develops, maintains, and updates a repository of cybersecurity threat and vulnerability information that may be used in conducting risk assessments, and ultimately provide updates to the Board of Directors on cybersecurity risk trends. The Corporation has not experienced any cybersecurity incidents in the past that have individually or in the aggregate had a materially adverse effect on our business, financial condition or results of operations.

companyName: C & F FINANCIAL CORP

ticker: CFFI


text: nCino's Enterprise Risk Management Program includes a cybersecurity risk management process and a formal Information Security Management System ("ISMS") as foundational components of the program. We routinely assess risks that could affect the organization's ability to meet its business objectives and provide reliable services to our customers. nCino's Chief Information Security Officer ("CISO") is responsible for identifying, assessing, and managing material cybersecurity risks. nCino's CISO brings over 25 years of experience in security and risk management to the company and takes the lead on reporting risk to senior management and nCino's Board of Directors.

companyName: nCino, Inc.

ticker: NCNO


text: Management of the Company is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents impacting the Company, including through the receipt of notifications from service providers and reliance on communications with risk management, legal, information technology, and/or compliance personnel of the Investment Adviser.

companyName: PRINCETON CAPITAL CORP

ticker: PIAC


text: The CISO has served in various roles in information technology, information security, and business continuity for over 20 years. The CISO holds undergraduate and graduate degrees in Information Systems Management and has attained the professional certification of Certified Information Security Manager from the Information Systems Audit and Control Association.

companyName: ALTISOURCE PORTFOLIO SOLUTIONS S.A.

ticker: ASPS


text: The Sponsor also has several archival systems in place to monitor compliance. The Sponsor relies on a trusted firewall to manage and safeguard the Sponsor's network. Furthermore, the Sponsor conducts regular reviews on third parties to ensure they have policies in place that are designed to prevent information security lapses or breaches.

companyName: 21Shares Ethereum ETF

ticker: TETH


text: The Company's cybersecurity strategy includes recognition and deployment of the following: a. A formal approach to enterprise risk management encompassing finance, operational risk management, and Information Technology ("IT") to manage the business and technology-related challenges and required regulatory compliance obligations i. Board approved Information Security policies that are reviewed annually ii. An IT infrastructure architecture that has been designed and implemented with security at its core in order to enable key business activities while ensuring the confidentiality, integrity, and availability of our technology infrastructure and critical business and customer data. The Network Security Architecture design focuses on our ability to: i. Identify and understand organizational risks to critical systems, assets, data & capabilities ii. Protect our environment by putting in safeguards iii. Detect potential threats by developing and implementing the appropriate activities to identify the occurrence of a cybersecurity event iv. Respond to and take the appropriate action regarding a detected cybersecurity incident v. Recover and restore any capabilities or services that were impaired due to a cybersecurity incident To reduce the risks from cybersecurity threats associated with our use of third-party service providers, we have a supplier relationship policy and process which outlines information security requirements for mitigating the risks associated with supplier's access to our organization's assets. This policy must be agreed to by the supplier, documented, and reviewed annually.

companyName: SelectQuote, Inc.

ticker: SLQT


text: Education and Awareness We provide required security awareness education and training to our employees and contractors with system access that focuses on various aspects of the cybersecurity world. Users of Powell's internal systems are required to complete an annual cybersecurity awareness training and are tested for awareness on a regular basis. We also provide tailored training courses to functional technology employees and employees who process personal or sensitive information.

companyName: POWELL INDUSTRIES INC

ticker: POWL


text: Our internal cybersecurity governance program is led by Mammoth's Director of Information Technology, with support from the internal information technology department, who reports to our Chief Financial Officer. Our Director of Information Technology has over seven years of technological leadership experience along with an extensive background in computer support and application support. The Director of Information Technology and her team are responsible for leading cybersecurity strategy, policy, standards, architecture, and processes within our organization. In addition, our cybersecurity incident response team is responsible for responding to cybersecurity incidents. This team continuously identifies potential cyber vulnerabilities and opportunities for improvement, including yearly security training for all employees. This team also continuously evaluates and implements technological enhancements as part of our cybersecurity systems. Progress and developments in our cybersecurity governance program are regularly communicated to our executive team. Our board of directors, as part of its oversight process, receives quarterly updates on the status of our cybersecurity governance program, including as related to new or developing initiatives and any security incidents that have occurred.

companyName: MAMMOTH ENERGY SERVICES, INC.

ticker: TUSK


text: We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition; however, like other companies in our industry, we and our third-party vendors may, from time to time, experience threats and security incidents relating to our and our third-party vendors' information systems and infrastructure. For more information, please see our risk factors under Part 1 Item 1A. Risk Factors.

companyName: Larimar Therapeutics, Inc.

ticker: LRMR


text: We have not encountered cybersecurity risks, threats, or incidents that have materially affected or are reasonably likely to materially affect the Company, our business strategy, results of operations, or financial condition during the financial year ended December 31, 2023.

companyName: MULIANG VIAGOO TECHNOLOGY, INC.


text: As of December 31, 2024 and through the date of the filing of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this report.

companyName: Ernexa Therapeutics Inc.

ticker: ERNA


text: Although we are subject to ongoing and evolving cybersecurity threats, we are not aware of any cybersecurity threats that have materially affected or are likely to affect us, including our business strategy, results of operations or financial condition. If we were to experience a material cybersecurity incident in the future, such incident may have a material effect, including on our business strategy, operating results, or financial condition. For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto, see the "Risk Factors" disclosures in Item 1A of this Annual Report on Form 10-K.

companyName: SUTRO BIOPHARMA, INC.

ticker: STRO


text: Operations and Incident Response Capabilities The Company maintains a Cybersecurity Operations Center (CSOC) comprised of in-house staff, contracted personnel, and other third-party security service providers. Our CSOC provides constant monitoring, assessment, and defense of all enterprise information systems (including web sites, applications, databases, servers, clients, and data centers) as well as service provider connections and provides incident reporting as needed.

companyName: HUNT J B TRANSPORT SERVICES INC

ticker: JBHT


text: The Company's Chief Information Security Officer ("CISO") is primarily responsible for developing, monitoring, and implementing our Information Security Program (the "ISP"). Our CISO has over twenty-five years of experience managing information security programs across banking and technology companies. Our CISO reports monthly on cybersecurity matters to the Board and The Risk and Compliance Committee in addition to full quarterly reports and an annual report. Our ISP team is organized around six key functions: (1) security operations and incident response, (2) security engineering and architecture, (3) threat and vulnerability management, (4) Information Technology/Information Security – governance, risk and controls, (5) security awareness and training, and (6) identity and access management. These functions are integrated into each of our business lines through coordination with a dedicated security business partner.

companyName: Triumph Financial, Inc.

ticker: TFIN


text: Our sole executive officer and director is responsible for assessing and managing cybersecurity risks, but he does not have specific cybersecurity expertise. We believe that once the Company commences operations, cybersecurity will represent an important component of the Company's overall approach to risk management and oversight.

companyName: Polomar Health Services, Inc.

ticker: PMHS


text: We engage third parties to assess the effectiveness of our cybersecurity and technology management strategy and continue to seek to implement new, and improve existing, processes regularly to adjust for changes in technology, internal or external threats, business strategy, and regulatory requirements. We, and our third parties, have deployed managed detection and response services to monitor our technology infrastructure and information systems for possible threats. Our technology management strategy also includes ongoing security training and education for employees regarding threats, including their role and responsibility in detecting and responding to such threats.

companyName: PALATIN TECHNOLOGIES INC

ticker: PTNT


text: We are exposed to risks from interactions with vendors and other third parties. To mitigate this risk, we perform due diligence on our vendors and third-party service providers. We believe we work with reputable vendors and require SOC reports from critical vendors and IT service providers.

companyName: LXP Industrial Trust

ticker: LXP


text: Our processes also include assessing cybersecurity threat risks associated with our use of third-party services providers in normal course of business use, including those in our supply chain or who have access to our customer and employee data or our systems. Third-party risks are included within our risk management process discussed above. In addition, we assess cybersecurity considerations in the selection and oversight of our third-party services providers, including due diligence on the third parties that have access to our systems and facilities that house systems and data.

companyName: SEKISUI HOUSE U.S., INC.


text: Our Chief Technology Officer ("CTO") has overall responsibility for our information technology program, which includes the Company's cybersecurity program. Our Chief Information Security Officer ("CISO") is directly responsible for the Company's cybersecurity program, which is designed to protect and preserve the integrity, confidentiality, and continued availability of the information owned by, or in the care of, the Company. Our CTO has over 25 years of information technology experience, including systems development, technology strategy, and vendor management; our CISO has over 30 years of information technology and cybersecurity program management experience. Prior to joining Brighthouse Financial, both our CTO and CISO previously served in roles that involved leading and overseeing information technology and cybersecurity programs at other public companies in the financial services industry. In addition, our CTO serves on a cross-departmental, management-level risk committee that oversees the Company's enterprise risks, including cybersecurity risks. This enterprise-level risk committee is informed about and monitors the prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: Brighthouse Financial, Inc.

ticker: BHF


text: Risk Management and Strategy have established certain processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management strategy. Such processes include physical, procedural and technical safeguards, response methods, regular tests on our systems, and routine review of our processes to identify risks and enhance our practices. We also use technology-based tools to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs. We engage certain external parties, including consultants and computer security firms to enhance our cybersecurity oversight and provide monthly trainings to our employees. We consider the internal risk oversight programs of third-party service providers before engaging them in order to help protect our company from any related vulnerabilities. At this time, we are not aware of any material cybersecurity incidents that have impacted the Company. For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report.

companyName: Enveric Biosciences, Inc.

ticker: ENVB


text: Our technology and cybersecurity program focuses on the defense, rapid detection and rapid remediation of cybersecurity threats and incidents. Our program also includes cybersecurity policies and a crisis response and management plan that is intended to allow rapid management and response and appropriate communication of cybersecurity threats and incidents.

companyName: Cardiff Lexington Corp

ticker: CDIX


text: To date, we have not experienced any cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected the Company and we are not aware of any cybersecurity threats that are reasonably likely to affect the Company, including its business strategy, results of operations or financial condition.

companyName: SHF Holdings, Inc.

ticker: SHFS


text: The Board is responsible for general oversight of our risk management, including cybersecurity risk. The Audit and Finance Committee of the Board is responsible for overseeing our risk exposure to information security, cybersecurity and data protection, as well as the steps management has taken to monitor and control such exposures. We conduct cybersecurity audits and assessments on a regular basis and either our CIO/CISO or Chief Financial Officer report to the Audit and Finance Committee on a quarterly basis.

companyName: PENTAIR plc

ticker: PNR


text: We engage in regular assessments of our infrastructure, software systems, and network architecture utilizing third-party cybersecurity professions, including annual penetration testing and audits of our information technology systems to identify vulnerabilities and areas for additional enhancement. Employees receive regular virtual and in-person security awareness training through simulated tests, company communications, and in-person training. We also maintain a third-party vendor management program to identify and assess risks of our third-party service providers.

companyName: Bank7 Corp.

ticker: BSVN


text: The Cyber Committee, chaired by the CISO, and whose members include the CTSO, CAO and Chief Risk & Resiliency Officer, as well as other members of senior management and the legal team, is responsible for identifying cybersecurity risks and threats, recommending mitigating actions to strengthen cybersecurity resilience, and meeting risk tolerance thresholds established by senior management. The Cyber Committee also validates that the Company has appropriate people, process and technology capabilities to identify, mitigate and report on cybersecurity risks to the executive leadership team and the Board of Directors. The Cyber Committee meets regularly to allow members of the internal cybersecurity team to present concerns and recommendations for decisions on preventing, identifying, mitigating, and remediating risks and threats. To the extent warranted, the Cyber Committee may additionally be convened on an ad hoc basis. The Cyber Committee makes decisions regarding the reporting of cybersecurity concerns to the executive leadership team, who escalate issues to the Board and/or the Audit Committee as necessary. In the case of incidents that arise, the Cyber Committee, under the direction of the Board and/or executive leadership team when appropriate, works to involve all appropriate personnel with the aim of resolving the incident, performing any required remediation/reporting, and taking appropriate steps to comply with applicable laws and regulations. The process that the Cyber Committee follows upon emergence of incidents is documented in the Company's Incident Response Plan. Additionally, cybersecurity risks and the adequacy of associated mitigations are analyzed by senior leadership as part of the enterprise risk assessments that are reported to and discussed by the Board.

companyName: MOODYS CORP /DE/

ticker: MCO


text: Our cybersecurity risk management function is led by our Chief Information Security Officer (CISO) and Chief Technology Officer (CTO) and includes members of our Information Technology (IT) department and other personnel that oversee our information security and engineering operations. Input and guidance are also provided by members of our Legal and Compliance departments. Together, these employees (collectively referred to as members of our Cybersecurity Management) are primarily responsible for developing, implementing and monitoring our cybersecurity program and reporting on cybersecurity matters to senior management as well as our board of directors.

companyName: COHEN & STEERS, INC.

ticker: CNS


text: At the senior management level, our Chief Information Security Officer (CISO) oversees CNA's information security and data privacy programs and is responsible for establishing and implementing the security strategy alongside the Chief Information Officer (CIO), to whom the CISO reports directly. The CIO serves on the Enterprise Risk Committee, which is chaired by the CRRO.

companyName: CNA FINANCIAL CORP

ticker: CNA


text: We rely on several information systems throughout our company, as well as those of our third-party business partners, to provide access to our web-based products and services, keep financial records, analyze results of operations, process customer orders, manage inventory, process shipments to customers, store confidential or proprietary information, and operate other critical functions. Our information systems and our business partners' and suppliers' information systems may be vulnerable to attacks by hackers and other security breaches, including computer viruses and malware, through the internet, email attachments, and persons with access to these information systems, such as our employees or third parties with whom we do business. These risks have increased as information systems and the use of software and related applications become more cloud-based. We have implemented various programs, processes, and systems designed to mitigate these risks.

companyName: NEOGEN CORP

ticker: NEOG


text: CFO and/or representatives from our management committee on cybersecurity provide periodic briefings to the Audit Committee and the Board regarding our Company's cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like.

companyName: PetVivo Holdings, Inc.

ticker: PETV


text: Our management team, through our VP of Engineering Infrastructure and CISO, stays informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which include briefings with internal security personnel, review of threat intelligence and other information obtained from governmental, public or private sources, including external cybersecurity service providers, and receiving alerts and reports produced by security tools deployed in our IT environment. Our CISO relies on close collaboration with other internal infrastructure, product, and engineering teams to implement our cybersecurity risk mitigation measures.

companyName: Maplebear Inc.

ticker: CART


text: The Company's Co-Chief Information Officers are the members of the Company's management principally responsible for overseeing the Company's cybersecurity risk management program, in partnership with other business leaders across the Company. The Co-Chief Information Officers work in coordination with the other members of the IRT, which includes our Co-Chief Information Officers, our Chief Operating Officer, and their designees. The Company's Co-Chief Information Officers have each served in various roles in information technology and information security for over 30 years, including in leadership positions with both small and large companies. The Co-Chief Information Security Officers each have extensive knowledge in technology and cybersecurity. The Company's President, Chief Financial Officer, Chief Operating Officer, and Chief Compliance Officer each hold undergraduate, and, in some cases, graduate, degrees in their respective fields, and each have over 20 years of experience with managing risks at the Company and in environments similar to the Company's, including risks arising from cybersecurity threats.

companyName: TriLinc Global Impact Fund LLC

ticker: TRLC


text: Tredegar's business model depends on the efficiency and reliability of its information systems, networks, and essential assets, with a portion of these systems and networks being administered by third-party service providers. Tredegar's Cybersecurity Program (the "Program"), which was designed utilizing a risk-based approach, was developed to not only prevent, identify, investigate, resolve, and mitigate potential cybersecurity vulnerabilities within Tredegar but also to enhance the information security posture of Tredegar's operations involving third-party service providers.

companyName: TREDEGAR CORP

ticker: TG


text: To promote organization-wide attention to cybersecurity issues, we conduct mandatory employee training on cybersecurity and provide ongoing cybersecurity education and awareness, such as mock phishing attacks, incident simulations, and cybersecurity awareness materials.

companyName: Oportun Financial Corp

ticker: OPRT


text: Our board of directors recognizes the critical importance of maintaining the trust and confidence of our vendors, partners, and employees. The Board is actively involved in oversight of the Company's risk management program, and cybersecurity represents an important component of the Company's overall approach. The Company's cybersecurity standards, processes, and practices are based on recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and other applicable industry standards. In general, the Company seeks to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security, and availability of the information that the Company collects and stores by identifying, preventing, and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: Cullinan Therapeutics, Inc.

ticker: CGEM


text: Risks from cybersecurity threats, including risks identified from previous cybersecurity incidents, have required significant investments over time in maturing our Information Security Program and attracting and retaining the personnel with requisite experience and expertise. In particular, the CISO has substantial relevant expertise in the financial services industry and formal training in the areas of information security and cybersecurity risk management. We will need to continue to make meaningful investments in cybersecurity controls for continuous improvement and maturation in response to constantly evolving cybersecurity threats. Cybersecurity threats will continue to be endemic to the financial services industry for the foreseeable future.

companyName: 1ST SOURCE CORP

ticker: SRCE


text: Liberty Global and its subsidiaries are subject to risks from cyber-attacks that have the potential to cause significant interruptions to the operation of their businesses. The frequency of these attempted intrusions has increased in recent years and the sources, motivations and techniques of attack continue to evolve and change rapidly. We have developed a cybersecurity program that is designed to scan for, monitor and identify risks to our confidential or non-public information, protect such information, detect threats and events and maintain an appropriate response and recovery capability to help ensure resilience against cyber-attacks and other information security incidents. We have adopted a variety of measures to monitor and address cyber-related risks and continue to implement and explore additional cybersecurity measures.

companyName: Liberty Global Ltd.

ticker: LBTYA


text: To support our preparedness, the Company has a written incident response preparedness plan that we update as business needs and the security landscape change. In the event of a cybersecurity incident, our incident response team refers to the plan, and the Company conducts tabletop exercises to enhance incident response preparedness. The plan sets out clear response procedures, define roles, categorize incidents, determine materiality, record responses, comply with regulatory standards, assist in public disclosure, and lessen the impact on stakeholders. It is designed to enable a prompt, uniform, and efficient strategy to reduce the financial, operational, legal, and reputational risks associated with cybersecurity incidents. Business continuity and disaster recovery plans are used to prepare for the potential disruption of technology we rely on. The Company has implemented a user awareness program to enhance cybersecurity measures. These include phishing, malware, data handling, device security, cybersecurity education, password security, internet browsing and defenses to physical threats. As part of our overall risk mitigation strategy, the Company also maintains cyber insurance coverage; however, such insurance may not be sufficient in type or amount to cover us against claims related to security breaches, cyberattacks and other related breaches.

companyName: WK Kellogg Co


text: We also have a Cybersecurity Incident Response Plan ("CSIRP") to provide a standardized framework for responding to cybersecurity incidents, including escalation to senior management and other key stakeholders, as appropriate. Our CSIRP is reviewed at least annually, and we conduct cybersecurity tabletop exercises to practice our response.

companyName: Coeur Mining, Inc.

ticker: CDE


text: Our risk management activities and cybersecurity strategy include IT policies, standards, procedures and systems to address and mitigate risks for critical system availability, network integrity, information protection, and operational continuity.

companyName: Texas Pacific Land Corp

ticker: TPL


text: We perform a corporate risk assessment annually, which includes specific consideration and assessment of cybersecurity risk. As part of our risk assessment process, we incorporate results from procedures performed by third-party consultants. We utilize third-party consultants to complete risk quantification analysis and perform penetration and vulnerability testing and monitoring, as well as overall cybersecurity control testing. Potential risks associated with the use of third-party service providers are monitored and managed through an established service provider management policy. Service providers must meet certain security requirements such as security incident or data breach notification and response protocols, data encryption requirements, and data disposal commitments.

companyName: Otter Tail Corp

ticker: OTTR


text: Cyber threats are considered one of the most significant risks facing financial institutions. Since our company is externally managed, we rely upon the operational and investment risk oversight functions of our Manager and its affiliates. To mitigate risk from cyber threats, our Manager has a designated Global Chief Security Officer ("GCSO") who leads its global security department that is responsible for identifying, assessing, and managing cybersecurity threats. The GCSO has experience in the public and private sectors, specializing in security, investigations, and incident response. The global security department oversees the following groups across Invesco: Information Security, Strategic Intelligence, Corporate Security, Business Continuity, Crisis Management, Global Privacy Office, Business Security, Projects and Strategy. This structure supports a more comprehensive, holistic approach to keeping our and Invesco clients, employees, and critical assets safe, upholding privacy rights and enabling a secure and resilient business.

companyName: Invesco Mortgage Capital Inc.

ticker: IVR


text: Our Board has overall responsibility for risk oversight, with its committees assisting our Board in performing this function based on their respective areas of expertise. Our Board has delegated oversight of risks related to cybersecurity to the Audit Committee. The Audit Committee is charged with evaluating the Company's overall guidelines, policies, processes and procedures with respect to information security and cybersecurity risks. Our CISO and our information security team provide in-depth reporting on cybersecurity risks to the Audit Committee at least annually based on our established enterprise risk categories. These briefings include assessments of the threat landscape, updates on incidents, results of client security audits, and reports on our investments in cybersecurity risk mitigation. In addition, given its overall importance to the organization, our CISO also provides cybersecurity risk reporting to our Board on at least an annual basis as well as from time to time as needed.

companyName: Cushman & Wakefield Ltd.

ticker: CWK


text: As a result of the significance of the cybersecurity threats to our business, we expend material efforts on our cybersecurity risk management processes, although we have not identified any specific threat or incident that has materially affected or is reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. For additional information regarding our risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this annual report on Form 10-K, including the risk factors entitled: "A security breach or incident may compromise the integrity of our products, create service outages for our hosted products, or allow unauthorized access to our network or our customers' data, harm our reputation, create additional liability and adversely impact our financial results."

companyName: Informatica Inc.

ticker: INFA


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. However, we do depend on the digital technologies of third parties, and, as noted in Item 1A. Risk Factors of this Annual Report on Form 10-K, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for the Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in Item 1A. Risk Factors of this Form 10-K. As of the date of this Annual Report, we are not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to affect us, including our business strategy, results of operations and financial condition.

companyName: Pegasus Digital Mobility Acquisition Corp.


text: Identifying the incident response team ("IRT") and any appropriate sub-teams to address specific information security incidents, or categories of information security incidents; Coordinating IRT activities, including developing, maintaining, and following appropriate procedures to respond to and document identified information security incidents;

companyName: NB Bancorp, Inc.

ticker: NBBK


text: Cybersecurity Program Overview The Adviser has instituted a cybersecurity program designed to identify, assess, and mitigate cyber risks applicable to the Fund. The cyber risk management program involves risk assessments, implementation of security measures, and ongoing monitoring of systems and networks, including networks on which the Fund relies. The Adviser actively monitors the current threat landscape in an effort to identify material risks arising from new and evolving cybersecurity threats, including material risks faced by the Fund.

companyName: Stone Point Credit Income Fund


text: Lastly, at least annually, the CISO reports directly to the Board the overall status of the Information Security Program and the Company's compliance with the Interagency Guidelines for Safeguarding Customer Information. Any material findings related to the risk assessment, risk management and control decisions, service provider arrangements, results of testing, security breaches or violations are discussed as are management's responses and any recommendations for program changes.

companyName: Northwest Bancshares, Inc.

ticker: NWBI


text: Director of Technology reports to our Chief Financial Officer and has operational responsibility for our information security programs, protections, and efforts, along with leading efforts for implementing, monitoring, and maintaining cybersecurity and data security strategy, policy, standards, architecture, and practices across our business. We anticipate that our Director of Technology will update the Chief Financial Officer and Chief Executive Officer on these matters and work closely with these Senior Executives to oversee compliance with legal, regulatory, and contractual security requirements with the guidance of outside counsel.

companyName: BARFRESH FOOD GROUP INC.

ticker: BRFH


text: Role of the Board of Directors Our Board is responsible for overseeing management in the execution of its risk management responsibilities, including with respect to cybersecurity risk management. In addition, an overall review of risk is inherent in the Board's ongoing oversight of our business, long-term strategies and other matters presented to our Board. Our Board exercises its risk oversight responsibilities periodically as part of actions taken and matters reviewed during its meetings and also through the activities of its standing committees. The Board has delegated responsibility for cybersecurity risk oversight to the Audit Committee.

companyName: Artisan Partners Asset Management Inc.

ticker: APAM


text: We do not store any sensitive or confidential data on our own devices or media but use password-protected cloud storage.

companyName: Mitesco, Inc.

ticker: MITI


text: We have cybersecurity insurance (subject to specified retentions or deductibles) related to cybersecurity incidents that addresses costs, losses, and expenses related to cybersecurity investigations, crisis management, notification processes and credit monitoring services, public relations, and legal advice. Additionally, this cybersecurity insurance may cover certain physical injury to, loss or destruction of tangible property, including loss of use thereof, or loss of use of tangible property which has not been physically injured or destroyed. However, damages, fines, and claims arising from such incidents may not be covered or may exceed the amount of any insurance available or may not be insurable.

companyName: Janus International Group, Inc.

ticker: JBI


text: Our security program also contains a third-party risk management process which is designed to assess third-party vendors' information security posture and inform management on the potential cyber risk introduced by third-party products and services and the broader security team's recommendations for risk management.

companyName: Moelis & Co

ticker: MC