text: Our risk management program also assesses third party risks, and we perform third -party risk management to identify and mitigate risks from third parties such as vendors, suppliers, and other business partners associated with our use of third -party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third -party service providers and potential fourth -party risks when handling and/or processing our employee, business or customer data. In addition to new vendor onboarding, we perform risk management during third -party cybersecurity compromise incidents to identify and mitigate risks to us from third -party incidents.

companyName: Usio, Inc.

ticker: USIO


text: Due to evolving cybersecurity threats, it has and will continue to be difficult to prevent, detect, mitigate and remediate cybersecurity incidents. While we are not aware of any material cybersecurity threats or incidents that have had or are reasonably likely to materially affect us, including those having a long-term impact on our business strategy, results of operations or financial condition, there can be no guarantee that we will not be the subject of future successful attacks, threats or incidents. For additional information on the cybersecurity risks faced by our Company, refer to Item 1A. "Risk Factors—Risks Related to Our Business—Our electronic information systems have been and could in the future be, subject to service interruptions, data corruption, cyber-based attacks and network security breaches. Significant disruptions in, or breaches in security of, our electronic information systems or data can adversely affect our business and financial statements."

companyName: ESAB Corp

ticker: ESAB

secItem: Item 1C


text: Our board of directors has approved various management committees including the IT/Cybersecurity Committee, which provides oversight and governance of the technology program and the information security program, as well as oversight and governance of the Company's data and its storage. This committee is chaired by the CIO and includes various employees within the enterprise information security department, including the CISO, and other key departmental managers from throughout the entire company, including information technology, risk, compliance, operations and human resources/training. This committee generally meets quarterly to provide oversight of the risk management strategy, standards, policies, practices, controls, and mitigation and prevention efforts employed to manage security, data risks and incidents. The committee reports its findings to the management Enterprise Risk Committee. More frequent meetings occur from time to time in accordance with the Incident Response Plan to facilitate timely informing and monitoring efforts. The CISO reports on key issues, including significant cybersecurity and/or privacy incidents, discussed at management committee meetings and the actions taken in connection with those meetings to the IT/Cybersecurity Committee of the board of directors on a quarterly basis (or more frequently as may be required).

companyName: TRICO BANCSHARES /

ticker: TCBK


text: Although we have implemented a cybersecurity program designed to protect and preserve the confidentiality, integrity and availability of our information systems and assets, we also maintain cybersecurity insurance to manage potential liabilities resulting from specific cyber incidents. However, it is important to note that although we maintain cybersecurity insurance, there can be no guarantee that the insurance will cover us, wholly or partially, from potential liabilities, or that such insurance proceeds will be paid to us in a timely manner.

companyName: Third Harmonic Bio, Inc.


text: We have implemented and maintain a cybersecurity risk management program that includes information security processes designed to prevent, detect, remediate, and manage material risks from cybersecurity incidents and threats to our critical computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and tenant data ("Information Systems and Data").

companyName: Kennedy-Wilson Holdings, Inc.

ticker: KW


text: We use various processes to inform our assessment, identification and management of risk from cybersecurity threats. Key areas of our cybersecurity risk management processes and strategy currently include: • Cross-Functional Collaboration and Coordination. Our Enterprise Cybersecurity Services ("ECS") team, led by our Chief Information Security Officer ("CISO"), has first line responsibility for our cybersecurity risk management processes. However, the ECS team works in partnership with other internal teams to coordinate efforts, priorities and oversight. These include: our Cybersecurity Executive Council (the "Council"), which is composed of key leaders from stakeholder groups throughout the Company, including the CISO and certain members of senior management;

companyName: ON SEMICONDUCTOR CORP

ticker: ON


text: As a supplier of LMR products to federal, state and municipality agencies, our cybersecurity strategy focuses on implementing effective and efficient controls, technologies, and other processes to assess, identify, and manage material cybersecurity risks. We have retained the assistance of a Cybersecurity expert consultant, to assist internal management to evaluate processes in place to assess, identify, manage, and address material cybersecurity threats and incidents. These include, among other things: annual and ongoing security awareness training for employees; mechanisms to detect and monitor unusual network activity; and containment and incident response tools. We monitor issues that are internally discovered or externally reported that may affect our products and have processes to assess those issues for potential cybersecurity impact or risk. We are also implementing a process to manage cybersecurity risks associated with third -party service providers. We impose security requirements upon our suppliers, including maintaining an effective security management program; abiding by information handling and asset management requirements; and notifying us in the event of any known or suspected cyber incident.

companyName: BK Technologies Corp

ticker: BKTI


text: Audit Committee of the Board of Directors oversees bioAffinity cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services, brief the Audit Committee on cyber vulnerabilities identified through the risk management process, the effectiveness of the cyber risk management program, and the emerging threat landscape and new cyber risks on at least an annual basis. This includes updates on bioAffinity processes to prevent, detect, and mitigate cybersecurity incidents. In addition, cybersecurity risks are reviewed by our Board of Directors at least annually, as part of the Company's corporate risk oversight processes.

companyName: bioAffinity Technologies, Inc.

ticker: BIAF


text: Threat Management: Upon identification of a potential threat, our managed service provider's dedicated incident response team takes immediate action to mitigate any adverse impacts. Our threat management procedures include: • Immediate isolation of affected systems to prevent the spread of threats; • Application of appropriate remediation measures, such as patches and software updates; • Conducting a thorough investigation to understand the breach's nature and scope; and • Implementing enhancements to prevent future occurrences.

companyName: ODYSSEY MARINE EXPLORATION INC

ticker: OMEX


text: The Company's planned investments in cybersecurity include implementing advanced data loss prevention measures, encryption protocols, and continuous monitoring to safeguard sensitive information and mitigate the risk of unauthorized access or disclosure. As part of the Company's risk management strategy, it has secured comprehensive cyber insurance coverage. The Company regularly reviews and updates its cyber insurance coverage to align with the evolving nature of c yber threats and industry standards.

companyName: INVESTORS TITLE CO

ticker: ITIC


text: Company consulted with HUB and consulting firm, Cyber Risk Opportunities, to assess its network infrastructure and cyber posture, mitigate cybersecurity threats and protect the Company's shareholders. date, no cybersecurity threats have materially affected our business strategy, operations, or financial condition.

companyName: BOXABL Inc.


text: Our Information Security department, which is our first line of defense, operates under our Chief Information Security Officer, who manages preventative and detective controls to protect against cybersecurity risks and responds to cyber incidents and data breaches. Our Chief Information Security Officer has 28 years of cybersecurity experience, with 13 years servicing financial institutions in senior leadership or executive security roles. At least annually, the first line of defense conducts mandatory teammate training on information security and provides ongoing information security education and awareness for teammates, such as online training classes, mock phishing attacks and information security awareness materials. The first line of defense also conducts regular exercises that simulate mock cyber-attacks and provide lessons learned that continuously improve our incident response plans. Our cybersecurity risk management program is designed to maintain and challenge our information security defense system, as well as monitor, respond, evaluate, and escalate cyber threats. We also have a business risk manager within our first line of defense whose role is to focus on evaluating, managing, and escalating technology risks. The escalation process includes regular escalation reports of problem incidents, including cybersecurity threats, which allows for collaborative threat management by the first and second lines of defense.

companyName: Atlantic Union Bankshares Corp

ticker: AUB


text: We require our employees to take cybersecurity-related training regularly that promotes awareness of how to detect, report, and respond to cybersecurity threats. Employees with certain roles and responsibilities are also assigned cyber training for their specific functions. We also maintain an Insider Threat program, headed by our Director of Security, to identify, assess and deal with potential risks from within our company, including cyber risks.

companyName: AeroVironment Inc

ticker: AVAV


text: As noted above, our Chief Risk Officer, Cyber Information Security Officer, and cybersecurity team provide regular reports to the Board regarding cybersecurity risks, as well as a review of the processes described above. In particular, our Chief Risk Officer provides reports at every regularly scheduled Board meeting regarding our most material risks and the degree of exposure to these risks. Our management personnel are also required to provide more frequent updates to the Enterprise Risk Committee on major developments regarding cybersecurity matters. The Committee, in turn, provides regular updates to the Board on these matters.

companyName: INDEPENDENT BANK CORP /MI/

ticker: IBCP


text: CACI's cybersecurity program is integrated into our overall risk management program and is primarily managed by our Chief Information Security Officer (CISO) who is responsible for coordinating cross-functional internal and external resources to establish processes and procedures to monitor potential cybersecurity risks, identify cybersecurity incidents, implement appropriate mitigation measures, report cybersecurity breaches, and maintain our cybersecurity program. Our CISO has extensive experience assessing and managing cybersecurity programs and cybersecurity risk and monitors prevention, detection, mitigation, and remediation efforts through regular communication and reporting from experienced cybersecurity professionals in the information security team, supplemented by technological tools and software. We continuously monitor cybersecurity threats and assess the robustness of our mitigation and prevention measures through routine internal and independent audits, threat simulations, vulnerability and penetration testing, and employee cybersecurity training. Our cybersecurity program is designed to be aligned with applicable industry standards, and we continue to invest in capabilities to protect all information assets in our possession.

companyName: CACI INTERNATIONAL INC /DE/

ticker: CACI


text: Oversee Third Party Risk Because we are aware of the potentially material risks from cybersecurity threats associated with third-party service providers, Cytokinetics implements processes to oversee and manage these risks. Depending on the nature of the services provided and the identity of the service provider, we may conduct security assessments of the provider before engagement and may monitor their compliance with our cybersecurity policies after engagement. The monitoring includes periodic assessments by our Chief Information Security Officer ("CISO") and on an ongoing basis by our security specialists. This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.

companyName: CYTOKINETICS INC

ticker: CYTK


text: As part of the Getty Images cybersecurity program, cross-functional teams throughout the Company address cybersecurity threats and respond to cybersecurity incidents. Through ongoing communications with these teams, the CTO and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents and escalate such threats and incidents as appropriate through the processes described in more detail below.

companyName: Getty Images Holdings, Inc.

ticker: GETY


text: Our Board of Directors, primarily through the Audit Committee, oversees our enterprise risk management program, including cybersecurity risks. The enterprise risk management program is utilized in making decisions with respect to our Company's priorities, resource allocation, and oversight structures. Our CIDO and/or Director of Information Security and Compliance deliver updates on the Cybersecurity Program to our Board of Directors semi-annually, including with respect to significant projects and initiatives. These updates consist of a report to the full Board of Directors and to the Audit Committee, and cover a wide range of topics, including evolving regulations and standards, vulnerability assessments, mitigation strategies, third-party and independent reviews, the evolving threat environment, technological and industry trends, and information security considerations arising with respect to our Company's peers and other third parties. Our CIDO and/or Director of Information Security and Compliance will also provide reports of material cybersecurity incidents or other relevant developments to our Board of Directors and Audit Committee as and when needed. Furthermore, our CIDO and/or Director of Information Security and Compliance provide periodic updates to our senior management regarding cybersecurity risks, as well as interim updates during regular meetings with our leadership team.

companyName: ROGERS CORP

ticker: ROG


text: To provide for the availability of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and to protect against, detect, and respond to cybersecurity incidents, we:

companyName: SENSIENT TECHNOLOGIES CORP

ticker: SXT


text: We, like other companies in our industry, face a number of risks from cybersecurity threats in connection with our business. Although such risks have not materially affected, and we do not believe they are reasonably likely to materially affect, us, including our business strategy, results of operations or financial condition, to date, we have, from time to time, experienced threats to and security incidents related to our data and systems. For more information about the risks from cybersecurity threats we face, please see Item 1A- Risk Factors.

companyName: Cabaletta Bio, Inc.

ticker: CABA


text: The SVP, IS, oversees processes for the regular monitoring of our information systems, including potential vulnerabilities. In the event of a cybersecurity incident, the IT organization and designated members of executive management follow an established Cybersecurity Incident Response Plan. This plan includes immediate actions to contain the threat, mitigate the impact and assess materiality, and requires retrospective review and identification of corrective actions to reduce future risk.

companyName: Xenon Pharmaceuticals Inc.

ticker: XENE


text: As part of our broader risk management system and processes, we maintain procedures for identifying, assessing, and managing material risks from cybersecurity threats that is designed to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: Lakeside Holding Ltd

ticker: LSH


text: Our board of directors, as a whole and at the Audit Committee level, has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. Our Audit Committee, which is comprised solely of independent directors, has been designated by our Board to oversee cybersecurity risks. The Audit Committee receives biannual updates on cybersecurity and information technology matters and related risk exposures from our Chief Operating Officer as well as other members of the senior leadership team. The Board also receives updates from management and the Audit Committee on cybersecurity risks on at least an annual basis.

companyName: Viridian Therapeutics, Inc.\DE

ticker: VRDN


text: In the ordinary course of our business, we collect, use, store, and transmit digitally large amounts of confidential, sensitive, proprietary, personal, and health-related information. The secure maintenance of this information and our information technology systems is important to our operations and business strategy. To this end, we have implemented processes designed to assess, identify, and manage risks arising from internal and external cybersecurity threats and vulnerabilities from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein. These processes are managed and monitored by a third-party information technology team, which reports to our Senior Vice President of Human Resources and Administration, and includes mechanisms, controls, technologies, systems, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the data while also maintaining a stable information technology environment. For example, we conduct penetration and vulnerability testing, data recovery testing, security audits, and ongoing risk assessments, including due diligence on and audits of our key technology vendors. We have an incident response plan designed to mitigate and remediate identified cybersecurity incidents at both Assertio and our customers and vendors and escalate certain incidents to management and, as appropriate, the Audit Committee. We also conduct periodic employee trainings on cyber and information security, among other topics. As needed, we consult with outside advisors and experts to assist with assessing, identifying, and managing cybersecurity risks in order to anticipate future threats and trends, and their impact on the Company's risk environment. Cybersecurity risks and threats are integrated into our enterprise risk management ("ERM") program, which establishes a risk management framework that seeks to identify and assess risks that could materially impact our business and operations.

companyName: Assertio Holdings, Inc.

ticker: ASRT


text: The Sponsor conducts due diligence on the Experts and all third-party service providers both at the beginning of any contractual relationship and on an ongoing, periodic basis. The Sponsor reviews a selection of all of its service providers on an annual basis, with specific emphasis on any service providers deemed to be high risk and utilizes external compliance partners to assist with this review. As part of this review, the Sponsor tracks any identified deficiencies and requires that its third-party service providers have in place appropriate technical and organizational security measures and security-control principles based on recognized cybersecurity standards. The Sponsor also obtains contractual assurances from third-party service providers relating to their security responsibilities, controls, reporting, and roles and responsibilities as it pertains to cybersecurity incident response policies and notification requirements.

companyName: Bitwise 10 Crypto Index ETF

ticker: BITW


text: The Operator, Diversified, is responsible for the oversight and overall management of the Underlying Properties. The Trust also relies on Diversified's Enterprise Risk Management ( ERM) framework for cybersecurity risk management and strategy relating to the operation of the Underlying Properties. Key aspects of Diversified's cybersecurity risk management, strategy and governance are summarized below. As of December 31, 2023, cybersecurity risks have not materially affected the business of the Underlying Properties or the Trust's results of operations or financial condition.

companyName: CHESAPEAKE GRANITE WASH TRUST

ticker: CHKR


text: Risk Management & Strategy Cybersecurity is a critical component of risk management. We rely on information technology and any failure, inadequacy, interruption or security lapse of such technology, including any cybersecurity incidents, could harm our ability to operate our business effectively.

companyName: MASIMO CORP

ticker: MASI


text: Managing Material Risks & Overall Risk Management We have a cross-departmental approach to addressing cybersecurity risk, including input from our employees, senior management, and Audit Committee of our Board of Directors (the " Board "). The Company devotes significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats promptly and effectively.

companyName: Planet 13 Holdings Inc.

ticker: PLNH


text: Training, education and awareness-building are mechanisms Matson uses to help embed a strong culture of cyber and information security within its workplace. The Company's long-term aim is to have a workforce with high-functioning knowledge of cybersecurity. In furtherance of this aim, the Company conducts training annually for employees that addresses cyber and information security, and holds additional training typically at least three times per year for specific topics such as data and email security. Furthermore, Matson requires enhanced training for employees with access to particularly sensitive information. The Company also has specific escalation processes and resources in place for employees to raise a concern should they notice anything suspicious.

companyName: Matson, Inc.

ticker: MATX


text: The Chief Risk Officer manages a team that assesses day-to-day cybersecurity. We actively maintain an Incident Response Plan, and in the event of a cybersecurity breach or incident, the Chief Risk Officer leads our response and initial risk assessment to mitigate impact and initiate any recovery process. Following identification of a cybersecurity breach or incident, incidents of medium or high severity level are elevated to an Incident Response Team. In addition to leading the response to such incidents, the Incident Response Team evaluates whether an incident is material and the associated public reporting implications. Incidents that are reviewed by the Incident Response Team are promptly elevated to the Risk Committee.

companyName: AMERISAFE INC

ticker: AMSF


text: For more information about the cybersecurity risks and other information technology and data privacy risks we face, see Item 1A. Risk Factors and the subsection titled A breakdown of our information technology systems, or a cyberattack or information security breach could significantly compromise the confidentiality, integrity and availability of our information technology systems, network-connected control systems and/or our data, interrupt the operation of our business and/or affect our reputation.

companyName: HARROW, INC.

ticker: HROW


text: Management's Role in Cybersecurity Risk Management The Company's management, including the Company's CCO, manage the Company's cybersecurity program. The CCO of the Company oversees the Company's oversight function generally and relies on the Adviser's technology team to assist with assessing and managing material risks from cybersecurity threats. The CCO has been responsible for this oversight function as CCO of the Company for one year and has worked in the financial services industry for more than 30 years, during which time our CCO has gained expertise in assessing and managing risk applicable to the Company.

companyName: TriplePoint Venture Growth BDC Corp.

ticker: TPVG


text: We engaged and used the advice of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers have recommended installation of Check Point Firewall and ESET Protect Advanced cloud based anti-virus, as well as site periodic evaluations of the work stations and also engaged third party consultants to prepare policies and procedures to oversee and identify the risks from cybersecurity threats associated with our use of third-party service providers and we continue to monitor that all third-party software providers remain in of the date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation, and cause existing clients/customers to discontinue. As well as prevent us from attracting new clients/customers, and interfere with the progress of our clinical trials, or interfere with our efforts to pursue regulatory approvals for our product candidates, or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. For further information, see "Risk Factors- Our business and operations would suffer in the event of computer system failures, cyber-attacks or deficiencies in our cyber-security " in Item 1A of this Annual Report on Form 10-K. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.

companyName: ENvue Medical, Inc.

ticker: FEED


text: Our company recognizes the critical importance of cybersecurity in our digital operations and has established a risk management program to address both internal and external cybersecurity threats. This program, guided by industry frameworks like NIST CSF and overseen by experienced leadership teams, integrates advanced security tools and practices into our broader enterprise risk management system, actively involving our Executive team and Board of Directors (the "Board") in its oversight. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use NIST CSF and similar frameworks as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.

companyName: BED BATH & BEYOND, INC.

ticker: BBBY


text: We engage in annual corporate-wide internal and external facing penetration tests, employing a battery of hacking tools to map out our assets and to assess vulnerabilities that could be exploited. In addition, we also extend such testing to newly acquired companies and assets as part of the integration process. This penetration testing is performed by a third party and is used to evaluate our current posture towards IT security threats and to make adjustments, as needed, to protect our systems. The results are reviewed with the executive leadership team and the Company's Board of Directors.

companyName: HELIOS TECHNOLOGIES, INC.

ticker: HLIO


text: The Company has implemented the Committee of Sponsoring Organizations ("COSO") Enterprise Risk Management ("ERM") Framework, which outlines the process by which an organization can view any risk by way of governance and culture, integration into strategy, risk assessments, reviewing capabilities and practices, and monitoring and reporting. This process would apply to the cybersecurity risk as it would any of the other enterprise risks. We follow the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF") with layered security controls to help identify, protect against, detect, respond to, and recover from cyber-attacks. To safeguard our information assets, we have put various procedures and technologies in place. For example, our Cybersecurity Incident Response Plan clearly defines roles and responsibilities for the investigation of and response to information security incidents to minimize disruption of critical computing services and operations and prevent the loss or theft of sensitive or mission-critical information. Our plan covers various cyber incidents like ransomware attacks, cyber-intrusions, data loss, denial of service, insider threats, malware attacks, and others. In a material cybersecurity incident, our D&T team, inclusive of our Chief Information Officer and VP of Cybersecurity and Infrastructure Support, address the threat via established escalation procedures, roles, responsibilities, and communication. Any cybersecurity incident that is declared as a crisis would follow our global Incident and Crisis Response and Management Procedure, which includes escalation to the West Leadership Team and Board of Directors, as deemed necessary pending the materiality of the incident. We have not encountered cybersecurity challenges that have materially impacted our operations or financial condition. In addition, we retain an external cybersecurity consultant to assist with a cybersecurity event as needed and maintain appropriate cybersecurity liability insurance.

companyName: WEST PHARMACEUTICAL SERVICES INC

ticker: WST


text: Training and compliance - Our employees are a key line of defense against cybersecurity threats and malicious actors. In addition to our IT Policies, Luxfer has a comprehensive cybersecurity training and awareness program to educate employees on how to recognize cybersecurity threats, prevent cyber-related incidents, and how to report a potential threat or breach. Our online compliance training program is mandatory for all employees worldwide, and includes cybersecurity awareness and IT security trainings, along with other compliance and governance related topics. Within each training module, employees are required to review a Company IT policy applicable to the topic of the training, and attest that they have read, understood, and agree to comply with the Policy.

companyName: LUXFER HOLDINGS PLC

ticker: LXFR


text: Incident Response Plans Visa's global cybersecurity incident response team provides monitoring of Visa systems and digital assets from three cyber fusion centers in the U.S., United Kingdom, and Singapore. In addition, Visa's threat intelligence and research teams monitor commercial and government intelligence sources for new and emerging threats. Our cybersecurity awareness team regularly publishes and shares information with Visa employees on emerging threats, such as deepfake and GenAI-powered social engineering schemes.

companyName: VISA INC.

ticker: V


text: The sophistication of cybersecurity threats, including through the use of artificial intelligence, continues to increase, and the controls and preventative actions we take to reduce the risk of cybersecurity incidents and protect our systems, including the regular testing of our cybersecurity incident response plan, may become insufficient. In addition, new technology that could result in greater operational efficiency such as our use of artificial intelligence, fleet electrification, and autonomous vehicles may further expose our operations and computer systems to the risk of cybersecurity incidents. Newmont did not identify any cybersecurity incidents during the year ended December 31, 2023 that have materially affected or are reasonably likely to materially affect Newmont's business strategy, results of operations, or financial condition.

companyName: NEWMONT Corp /DE/

ticker: NEM


text: We have implemented protocols to protect against cyber threats and ensure the containment and security of sensitive business data, including ongoing security reviews of critical systems, continuous monitoring of event data, and employee training programs, which processes are aligned with our overall business and operational goals and strategies. Our risk assessment occurs on an ongoing basis and covers identification of risks that could act against the company's objectives as well as specific risks related to a compromise to the security of data.

companyName: ACTELIS NETWORKS INC

ticker: ASNS


text: Cybersecurity Risk Management Strategy Diamondback provides us with personnel and general and administrative services pursuant to the services and secondment agreement, including the personnel and infrastructure that underlie our cybersecurity risk management program. In connection therewith, Diamondback has implemented and invested in, and will continue to implement and invest in, controls, procedures and protections (including internal and external personnel) that are designed to protect Diamondback's systems, identify and remediate on a regular basis vulnerabilities in Diamondback's systems and related infrastructure and monitor and mitigate the risk of data loss and other cybersecurity threats. Diamondback has also engaged third-party consultants to conduct penetration testing and risk assessments. Diamondback's cybersecurity program is informed by the National Institute of Standards and Technology ("NIST") Cybersecurity Framework and measured by the Maturity and Risk Assessment Ratings associated with the NIST Cybersecurity Framework and the Capability Maturity Model Integration.

companyName: VNOM Sub, Inc.


text: As of the date of this Form 10-K, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this Form 10-K. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factor beginning on page 10 of the section entitled "Item 1A. Risk Factors" of this annual report.

companyName: Inuvo, Inc.

ticker: INUV


text: Our board of directors has overall oversight responsibility for our risk management and is charged with oversight of our cybersecurity risk management program. The board is responsible for ensuring that management has policies and processes in place designed to identify, monitor, assess and respond to cybersecurity, data privacy and other information technology risks to which the Company is exposed and implement processes and programs to manage cybersecurity risks and mitigate cybersecurity threats and incidents.

companyName: PRECIGEN, INC.

ticker: PGEN


text: Our cybersecurity risk management program includes a Cyber Security Incident Response Plan ("CSIRP"). Our CSIRP supports the Company in identifying, containing, and tracking cybersecurity incidents experienced by us or our third-party service providers or suppliers. The CSIRP was established to minimize the impact of cybersecurity incidents on our networks, IT systems, users and business processes, and to ensure the timely and accurate reporting of material cybersecurity incidents, should they occur. The execution of our CSIRP is led by our Chief Information Officer and Head of Business Services ("CIO"), with support from a designated IT Incident Response Manager leading an Incident Response Team consisting of subject matter experts, as well as our Executive Response Team when appropriate. In the event of an incident, these individuals work together to assess its severity, notify and brief the appropriate team members, escalate to our Board of Directors as needed, and implement containment procedures. The Company also conducts tabletop exercises to enhance incident response preparedness and engages third parties, including consultants and other professionals, on an as-needed basis to assess and support our cybersecurity practices and procedures.

companyName: HAIN CELESTIAL GROUP INC

ticker: HAIN


text: The CISO informs our management leadership team on security matters and fosters a strong partnership with our corporate legal team to ensure compliance with legal, regulatory, privacy, and contractual security requirements.

companyName: RALPH LAUREN CORP

ticker: RL


text: • Technical Safeguards: We have implemented technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence, as well as outside audits and certifications. The Information Security and Privacy team also manages and carries out logging, and vulnerability and application scanning, to support the identification of cyber risks. • Incident Response and Recovery Planning: We maintain comprehensive incident response, business continuity, and disaster recovery plans designed to guide our response to cybersecurity incidents. We also conduct regular tabletop exercises to test these plans and ensure personnel are familiar with their roles in a response scenario. • Third-Party Risk Management (TPRM): We maintain a comprehensive, risk-based approach to identifying and overseeing material cybersecurity threats presented by third parties, including vendors, service providers, and other external users of our systems, as well as the systems of third parties that could adversely impact our business in the event of a material cybersecurity incident affecting those third-party systems, including any outside auditors or consultants who advise on our cybersecurity systems. • Education and Awareness: We provide regular, mandatory training for all levels of employees regarding cybersecurity threats to equip our employees with effective tools to address cybersecurity threats, and to communicate our evolving information security policies, standards, processes, and practices.

companyName: Live Nation Entertainment, Inc.

ticker: LYV


text: We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our financial results and business operations. See "Item 1A. Risk Factors – Risks Related to Business Continuity".

companyName: Phillips Edison & Company, Inc.

ticker: PECO


text: While the Corporate Governance, Healthcare Compliance Oversight, and Nominating committee oversees our cybersecurity risk management, our management also plays an integral role in cybersecurity oversight. Our management is responsible for day-to-day risk management processes. This includes periodic updates from the Executive Director of Information Technology who has over 24 years of work experience in the life science industry, and holds an undergraduate degree in Industrial Technology. The Executive Director of Information Technology is responsible for managing the daily measures of safeguarding the information technology infrastructure from potential threats and vulnerabilities, which includes monitoring the prevention, detection, mitigation, and remediation of cybersecurity incidents. Additionally, we have established a Crisis Management Team (CMT), which is a team of cross-functional participants who are prepared to review and assess any potential cybersecurity incidents. The CMT team is led by our CFO and our General Counsel who will advise the Corporate Governance, Healthcare Compliance Oversight, and Nominating committee of the Board accordingly in the event of any incident. We believe this division of responsibilities is the most effective approach for addressing our cybersecurity risks and that the Board leadership structure supports this approach.

companyName: RIGEL PHARMACEUTICALS INC

ticker: RIGL


text: Additionally, insider threats also remain a risk given our workforce diversification to include contractors, remote workers, part-time employees, and full-time employees. As referenced above, our third-party vendors and service providers and their supply chain connections remain a potential source of risk.

companyName: Universal Token

ticker: UTKN


text: The ISC also oversees day-to-day cybersecurity risk mitigation efforts, which include, but are not limited to monitoring systems for availability, performance, and security issues, periodic vulnerability scans, penetration testing performed at least annually by independent, reputable, third-party vendors, as well as evaluating any risk(s) associated with prospective third-party service providers who require access to sensitive customer data and implementing any additional controls to address significant risks identified. Furthermore, the ISC meets quarterly to discuss and analyze any relevant developments within the organization and industry relative to cybersecurity, reviews our internal policies and operational procedures relevant to cybersecurity at least annually, and promulgates updates when deemed necessary or advisable.

companyName: MARCHEX INC

ticker: MCHX


text: As part of our risk management process, we engage external auditors and consultants to assess our internal cybersecurity programs and compliance with applicable practices and standards. In addition, we engage outside providers to conduct annual penetration testing.

companyName: iTeos Therapeutics, Inc.


text: Chief Financial Officer is primarily responsible for assessing and managing material risks from cybersecurity threats on a day to day basis.

companyName: Shuttle Pharmaceuticals Holdings, Inc.

ticker: SHPH


text: Cybersecurity is an important part of our risk management processes and an area of focus for our Board of Directors and management. Although cybersecurity risk oversight continues to remain a top priority for the Board, the Audit Committee of our Board has primary oversight responsibility for the Company's cybersecurity and other technology risks. The Committee quarterly reviews and discusses with our CSO the Company's cybersecurity, privacy and data security programs, the status of projects to strengthen internal cybersecurity, results from third-party assessments, and any significant cybersecurity incidents, including recent incidents at other companies and the emerging threat landscape. The Committee also reviews with management the implementation and effectiveness of the Company's controls to monitor and mitigate cybersecurity risks.

companyName: Digital Media Solutions, Inc.


text: As part of our cybersecurity risk management process, we conduct "tabletop" exercises during which we simulate cybersecurity incidents to ensure that we are prepared to respond to such an incident and to highlight any areas for potential improvement in our cybersecurity incident preparedness. Third-party specialists may be involved in these exercises, which are conducted at both the technical level and senior management level. Historically, certain members of our Board of Directors have participated as well. Learnings from these exercises are incorporated into our Incident Response Plan. In addition, all team members are required to pass mandatory cybersecurity training courses on a regular basis and receive phishing simulations to provide "experiential learning" on how to recognize phishing attempts. Training is administered and tracked through online learning modules and is supplemented by regular Company communications on cybersecurity topics.

companyName: HIBBETT INC


text: Role of the Board of Directors The Board of Directors Audit Committee is responsible for the primary oversight of our information security and cybersecurity programs. The Audit Committee receives periodic reports from our CEO on cyber risks and threats, the status of initiatives to enhance our information security systems, assessments of our security posture, and insights into emerging threats. Additionally, the CEO reports to the Audit Committee on our Company-wide enterprise risk assessment, including evaluating cyber risks and threats. The Chair of the Audit Committee subsequently informs the full Board of these cybersecurity matters and key discussion topics and meeting materials and recommends updates to our information security policies and programs for Board approval.

companyName: IZEA Worldwide, Inc.

ticker: IZEA


text: We design and assess our program based on industry-standard frameworks, such as the National Institute of Standards and Technology Cybersecurity Framework ("NIST CSF"), SOC2, ISO 27000, and ISO 27018. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use these frameworks as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.

companyName: Amplitude, Inc.

ticker: AMPL


text: The Company's information security team utilizes the Financial Services Sector Coordinating Council for Critical Infrastructure Protection and Homeland Security version of the FFIEC Cybersecurity Assessment Tool to perform an annual assessment of our information security program. The assessment provides a repeatable and measurable process for institutions to measure their cybersecurity preparedness over time. The assessment incorporates cybersecurity-related principles from the FFIEC Information Technology Examination Handbook and regulatory guidance, and concepts from other industry standards, including the NIST Cybersecurity Framework.

companyName: RENASANT CORP

ticker: RNST


text: The Chief Information Officer provides regular updates to the Audit Committee and senior leaders regarding DTE Energy's management of cyber risks, including but not limited to the status of various training metrics to safeguard against phishing, malware, and other cyber threats. The Chief Information Officer also provides an annual cybersecurity update directly to the Board of Directors. If cybersecurity risks arise, the CSDC executes the incident response plan and communicates the appropriate details to executive management, the Board of Directors, or any related committees.

companyName: DTE Electric Co


text: Our management, represented by senior management, leads the cybersecurity risk assessment and mitigation processes, along with information technology management staff and our third-party business technology partner. Our third-party business technology partner has over 20 years of experience in cybersecurity and information technology. Continuous monitoring and routine meetings are conducted in order for the Company's information technology team and third-party business technology firm to update senior management regarding prevention, detection, mitigation and remediation of any cybersecurity threats or incidents.

companyName: Stabilis Solutions, Inc.

ticker: SLNG


text: Regular active engagement in strategic discussions by the Board and Audit Committee ensures that cybersecurity considerations are effectively integrated into our overall business strategy and align with Company objectives and demonstrates the Board's commitment to proactive cybersecurity oversight.

companyName: ALBANY INTERNATIONAL CORP /DE/

ticker: AIN


text: Our Board is responsible for understanding the primary risks to our business. The Board is responsible for reviewing periodically our and the Adviser's information technology security controls and related compliance matters, with management. Onex Corp.'s cybersecurity team reports to the Board at least annually on cybersecurity matters, including risks facing us and the Adviser and, as applicable, certain incidents. In addition to such periodic reports, the Board or a committee thereof may receive updates from management as to our and the Adviser's cybersecurity risks and Onex Corp.'s cybersecurity program developments.

companyName: Onex Direct Lending BDC Fund


text: We have no t experienced any cybersecurity incidents that have been determined to be material in the past, however, like other medical device companies, we have experienced cybersecurity incidents and may continue to experience them in the future. For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, Governance

companyName: PetVivo Holdings, Inc.

ticker: PETV


text: Material Impact of Risks from Cybersecurity Threats In the last three fiscal years, we have not experienced a material information security breach incident that has materially affected our business strategy, results of operations or financial conditions. The expenses we have incurred from information security breach incidents have been immaterial, and we are not aware of any cybersecurity risks that are reasonably likely to materially affect our business. However, future incidents could have a material impact on our business strategy, results of operations, or financial condition. For additional discussion of the risks posed by cybersecurity threats, see "Item 1A. Risk Factors—General Risk Factors—Security incidents or cyber-attacks could adversely affect our business by causing a disruption to our operations or the operations of the Advisor, the Dealer Manager, our transfer agent or any other party that provides us with services essential to our operations which could negatively impact our business, financial condition and operating results."

companyName: ARES INDUSTRIAL REAL ESTATE INCOME TRUST Inc.


text: The Fortrea Audit Committee has been authorized by the Board of Directors to oversee risks from cybersecurity threats. We have established a Risk Committee chaired by the CISO and chartered to determine and execute the processes for the identification, and management of material cybersecurity risks. The Risk Committee is comprised of cross-functional executive leaders who can assess materiality impact and are accountable for materiality disclosure. The CISO is responsible for reporting on the state of cybersecurity to the Audit Committee on a quarterly basis, including those risks deemed material by the Risk Committee.

companyName: Fortrea Holdings Inc.

ticker: FTRE


text: The company engages a third-party with extensive experience in cybersecurity to periodically perform a maturity analysis of CarMax's cybersecurity program as compared to peer companies. We conduct annual tabletop exercises, guided by a third-party cybersecurity firm, with key members of our cybersecurity and legal teams to assess the company's readiness and capabilities to respond to a cyber-attack. At least annually, we also conduct third-party penetration tests to enhance the security of our digital systems, and we employ network scanning to help us identify any newly developed vulnerabilities or threats. Our third-party intake process incorporates cybersecurity risk into the assessment of our third-party vendors when we engage a new vendor or experience a change in relationship with an existing vendor. Further, CarMax's cybersecurity team conducts periodic reviews of the company's third-party vendors depending on the vendor's risk profile as determined by the company's cybersecurity team.

companyName: CARMAX INC

ticker: KMX


text: Our cybersecurity program aims to provide a robust, dynamic and secure environment that protects the confidentiality, integrity, and availability of this data. Our cybersecurity program has a fully defined set of documentation that is aimed at identifying, assessing and responding to cybersecurity risks. Our implementation of various internal and external controls and processes, including appropriate internal risk assessment and internal policy implementation, incorporating a risk-based cyber security framework to monitor and mitigate security threats and other strategies to increase security for our information, facilities and infrastructure, is discussed below. In addition, we provide disclosure and discussion with respect to the following facets relating to the Company's cybersecurity program (a) our risk management processes and overall strategy for addressing cybersecurity threats and incidents within the context of our information systems (each as defined in Item 106 of Regulation S-K); (b) the potential impact of cybersecurity threats on our business strategy, results of operations, and financial condition; and (c) the respective roles of the Board in overseeing, and the Company's management in assessing and managing, cybersecurity threats and cybersecurity incidents.

companyName: Vertiv Holdings Co

ticker: VRT


text: The Board of Directors ("Board") has overall responsibility for risk oversight and oversees cybersecurity risk matters. The Board is responsible for reviewing, discussing with management and overseeing the Company's data privacy, information technology and security and cybersecurity risk exposures. On a regular basis, the CFO reports to the Board or the Audit Committee of the Board on information technology and cybersecurity matters, including key risks, the potential impact of those exposures on the Company's business, financial results, operations and reputation, the programs and steps implemented by management to monitor and mitigate exposures, the Company's information governance and cybersecurity policies and programs, and significant legal/regulatory developments that could materially impact the Company's cybersecurity risk exposure.

companyName: Perspective Therapeutics, Inc.

ticker: CATX


text: At the CISO's direction, the IT Security and Engineering Teams gather intel regarding the incident and take pre-planned steps to mitigate harm, address system weaknesses, and block ongoing threats. For example, our network engineers analyze network traffic for external attacks, search for signs of a firewall breach, and take action to block a suspected intruder's network traffic; our security analysts and engineers look for indications of an attack or suspicious activity by monitoring and reviewing the network activity of our business applications and the audit logs of our mission-critical servers; and our systems administrators examine system logs of our critical systems for any abnormal activity, confirm our mission-critical computers are up to date on all service packs and patches, and ensure backups have been created for our critical systems. The CISO reports the incident to our executive management team, Service Center Board, and SCC.

companyName: INTERNATIONAL BANCSHARES CORP

ticker: IBOC


text: Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. Should a cyber incident occur, we have in place the Insulet Cybersecurity Incident Response Procedure ("CIRP") and Crisis Management Plan, which are designed to enable us to respond efficiently to any incidents. Pursuant to the CIRP, cybersecurity incidents are reviewed and rated by our CISO and his team. A cybersecurity incident rated at predefined risk levels will be escalated to CTO, the Chief Compliance Officer, and the General Counsel and assessed for materiality and disclosure to the CEO and the Board. Our internal Disclosure Committee will review any planned public disclosures or filings. CIRP provides the organizational and operational structure to respond to incidents that may affect the confidentiality, integrity or availability of our information systems.

companyName: INSULET CORP

ticker: PODD


text: Our processes also address cybersecurity threat risks associated with our use of third-party service providers, including those in our supply chain or who have access to our customer and employee data or our systems. Third-party risks are included within our enterprise risk management assessment program, as well as our cybersecurity-specific risk identification program, both of which are discussed above. In addition, cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence. Additionally, we generally require those third parties that could introduce significant cybersecurity risk to us to agree by contract to manage their cybersecurity risks in specified ways, and to agree to be subject to cybersecurity audits.

companyName: JUNIPER NETWORKS INC


text: Our incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including the Chief Executive Officer, Chief Legal Officer, and Chief Financial Officer. The Chief Legal Officer works with the Company's cybersecurity incident response team to help the Company mitigate and remediate cybersecurity incidents of which he is notified. In addition, the Company's incident response process includes reporting material incidents to the audit committee of the board of directors.

companyName: Sweetgreen, Inc.

ticker: SG


text: Additional information on cybersecurity risks is discussed in Part I, Item 1A, "Risk Factors," under the heading "We rely significantly on information technology and cybersecurity, and any material failure, weakness, interruption or breach of security could prevent us from effectively operating our business."

companyName: KURA SUSHI USA, INC.

ticker: KRUS


text: 1. Defense-in-Depth: PyraMax Bank employs a multi-layered approach to cybersecurity, incorporating multiple defensive measures at various levels of its IT infrastructure. This includes firewalls, intrusion detection systems, endpoint protection, and data encryption.

companyName: 1895 Bancorp of Wisconsin, Inc. /MD/

ticker: BCOW


text: We evaluate our cybersecurity risk management processes and continue to integrate our procedures into our overall enterprise risk management program, which shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.

companyName: Caesars Entertainment, Inc.

ticker: CZR


text: To further advance cybersecurity awareness, we are developing solutions to mitigate the impact of third-party fraudulent cyber activity, including public facing portals for potential and current partners with capability to report suspected phishing.

companyName: LyondellBasell Industries N.V.

ticker: LYB


text: We continue to evaluate our cybersecurity control processes and procedures to address the evolving cybersecurity risks that we may face in an increasingly technically capable environment. We have implemented practices and intend to implement policies to educate and provide guidance to our personnel, including awareness programs and other related cybersecurity best practices. We plan to conduct technical risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We also plan to conduct programmatic risk assessments, including identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Following these risk assessments, we will evaluate: i) whether and how to implement, and maintain reasonable safeguards to minimize identified risks, ii) how to reasonably address any identified gaps in existing safeguards; and how to regularly monitor the effectiveness of our safeguards. As we are a small pre-revenue company, we currently outsource our information technology (IT) functions to a third party. Working with the outsourced IT firm, our president will manage the risk assessment and mitigation process. Third parties will play an important role in our cybersecurity program. We intend to engage third-party service providers to conduct evaluations of our security controls, including penetration testing and consulting on best practices. The third-party services include testing both the design and operational effectiveness of security controls. This dependence exposes us, along with others who use such service providers, to the impact of a cyber-attack on their service providers. It is possible for a cyber-attack at a third- party service provider to have a significant financial, operational, or reputational impact to us. To reduce the effective impact to us of a cyber-attack on a third-party service provider, we intend to monitor the risks associated with our service providers through periodic review of these providers' cybersecurity programs.

companyName: Modular Medical, Inc.

ticker: MODD


text: We engage in periodic assessment and testing of our policies, standards, processes and practices that are designed to address cybersecurity threats. These efforts include tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. We regularly engage third parties to assist with our assessments and testing. Where appropriate we adjust our cybersecurity policies, standards, processes and practices accordingly based on internal and external assessment and testing results.

companyName: Walmart Inc.

ticker: WMT


text: The Company has also established a cross-functional cybersecurity oversight committee led by our CISO serving as the chair and consisting of executive-level leaders, that is responsible for the Company's cybersecurity, disaster recovery, and business continuity programs. The Company's internal audit team also provides independent assurance on the functional components of the Company's cybersecurity program and reports the results of these audits in its quarterly reports to the Audit Committee.

companyName: CHOICE HOTELS INTERNATIONAL INC /DE

ticker: CHH


text: The Cybersecurity Committee receives reports and updates at committee meetings from our Chief Information Officer ("CIO") and other executives and cybersecurity specialists. Following each committee meeting, the chair of the Cybersecurity Committee briefs the full board of directors on matters covered at the prior Cybersecurity Committee meeting. The board also receives periodic briefings on emerging trends in order to enhance its literacy on cybersecurity issues. At least annually, the Cybersecurity Committee receives updates about the results of the Cybersecurity Program reviews. The Cybersecurity Committee participates with management periodically in "tabletop" exercises to evaluate our data breach incident response plan.

companyName: DXP ENTERPRISES INC

ticker: DXPE


text: We have also received inquiries from numerous state regulators related to the Data Incident. We are responding to these inquiries and cooperating fully with regulators. See Note 11 for further discussion.


text: We leverage the advice of third-party consultants and auditors to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers perform an audit of the datacenter from the top down annually, to ensure that controls are effective, still implemented to the fullest, and are meeting also have policies and procedures to oversee and identify the risks from cybersecurity threats associated with our use of third-party service providers. Our core third-party service provider in the technology space is audited yearly through our Sarbanes Oxley process, providing line-of sight to their internal operations along with their SSAE-16 certification.

companyName: PIONEER POWER SOLUTIONS, INC.

ticker: PPSI


text: In the event of an incident, the President would immediately notify our outside consultant to take those steps required for maximum recovery. The President would also apprise the Board of Directors of any cybersecurity incidents deemed to have a moderate or higher business impact, even if immaterial to us, and would timely notify the public of any material cybersecurity incident.

companyName: DIAMONDHEAD CASINO CORP

ticker: DHCC


text: As discussed in more detail under the heading "Governance," the Board's oversight of cybersecurity risk management is supported by the Audit Committee of the Board, or the Audit Committee, which regularly interacts with the Company's Head of Information Technology and other members of management, including members of management's Data Privacy and Security Committee.

companyName: Day One Biopharmaceuticals, Inc.

ticker: DAWN


text: Risk Management and Strategy Identifying, assessing, and managing material cybersecurity risks is an important function of our enterprise risk management program. Material cybersecurity risks from cybersecurity threats are managed across Medallion Financial Corp., the Bank, Medallion Capital, and third-party vendors and monitoring such risks and threats involves coordination between us as the parent company and our two main operating subsidiaries. We continue to integrate our cybersecurity programs into our enterprise risk management program, which is led by various senior representatives of the Company and overseen by the Audit Committee of the Company's Board of Directors.

companyName: MEDALLION FINANCIAL CORP

ticker: MFIN


text: We or our third-party manager currently maintain cybersecurity insurance policies that provide coverage for security incidents. Although the risks we face from cybersecurity threats are many and change daily, we have not experienced any cybersecurity incidents that have materially affected our operations, strategy, financial positions or operations. In addition, as of the date of this Annual Report, we are not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to affect us, including our business strategy, results of operations and financial condition.

companyName: PROCACCIANTI HOTEL REIT, INC.

ticker: PRXA


text: Key has implemented cybersecurity, privacy, and fraud education and awareness programs across the enterprise to educate teammates on how to identify and report cybersecurity and privacy concerns. Employees and contractors with access to assets or data owned or maintained by Key receive mandatory enterprise-wide cybersecurity, privacy, and fraud training on an annual basis. In addition, our management team from time to time participates in cybersecurity tabletop exercises that simulate cybersecurity incidents. These exercises are intended to test our response to potential incidents and assess the procedures outlined in our incident response playbooks.

companyName: KEYCORP /NEW/

ticker: KEY


text: We also maintain a cyber incident response plan ("IRP") with the objective of (1) providing a structured and systematic incident response process for cybersecurity threats that affect us, (2) timely and effectively identifying, resolving and communicating cybersecurity incidents, and (3) managing internal and external communications and reporting.

companyName: GRIFFON CORP

ticker: GFF


text: Our Audit Committee of the Board of Directors is responsible for oversight of our risk assessment, risk management, disaster recovery procedures and cybersecurity risks. Periodically during each year, the Audit Committee receives an overview from our cybersecurity risk management team, comprised of our Chief Financial Officer, our Chief Accounting Officer and our Director of IT, of our cybersecurity threat risk management and strategy processes, including potential impact on the Company, the efforts of management to manage the risks that are identified and our disaster recovery preparations. Members of the Board of Directors engage in discussions with management on cybersecurity-related news events and discuss certain updates to our cybersecurity risk management and strategy programs.

companyName: Independence Contract Drilling, Inc.


text: Our board of directors, in considering cybersecurity risk as part of its risk oversight function, oversees management's implementation of our cybersecurity risk management program. Our board of directors receives reports from management on our cybersecurity risks. In addition, management updates our board of directors, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.

companyName: AMERIGUARD SECURITY SERVICES, INC.

ticker: AGSS


text: Material Cybersecurity Threat Risks The Company has not experienced any material losses relating to cybersecurity threats or incidents for the year ended June 30, 2024. We are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition. Although we have a robust cybersecurity program that is designed to assess, identify, and manage material risks from cybersecurity threats, we cannot provide absolute surety that we have properly identified or mitigated all vulnerabilities or risks of incidents. The Company, and the third parties that the Company engages, are subject to constant and evolving threats of attack and cybersecurity incidents may be more difficult to detect for periods of time. A cybersecurity incident could harm our business strategy, results of operations, financial condition, reputation, and/or subject us to regulatory actions or litigation which may result in fines, judgments or indictments.

companyName: GREENE COUNTY BANCORP INC

ticker: GCBC


text: Our cybersecurity risk management and strategy processes are led by our global head of Information Technology who reports directly to our Chief Financial Officer. Our information technology and cybersecurity team has over 33 years of collective experience in information security and cybersecurity strategy, with various roles in significant organizations. Team members hold numerous degrees and certifications, including certifications as a Certified Information Security Manager, Certified Information Systems Security Professional, Certified Ethical Hacker, Certified Penetration Tester, among others.

companyName: ARTIVION, INC.

ticker: AORT


text: Enterprise Risk is primarily responsible for reporting risks from cybersecurity threats to executive leadership and our Enterprise Risk Management Committee (ERMC). The ERMC supports the efforts of the CRO in providing corporate-wide oversight of our firm's risk management efforts and provides a path for risk escalation. This committee monitors risk management activities, including cybersecurity matters, and reports periodically and more frequently as necessary, to our Board of Directors and Audit Committee. Cybersecurity risk management practices operate enterprise-wide, across T. Rowe Price legal entities, including Oak Hill Advisors (OHA). In addition, OHA has established an independent risk committee, which includes responsibilities for prompt escalation of key risks and incidents such as Cybersecurity to the T. Rowe Price CRO.

companyName: PRICE T ROWE GROUP INC

ticker: TROW


text: The Audit Committee of our Board is responsible for overseeing risk management strategies that are specific to our company, including reviewing management's assessment of the current and emerging risks and related mitigation strategies across financial and non-financial risks, including cybersecurity risks. Regular reports and updates on cybersecurity risks are made to senior management of BAM. Pursuant to the EISP, executive management has appointed a Chief Information Security Officer ("CISO"), who works closely with senior management, legal counsel and external counsel to develop and monitor our data protection, privacy and cybersecurity program and policies. The CISO provides periodic reports to the Audit Committee, which subsequently reports to the Board about data protection and cybersecurity risks and issues. The CISO has over 20 years' experience in cybersecurity oversight, holds a Bachelor's Degree in Computer Science and Economics from York University and holds a number of information security certifications, including: CISSP, CISM, CISA and CRISC.

companyName: Brookfield Asset Management Ltd.

ticker: BAM


text: security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test, or otherwise assist with aspects of our security controls;

companyName: Stereotaxis, Inc.

ticker: STXS


text: Our management team, including our Director of Information Technology, has a combined 35 years of risk management experience and is responsible for assessing and managing our material risks from cybersecurity threats. The management team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. The management team also has responsibility for approving budgets, helping prepare for cybersecurity incident responses, and approving cybersecurity processes. The experience of our management team encompasses leadership, development, and support of cybersecurity strategies, along with the implementation of policies and procedures. Furthermore, they possess a track record of proactively monitoring cybersecurity threats and promptly responding to and remediating cyber attacks. Their adeptness in executing security controls has consistently yielded clean audit observations, showcasing their effectiveness in safeguarding against potential risks.

companyName: CG Oncology, Inc.

ticker: CGON


text: Cybersecurity is assessed by IT Risk and approved by the CIO as a component of JFG's annual, enterprise-wide Risk Control Self Assessment ("RCSA") managed by JFG's Operational Risk Group. The RCSA process is independently verified by JFG's Internal Audit Department.

companyName: Senior Credit Investments, LLC


text: Cybersecurity Risk Management and Strategy Voya Financial maintains an information security program that seeks to comply with applicable regulatory requirements. The information security team, led by Voya Financial's Chief Information Security Officer ("CISO"), implements appropriate measures designed to safeguard sensitive information and protect our operations and systems against cyber threats. The information security team carries out continuous monitoring and evaluation of Voya Financial's technology and digital infrastructure with the goal of identifying and assessing threats and proactively mitigating potential risks. The CISO and the information security team provide regular updates to Voya Financial's senior management, as further described under Cybersecurity Governance below.

companyName: VOYA RETIREMENT INSURANCE & ANNUITY Co


text: Through these risk assessments, management seeks to determine the likelihood of, and potential damage that could result from, such risks, and the sufficiency of existing systems and safeguards in place to manage them. Our IT continually monitors our systems for any attempted unauthorized entries or breaches and reports this information to management on a regular basis. Information gathered from these processes enable our IT to make any necessary adjustments to our systems and address any identified gaps in existing safeguards.

companyName: APPLIED ENERGETICS, INC.

ticker: AERG


text: Cybersecurity is governed by our cross-functional apex body, the Management Security, Continuity and Privacy Forum ("MSCPF"), comprised of management representatives across all of our business units and enterprise functions such as Legal, Human Resource, Growth and Strategy, Compliance, Technology and Information Security. The MSCPF periodically reviews the strategy, policy, program effectiveness, standards development, cybersecurity risks, incident, and response preparedness.

companyName: ExlService Holdings, Inc.

ticker: EXLS


text: Our cybersecurity risk management program includes: • risk assessments designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment; • a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; • the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; • cybersecurity awareness training of our employees, incident response personnel, and senior management; and • a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and • a third-party risk management process for service providers, suppliers, and vendors.

companyName: Aligos Therapeutics, Inc.

ticker: ALGS


text: Board of Director's Cyber Oversight For cybersecurity oversight, the board of directors of our GP training program is designed to inform members of the current cyber threat tactics and provide relevant, periodic educational security technology information. The cybersecurity training program includes: • An annual presentation overview of our cyber controls and related systems for a comprehensive understanding of our cybersecurity protection and resilience; • Quarterly cybersecurity training on topics such as ransomware, phishing, impersonation, social engineering, third-party security risks, business email compromise, and artificial intelligence to reinforce general security knowledge; and • Monthly cybersecurity newsletter distribution for current threat tactics and general security awareness.

companyName: NGL Energy Partners LP

ticker: NGL


text: To manage our material risks from cybersecurity threats and to protect against, detect, and prepare to respond to cybersecurity incidents, we undertake the below listed activities: • Monitor emerging data protection laws and implement changes to our processes to comply; • Conduct periodic data handling and use requirement training for our employees; • Conduct annual cybersecurity management and incident training for employees involved in our systems and processes that handle sensitive data; and • Conduct regular phishing email simulations for all employees Our incident response plan coordinates the activities that we and our third-party cybersecurity providers take to prepare to respond and recover from cybersecurity incidents, which include processes to triage, assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal obligations.

companyName: National Healthcare Properties, Inc.

ticker: NHPAP


text: Our assessment and management of material risks from cybersecurity threats are integrated into the Company's overall risk management processes. For example, our Cybersecurity Risk Management Committee evaluates material risks from cybersecurity threats against our overall business objectives and reports to the audit committee of the board of directors, which evaluates our overall enterprise risk.

companyName: Vera Therapeutics, Inc.

ticker: VERA


text: The Company has a dedicated cybersecurity organization within its technology department that focuses on current and emerging cybersecurity matters. The Company's cybersecurity function is led by the Company's CISO, who reports to the Company's CIO. The Cybersecurity Leaders are actively involved in assessing and managing cybersecurity risks. They are responsible for implementing cybersecurity policies, programs, procedures, and strategies. The responsibilities and relevant experience of each of the Cybersecurity Leaders are listed below: • The CIO provides leadership for the Company's technology department. The CIO holds an undergraduate degree from Cornell and has served in various roles in information technology for over 20 years, including Vice President, Senior Director, Manager and Consultant. • The CISO is responsible for leading the Company's cybersecurity strategy and department while ensuring the protection of data and assets across the Company's facilities, airports, and aircraft. The CISO has served in various roles in cybersecurity for over 15 years. The CISO earned a Bachelor of Business Administration in Management Information Systems from The University of Oklahoma and holds a Certified Information Systems Security Professional certification. The CISO also participates in the Aviation Information Sharing and Analysis Center Board and is the Vice Chair of the Cybersecurity Council at Airlines for America.

companyName: SOUTHWEST AIRLINES CO

ticker: LUV


text: Management Oversight The controls and processes employed to assess, identify and manage material risks from cybersecurity threats are implemented and overseen by a team that includes our Chief Information Security Officer ("CISO"), who reports to our VP of Information Systems. The CISO is supported by a SOC team, an Incident Response Manager, a Governance Risk and Compliance Manager, and cybersecurity architects. These individuals and groups are responsible for the day-to-day management of our cybersecurity program, including the prevention, detection, investigation, response to, and recovery from cybersecurity threats and incidents, and are regularly engaged to help ensure our cybersecurity program functions effectively in the face of evolving cybersecurity threats. The individuals involved generally have significant experience in cybersecurity and related information technology, including responding to incidents and developing security policies, with our three most senior leaders having an average of 25 years of experience in cybersecurity. In addition to the day-to-day management of these risks, we hold a monthly meeting of an Information Risk Committee, which is comprised of representatives from our legal, human resources, compliance, and information technology departments. On a quarterly basis, we also hold a meeting of our Executive IT Steering Committee, which is comprised of members of the executive leadership, so that they can receive regular briefings on cybersecurity matters, including threats, events, and program enhancements.

companyName: Keenova Therapeutics plc


text: Key elements of the comprehensive Information Security Program include: • A mix of administrative and technical tools and controls appropriate to the size and complexity of the Bank to protect the confidentiality, integrity, and availability of critical systems and data, including the privacy of customer data, in compliance with applicable laws and regulations. • Risk assessments are conducted to: (a) identify reasonably foreseeable internal and external threats that could result in unauthorized disclosure, misuse, alteration, or destruction of critical Bank systems and data, (b) determine the likelihood and potential impact of the threats, and (c) determine the sufficiency of controls and mitigating factors to reduce the risks identified. • A detailed Cyber Incident Response Plan which includes engagement of a third-party that specializes in cybersecurity for financial institutions to assist in incident response and recovery and communications with the Board, regulators, law enforcement and Federal and State Government offices, as required. While the Bank has not experienced a business-impacting cyber incident to date, the Cyber Incident Response Plan is tested at least annually and updated as required so that personnel are prepared for an actual incident. • Security Awareness training to help employees understand their information protection and cybersecurity responsibilities, including targeted campaigns on common social engineering techniques utilized by threat actors. • A third-party risk management program to classify suppliers according to risk and identify those that require enhanced cyber due diligence. • Annual independent third-party penetration tests, vulnerability scans, assessments and audits of the Bank's Information Security Program elements.

companyName: BayFirst Financial Corp.

ticker: BAFN


text: We have developed and implemented several cybersecurity risk management measures intended to protect the confidentiality, integrity, and availability of our critical systems and information. We work to continuously refine, strengthen, and supplement these measures.

companyName: Smith Douglas Homes Corp.

ticker: SDHC


text: Further, our cybersecurity risk management program includes processes that address cybersecurity risks associated with our use of third-party services providers that have access to our information systems and/or employee, agent or agent client confidential information. For example, we perform certain due diligence before engaging third-party service providers and consider potential cybersecurity risks and exposures in our choice among providers. We also generally require our third-party service providers that could potentially introduce cybersecurity risks to our information systems or sensitive consumer personal information to contractually agree to maintain a cybersecurity risk management program aimed at mitigating those risks and be subject to external cybersecurity audits.

companyName: Compass, Inc.

ticker: COMP


text: The Company's Board of Directors is responsible for the oversight of management's efforts to address cybersecurity risks. The Board of Directors has designated the Audit Committee with the responsibility of overseeing and reporting to the Board on management's handling of cybersecurity risk management and on the adequacy and effectiveness of the Company's cybersecurity risk management strategy. Management also updates the Audit Committee and the Board on an on-going basis concerning any significant cybersecurity incidents or risk exposures that have come to management's attention during the conduct of their assessments, the steps management has taken to mitigate such exposures, and any changes to the processes of identifying, assessing, and monitoring cybersecurity threats.

companyName: EVI INDUSTRIES, INC.

ticker: EVI


text: Mr. Blattner has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and report any findings and recommendations, as appropriate, to the full Board of Directors for consideration. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with the designated member of the Board of Directors.

companyName: Dominari Holdings Inc.

ticker: DOMH


text: Our management, represented by our Chief Operating Officer, Catherine Hastings, leads our cybersecurity risk assessment and management processes and oversees their implementation and maintenance. Ms. Hastings is an experienced risk management professional, having previously served as our Chief Financial Officer and Treasurer from 2017 until March 2023, and as Vice President, internal audit of BioMed Realty Trust, Inc. (formerly NYSE: BMR) until December 2016, having joined BioMed Realty in 2009. Ms. Hastings currently oversees key functions for our development, asset management, human resources and information technology functions, including cybersecurity risk oversight and the development and enhancement of internal controls designed to prevent, detect, address, and mitigate the risk of cyber incidents. Since 2016, we have retained a third-party information technology specialist to develop and maintain our information technology infrastructure and network, who has extensive experience in the development of business processes, system infrastructure design and cybersecurity for large-scale, institutional real estate companies.

companyName: INNOVATIVE INDUSTRIAL PROPERTIES INC

ticker: IIPR


text: The Company routinely leads training exercises, at least annually, for its employees to reinforce the risk from common tactics and scams like email phishing campaigns, as well as more sophisticated descendants (i.e. spear phishing and smishing) to defend against potential business email and network compromise.

companyName: NATHANS FAMOUS, INC.

ticker: NATH


text: Our Chief Information Officer, who reports to our Chief Financial Officer, leads the operational oversight of company-wide cybersecurity strategy, policy, standards, and processes and works across relevant departments to assess and help prepare us and our employees to address cybersecurity risks. Specific cybersecurity related responsibilities include overseeing our processes and strategies for the detection, mitigation, and remediation of cybersecurity incidents. Our Chief Information Officer has extensive experience assessing and managing cybersecurity and risk programs having served in relevant positions of increasing responsibility for over 25 years at several private and public companies.

companyName: Replimune Group, Inc.

ticker: REPL


text: Our board of directors oversees our risk management strategy with respect to cybersecurity threats. The board, through its audit committee, holds regular meetings, at least quarterly, to discuss issues including our cybersecurity threats. The meetings involve presentations and reports from our executive leadership and security provider, concerning our cybersecurity risk management activities, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards. Management also notifies the audit committee of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as appropriate.

companyName: Edesa Biotech, Inc.

ticker: EDSA


text: As part of the risk management oversight (including oversight of cyber risks) of the Company's Board, the Board will regularly interact with, and receive reports from, management of the Company, the Operating Manager, Apollo, and other service providers. The Company's Board is expected to receive presentations and reports on cybersecurity risks from AGM's CSO or CISO, at least annually, addressing a wide range of topics including recent developments, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to Apollo's peers and third parties. Additionally, Apollo and other service providers are expected to periodically report to management as it relates to the Company's cybersecurity practices.

companyName: Apollo Asset Backed Credit Co LLC


text: We maintain a regularly revised Cybersecurity Incident Response Plan and Cybersecurity Incident Notification Policy, which provide protocols for evaluating and responding to cybersecurity incidents, including escalation of information to senior leadership, including the Board of Directors, as appropriate, and meeting external reporting obligations. We periodically perform tabletop exercises where we perform walkthroughs of cybersecurity incident situations to test our response plans. To date, we have not experienced any cybersecurity incidents that materially affected, or are likely to materially affect, our business strategy, results of operations, or financial condition, but future incidents cannot be predicted. See "Part 1, Item 1A. Risk Factors" for additional information regarding cybersecurity-related risks that could impact our business.

companyName: Performance Food Group Co

ticker: PFGC


text: The Board of Directors has established oversight mechanisms designed to ensure effective governance in managing risks associated with cybersecurity threats.

companyName: Allegion plc

ticker: ALLE


text: Our full Board is responsible for oversight of risks from cybersecurity threats, including our cybersecurity risk management program. In carrying out its oversight responsibilities, the Board receives regular cybersecurity program updates and quarterly scorecard assessments from our Chief Information Officer, which cover topics related to information security, privacy and cyber risks, and our risk management processes, including the status of any recent cybersecurity events meeting specified criteria, the emerging threat landscape, and the status of capital investments in our information security infrastructure.

companyName: TopBuild Corp

ticker: BLD


text: Cybersecurity incidents are managed through the Plan, and other appropriate response policies, which provide direction to management allowing for the timely transfer of information throughout the organization. Our policy requires material incidents to be reported within 36 hours after an incident is determined to be material with the materiality determination to be completed without unreasonable delay. The CMT has developed a plan to facilitate making timely determinations as to whether and when incidents should be disclosed. If a material incident occurs, the Company will describe in detail the material aspects and nature, scope and timing of the incident, along with the impact to its financial condition and results of operations via the timely filing of Form 8-K.

companyName: FIRST CAPITAL INC

ticker: FCAP


text: Franklin Templeton and the Advisor recognize that threat actors frequently target employees to gain unauthorized access to information systems. Therefore, a key element of their prevention efforts is employee training on their data privacy and cybersecurity procedures. For example, all new hires of Franklin Templeton and the Advisor receive mandatory privacy and information security training. In addition, current employees of the Advisor must complete mandatory annual cybersecurity and data trainings, which are supplemented by regular phishing and other cyber-related testing and trainings that the Advisor conducts throughout the year.

companyName: Franklin BSP Real Estate Debt BDC


text: Management's Role in Assessing and Managing Material Risks from Cybersecurity Threats Our Information Technology and Security team is responsible for the management, maintenance, monitoring and response of our critical internal digital assets. This team is led by our Senior Director of Global Information Technology and Security, who has 25 years of cyber and Enterprise IT management experience. This position monitors current cyber risk trends, engages with third party cyber security experts, and meets with the Infrastructure and Security team regularly to stay apprised of internal cyber risks.

companyName: AMARIN CORP PLC\UK

ticker: AMRN


text: The CIDO regularly updates the Audit Committee and the full Board of Directors on the Corporation's cybersecurity risk management program, material cybersecurity risks, and mitigation strategies. Management provides the Audit Committee with quarterly cybersecurity reports that cover, among other topics, third-party assessments of the Corporation's cybersecurity risk management program, developments in cybersecurity, and updates to the Company's cybersecurity risk management program and mitigation strategies.

companyName: HNI CORP

ticker: HNI


text: The CTO and CISO meet regularly with the Cybersecurity Committee to review the Company's management of information security risks, and the Cybersecurity Committee evaluates the adequacy of the Company's IT security program, compliance and controls with our CTO. In addition to scheduled meetings, the CTO, Cybersecurity Committee, and CEO maintain a regular dialogue regarding emerging or potential cybersecurity risks, which may include input from our third party vendors and other external sources. Together, they receive updates on significant developments in the cybersecurity domain from the CTO, as needed and quarterly. These updates, as well as other cybersecurity matters, are provided to the Company's Board by the CTO to support the Board's proactive and responsive oversight of cybersecurity related risks. The Board and executive management meet regularly to review cybersecurity risks and developments as part of our enterprise risk management framework.

companyName: IBEX Ltd

ticker: IBEX


text: Cyber criminals are becoming more sophisticated and effective every day. All companies utilizing technology are subject to threats or attempts of cybersecurity attacks. Maintaining data privacy and cybersecurity to protect our employees, customers, and business is an integral aspect of our operations. Our approach to data privacy and cybersecurity is defined by our commitment to preserving the trust our employees and customers place in us and focuses on driving continuous improvement as the threat landscape evolves.

companyName: Sensata Technologies Holding plc

ticker: ST