text: Our board of directors has oversight of our strategic and business risk management and has delegated cybersecurity risk management oversight to the Chief Financial Officer and our cybersecurity incident response team. Our board of directors are responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which we are exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. Management is responsible for identifying, assessing, and managing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, maintaining cybersecurity policies and procedures, and providing regular reports to our board of directors. The company will continue to commit to maintaining high standards of cybersecurity practices to protect the interests of our customers, shareholders, and other stakeholders. We will continuously monitor the latest developments in the field of cybersecurity and update our cybersecurity and risk management framework as needed.


text: The Company recognizes the importance of cybersecurity in safeguarding its information systems and data. Our cybersecurity measures primarily rely on standard security protocols provided by Microsoft Outlook and OneDrive, which include encryption, multi-factor authentication, and access controls to protect against unauthorized access and data breaches.

companyName: Coeptis Therapeutics Holdings, Inc.

ticker: COEP

secItem: Item 1C


text: Given the evolving nature of cybersecurity threats, the Company monitors its systems for potential vulnerabilities and relies on third-party security updates and patches to mitigate risks. While we believe our current measures are appropriate for our operations, we acknowledge that no security system is entirely immune from potential threats, including phishing attacks, malware, ransomware, and unauthorized access.


text: The Company's executive management is responsible for overseeing cybersecurity risks and ensuring compliance with our security practices. At this time, the Company does not have a dedicated cybersecurity team but relies on its IT service providers and Microsoft's security framework for system protection and incident response.


text: Despite these measures, the Company may be vulnerable to cybersecurity incidents that could disrupt operations, compromise sensitive data, or result in financial or reputational harm. Any material cybersecurity incident would be assessed and disclosed as necessary.


text: Leet Technology Inc. recognized the importance of implementing and maintaining strong cybersecurity protocols to safeguard our information systems. This commitment is aimed at ensuring the confidentiality, integrity, and accessibility of our data.

companyName: Leet Technology Inc.


text: We have engaged a range of external experts including consultants and cybersecurity assessors, who assist us in evaluating and testing our cybersecurity systems and processes. These engagements are intended to give us access to specialized knowledge and to inform our cybersecurity processes including industry-standard control frameworks and applicable regulations, laws, and standards. Prior to entering into any agreements with third-party providers, comprehensive security assessments will be conducted, accompanied by continuous monitoring to verify adherence to our cybersecurity criteria. This involves quarterly evaluations conducted by our management team and ongoing assessments by our team. Such measures are planned to mitigate the threats of data breaches or other security breaches stemming from third-party service provider. We have not encountered cybersecurity issues that have significantly impacted our operational performance or financial status.


text: Our Board of Directors fully aware of the importance of cybersecurity. Furthermore, Board of Directors responsible for supervising data privacy and cybersecurity risks. They routinely examine the Company's cybersecurity initiatives with management, assessing the sufficiency of controls and security measures for our information technology systems.


text: We use, store and process data for and about our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2025.

companyName: Rapid Line Inc.

ticker: RPDL


text: Under the oversight of the Board of Directors (since we do not currently have an Audit Committee), we intend to implement and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes would be integrated into our overall risk management processes. We intend to implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify and address cybersecurity risks. In support of this approach, it is expected that we would have a third-party security consultant implement processes to assess, identify and manage security risks to our company, including in the pillar areas of security and compliance, application security, infrastructure security and data privacy. This process, once implemented, would include regular compliance and critical system access reviews. In addition, we intend to conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office and Google enterprise to provide protection against cybersecurity threats.


text: Further, we intend to put processes in place that would evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that would have access to our data, including a review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: Part of our intended program would be ongoing evaluation and enhancement of our systems, controls and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition.


text: We have established policies and procedures for assessing, identifying, and managing material risk from cybersecurity threats. We monitor cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that we use through third party providers that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: Empery Digital Inc.

ticker: EMPD


text: We conducted a NIST risk assessment and performed as needed updates to our risks to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We engage a managed service provider ("MSP") and other third parties in connection with our cybersecurity and information technology risk assessment processes and our MSP also assists us with managing and monitoring our network and local computer systems. These service providers assist us in designing and implementing our cybersecurity policies and procedures, as well as monitoring and testing our safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through communications.


text: As of December 31, 2024, and through the date of the filing of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this Annual report on Form 10-K.


text: One of the key responsibilities of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face.


text: Our Executive Vice-President and Chief Financial Officer ("CFO") is primarily responsible for assessing and managing our material risks from cybersecurity threats. In this regard, our CFO has assistance from service providers, other consultants and third parties. Our CFO has served as an executive officer for three years and prior to this was an audit and advisory partner at a public accounting firm overseeing financial statement audits of public and private companies. Audit procedures performed for his clients included evaluating internal controls and risk assessment evaluations over information technology and cybersecurity policies.


text: Our CFO oversees our cybersecurity policies and procedures, including those described in "Risk Management and Strategy" above. Under such policies and procedures, our CFO is responsible for reporting to our board of directors regarding any cybersecurity incident including the results of cybersecurity risk assessments.


text: The Company is committed to transparency and robust risk management, therefore we prioritize the protection of our stakeholders' interests, including safeguarding sensitive information from cybersecurity threats. Our approach to cybersecurity risk management encompasses a comprehensive process of assessment, identification, and mitigation strategies. Initially, we conduct thorough assessments to identify potential vulnerabilities and threats within our systems and infrastructure. These assessments are followed by rigorous identification procedures and testing aimed at pinpointing material risks that could compromise the integrity of our operations or the confidentiality of our data. Once identified, we employ a multifaceted approach to managing these risks, which includes implementing cutting-edge technological solutions, enforcing stringent access controls, and providing ongoing training and awareness programs to our employees. Moreover, we maintain open lines of communication with relevant stakeholders, ensuring timely response and adaptation to emerging cyber threats.

companyName: KwikClick, Inc.

ticker: KWIK


text: Our information security program is designed to detect, respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our systems from cybersecurity threats, we use various security tools that help prevent, escalate, investigate, and recover from identified vulnerabilities and security incidents in a timely manner.

companyName: MAGELLAN COPPER & GOLD Corp

ticker: MAGE


text: We regularly assess risks from cybersecurity and technology threats and monitor our systems for potential vulnerabilities and exploit attempts. We use a widely adopted risk quantification model to identify, measure, and prioritize cybersecurity and technology risks and develop related security controls and safeguards. We take a risk-based approach to regular reviews and tests of our information security program and also leverage tabletop and other exercises to evaluate the effectiveness of our information security program and improve our security measures and planning.


text: In the last two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to eliminate all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident. For more information about these risks, please see Item 1A. Risk Factors " We rely on information technology systems which are subject to disruption, damage, failure and other risks."


text: Our board of directors is responsible for oversight and risk management in genera. Our board of directors receives periodic updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.


text: Our management team is responsible for assessing and managing the material risks from cybersecurity threats. Our management team members have expertise in information systems, compliance and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk. Our management team is informed of and monitors the prevention, detection, and mitigation of cybersecurity threats and incidents.


text: Risk Management and the ordinary course of our day-to-day business, we receive, process, use, store, and share digitally data, including user data as well as confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to our this end, we have implemented a Security Incident Response Plan ("SIRP") designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them. Our SIRP is managed and monitored by a dedicated security/information systems team and includes mechanisms, controls, technologies, systems, policies, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the systems and data residing in them.

companyName: WYTEC INTERNATIONAL INC

ticker: WYTC


text: Preparation —perform a risk assessment and identify sensitive assets. Our team includes an outside security/information systems team that provides managed services on a regular basis.


text: Identification —monitor information technology systems and detect deviations from normal operations and see if they represent actual security incidents. When an incident is discovered, collect additional evidence, establish its type and severity, and document the incident.


text: Containment —perform short-term containment, for example by isolating the network segment that is under attack; then focus on long-term containment, which involves temporary fixes to allow systems to be used in production, while rebuilding clean systems.


text: Eradication —remove malware from all affected systems, identify the root cause of the attack, and take action to prevent similar attacks in the future.


text: Recovery —bring affected production systems back online carefully, to prevent additional attacks. Test, verify, and monitor affected systems to ensure they are back to normal activity.


text: Lessons learned —no later than two weeks from the end of the incident, perform a retrospective of the incident. Prepare complete documentation of the incident, investigate the incident further, understand what was done to contain it, and determine whether anything in the incident response process could be improved.


text: The audit committee of our board of directors (the "Audit Committee") is responsible for overseeing cybersecurity risk and periodically updates our board of directors on such matters. The Audit Committee receives periodic updates from management regarding cybersecurity matters, and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations, or financial condition.


text: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect our clients, customers, employees, and vendor information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents. Our current cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats.

companyName: SATIVUS TECH CORP.

ticker: SATT


text: CEO is responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside consulting firm to monitor activity and advise the company of cybersecurity protocols.


text: We routinely undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including an annual risk review, policy reviews and revisions. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a cybersecurity incident by the administering of local and cloud based back up of files. and emails.


text: We engaged and used the advice of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers have recommended periodic evaluations of the work stations.


text: FMA/2FA, this is our first AND most important first line of defense, no one should have MFA bypassed or disabled, with no exceptions.


text: Email Banner for external emails. This banner assists us to identify any phishing / impersonation email and cannot be bypassed. Conditional Access Policy (CAP): Rejects connections to Exchange Online from un-authorized countries.


text: We are further enhancing this control by implementing ACL's (access lists) in our CRM and ERP systems and any other mission critical platform.


text: ALL platforms should have MFA enforced, any platform not supporting MFA in 2024 is deemed high-risk and immediately replaced as it is obsolete and poses high-risk to the Company.


text: As of the date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation and cause damage to our relationships,, as well as prevent us from attracting new clients / customers. and / or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.


text: In the ordinary course of our business, we receive, process, use, and store digitally large amounts of data, including customer data as well as confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to us and our business operations. To this end, we have implemented policies designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them. While we have taken measures designed to protect the security of the confidential and personal information under our control, we cannot provide absolute assurance that any security measures that we or our third-party service providers have implemented will be effective against current or future security threats.

companyName: CLOUDASTRUCTURE, INC.

ticker: CSAI


text: Our cybersecurity program is managed by our executive management team, including our Chief Executive Officer and Chief Technology Officer, and includes mechanisms, controls, technologies, systems, policies, and other processes designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the systems and data residing in them. We consult with outside advisors and experts to assist us with assessing, identifying, and managing cybersecurity risks.


text: We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Our board of directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. We intend to provide our board of directors with periodic updates on cybersecurity and information technology matters and related risk exposures from management.


text: All customer and user information is stored directly within our own data centers, or Google Cloud and Amazon Web Services platforms, which provides market-leading data security for their centralized servers. On occasion, limited amounts of customer information such as names and emails are exported from these systems solely for the purposes of accounting and filings and is never shared outside of the Company and its contracted accounting consultants, which are under confidentiality agreements. Highly sensitive customer payment information is generally never revealed to the Company in any capacity and is hidden by payment processors for security purposes, with the sole exception being accounts who provide written or digital copies of credit card information for payment processing on agreed upon terms. Such information is secured on Company computers and never distributed.


text: We recognize the importance of cybersecurity in protecting our operations, customer information, and proprietary data. We are committed to implementing robust security measures to mitigate the risk of cyber incidents that could potentially disrupt our business operations or compromise the integrity of our data.

companyName: AppTech Payments Corp.

ticker: APCX


text: Engage Third-parties on Risk Management Due to the difficulties and evolving nature of cybersecurity threats, AppTech engages with external experts, including cybersecurity consultants and auditors to evaluate and test its risk management systems. These relationships allow us to utilize specialized knowledge and insights, ensuring our strategies and processes remain in-line with current best practices. These third-parties provide the Company with regular audits, threat assessments, and consultations on security enhancements. Also, during onboarding and periodically thereafter, we conduct trainings for the Company's employees, contractors, and temporary workers about cybersecurity risks, including sending test phishing emails for training purposes to all users of the Company's email system.


text: Our cybersecurity strategy encompasses a comprehensive suite of measures designed to protect our systems and data from unauthorized access, use, alteration, or destruction. These measures include, but are not limited to: Implementation of advanced cybersecurity technologies, including firewalls, intrusion detection systems, and encryption protocols, to safeguard our network and data. Regular security assessments and penetration testing conducted by external experts to identify and remediate potential vulnerabilities. Establishing and maintaining incident response and recovery plans to ensure timely and effective responses to any cybersecurity incidents.


text: Oversee Third-party Risk To manage the risks associated with third-party service providers, AppTech conducts weekly calls with its providers to monitor compliance on an ongoing basis. Issues that arise are addressed immediately with mitigating measures added to avoid future problems.


text: Risks from Cybersecurity Threats Like other companies in our industry, we face several cybersecurity risks in connection with our business. Although such risks have not materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, to date, we have, from time to time, experienced threats to and security incidents related to our data and systems, including denial of service and phishing attacks.


text: Personnel managing our cybersecurity risks rests with our third-party provider, the Company's Director of Information Technology and Director of Software Engineering (referred to as "IT"). Their knowledge, experience and relationship with our third-party vendor are instrumental in developing and executing our cybersecurity strategies.


text: IT Team provides updates to upper Management on a routine basis or as potentially critical risks from cybersecurity threats or incidents arise. In addition, the audit committee is notified of any material cybersecurity concerns that may impact internal controls, data storage, or the integrity of our financial reporting.


text: Despite our diligent efforts to secure our systems and data, we acknowledge that no cybersecurity measures can completely eliminate the risk of cyber incidents. The evolving nature of cyber threats means that we must continually adapt our cybersecurity strategies to address new and emerging risks.


text: In recognition of these risks, we have implemented a comprehensive risk management framework that includes: • Continuous monitoring of our networks and systems for signs of unauthorized activity. • Regular updates to our cybersecurity measures to address new vulnerabilities and threats. • Collaboration with industry partners and government agencies to share information on threats and best practices for cybersecurity. • Maintaining cyber insurance to mitigate the financial impact of potential cybersecurity incidents.


text: Potential Impact of Cybersecurity Incidents We recognize that a significant cybersecurity incident could have material adverse effects on our business, including operational disruptions, financial losses, legal liabilities, and damage to our reputation.


text: Such incidents could also result in the loss of proprietary information or the exposure of sensitive customer data, leading to further financial and reputational harm.


text: In conclusion, while AppTech Payment Corp is committed to employing comprehensive cybersecurity measures to protect against cyber threats, there are inherent risks associated with cybersecurity that could impact our business. We continue to monitor our cybersecurity landscape actively and adapt our defenses to mitigate these risks as much as possible.


text: We are increasingly dependent on sophisticated software applications and computing infrastructure to conduct key operations. We depend on both our own systems, networks, and technology as well as the systems, networks and technology of our contractors, consultants, vendors and other business partners.

companyName: Phio Pharmaceuticals Corp.

ticker: PHIO


text: Given the importance of cybersecurity to our business, we maintain a robust cybersecurity program to support both the effectiveness of our systems and our preparedness for information security risks. This program includes a number of safeguards, such as: continuous monitoring for internal and external threats; regular evaluations of our cybersecurity program, including periodic external reviews; and industry benchmarking. We are implementing cybersecurity awareness trainings for all employees. Our program leverages standard industry frameworks to strengthen our program effectiveness and reduce cybersecurity risks.


text: We use a risk-based approach with respect to our use and oversight of third-party service providers, tailoring processes according to the nature and sensitivity of the data accessed, processed, or stored by such third-party service provider. We use a number of means to assess and manage cyber risks related to our third-party service providers, including conducting due diligence in connection with onboarding new vendors and seeking to include appropriate security terms in our contracts where applicable.


text: In the event of a cybersecurity incident, designated personnel are responsible for assessing the severity of an incident and associated threat, containing the threat, remediating the threat, including recovery of data and access to systems, analyzing any reporting obligations associated with the incident, and performing post-incident analysis and program enhancements. We maintain a disaster recovery plan in the event of a significant cybersecurity incident.


text: We have relationships with a number of third-party service providers to assist with cybersecurity containment and remediation efforts, including insurance providers and various law firms.


text: The controls and processes employed to assess, identify and manage material risks from cybersecurity threats are implemented and overseen by the use of consultants as the Company does not have a full-time dedicated cybersecurity position in the Company. Our consultants have over 20 years of experience in information technology matters and are responsible for the day-to-day management of the cybersecurity program, including the prevention, detection, investigation, response to, and recovery from cybersecurity threats and incidents, and are regularly engaged to help ensure the cybersecurity program functions effectively in the face of evolving cybersecurity threats. The Board of Directors (the " Board ")


text: has overall responsibility for risk oversight and cybersecurity risk matters. The Board is responsible for discussing with management the Company's data privacy, information technology and security and cybersecurity risk exposures, including: (i) the potential impact of those exposures on the Company's business, financial results, operations and reputation; (ii) the programs implemented by management to monitor and mitigate any exposures; and (iii) major legislative and regulatory developments that could materially impact the Company's data privacy and cybersecurity risk exposure.


text: Cybersecurity Risks Our cybersecurity risk management processes are integrated into our overall information technology (" IT ") processes. As part of our IT process, we identify, assess and evaluate risks impacting our operations across the Company, including those risks related to cybersecurity. We also maintain cybersecurity insurance providing coverage for certain costs related to cybersecurity-related incidents that impact our own systems, networks, and technology or the systems, networks and technology of our contractors, consultants, vendors and other business partners.


text: As of December 31, 2024, we are not aware of any material risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected the business strategy, results of operations or financial condition of the Company or are reasonably likely to have such a material effect. While we maintain a robust cybersecurity program, the techniques used to infiltrate information technology systems continue to evolve. Accordingly, we may not be able to timely detect threats or anticipate and implement adequate security measures. For additional information, see "Item 1A—Risk Factors."


text: There have been an increasing number of cyberattacks on companies around the world, which have caused operational failures, compromised sensitive corporate or customer data, and/or resulted in significant financial damages. These attacks have occurred over the internet, through malware, viruses or attachments to e-mails, or through inside actors with access to systems within the organization.

companyName: CNS Pharmaceuticals, Inc.

ticker: CNSP


text: We have recently implemented additional security measures as part of an evolving cybersecurity posture and will continue to devote resources to address security vulnerabilities in an effort to prevent cyberattacks and mitigate the damage that could result from such an attack. All employees have recently begun receiving cybersecurity training and other education regarding their use of computers, information technology, and sensitive data including specifically how to recognize common attack strategies. As the Company does not have a physical office location, it does not have a local network or in-house servers and proprietary applications. We therefore utilize third parties applications and resources to support our information technology ("IT") needs. All applications utilized by the Company are Software as a Service ("SaaS") offerings.


text: As our applications are developed and managed by third parties, we are dependent on these providers for many functions including disaster recovery during a disaster or cyber incident. Our goal is to only utilize the most secure and trusted providers for our IT needs. Our business continuity plans are evaluated against evolving security and service level standards, which includes evaluating those cybersecurity threats associated with our use of key third party service providers.


text: Our cybersecurity management strategy consists of utilizing a combination of employee education, preventative controls, detective controls, and periodic third-party cybersecurity testing.


text: During fiscal year 2023 we began to deploy and utilize enterprise scale technology to support an appropriate cybersecurity posture including: endpoint detection and response, firewalls, security information and event management, email security, multifactor authentication, and vulnerability management. As part of the service offering from our outsourced IT security services provider, cybersecurity related alerts will be issued to us as relevant situations develop. These alerts will be evaluated in concert with our IT provider and in the event an alert requires action within our environment, such actions will be taken promptly. Our process and cybersecurity posture will continue to be refined based on the results of periodic cybersecurity assessments conducted jointly with our IT provider. We have recently begun reporting on cybersecurity in reports to the Board of Directors and will continue to do so.


text: To operate our business, we rely upon certain third-party service providers to perform a variety of functions, such as outsourced business critical functions, clinical research, professional services, SaaS platforms, managed services, cloud-based infrastructure, content delivery, encryption and authentication technology, corporate productivity services, and other functions. We are developing certain vendor management processes designed to help to manage cybersecurity risks associated with our use of certain of these providers. Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider related to the services they provide and/or the information they process, conducting security assessments, conducting on-site inspections, requiring their completion of written questionnaires regarding their services and data handling practices, and conducting periodic re-assessments during their engagement. For our largest third-party provider, our Contract Research Organization ("CRO") which is helping us manage our global trial of Berubicin, we are currently conducting a security assessment and review including their cybersecurity practices, protocols and protections, handling of information protected by HIPAA, and physical security.


text: Board of Directors is responsible for oversight of cybersecurity risk. Our Chief Financial Officer and Chief Executive Officer are the members of management responsible for managing and assessing our cybersecurity practices and have recently commenced reporting on such practices and risks. The plan for the future is that they will continue to report to the Board on cybersecurity at least quarterly. Should any cybersecurity threat or incident be detected, our senior management team would timely report such threat or incident to the Board of Directors and provide regular communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be taken.


text: We believe we are appropriately staffed (as supported by our outsourced IT provider) to support a healthy cybersecurity posture given our size and scope. Our Chief Financial Officer, who reports to the Chief Executive Officer, is directly responsible for IT functions and has earned a Master of Business Administration and also a Master of Science degree in Accounting with a Management Information Systems concentration.


text: To date, there have been no risks identified from cybersecurity threats or previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect the company. However, despite all of the above aforementioned efforts, a cyberattack, if it occurred, could cause system operational problems, disrupt service to clinical trial sites, compromise important data or systems or result in an unintended release of confidential information. See "Item 1A. Risk Factors" for additional discussion of cybersecurity risks impacting our Company.


text: Company recognizes the critical importance of cybersecurity in protecting our sensitive data, intellectual property, and the personal information of our employees and partners. We have implemented a comprehensive cybersecurity risk management program that includes the following key components:

companyName: Sunshine Biopharma Inc.

ticker: SBFM


text: Assessment and Management conduct regular risk assessments to identify and evaluate potential cybersecurity threats and vulnerabilities. Our risk management framework is aligned with industry standards such as the NIST Cybersecurity Framework (CSF) and ISO 27001. We continuously monitor and update our cybersecurity measures to address emerging threats and ensure the protection of our assets.


text: management oversees our cybersecurity risk management efforts. Our senior management team is actively involved in cybersecurity policies, procedures and strategy development.


text: Response and Recovery have a robust incident response plan in place to quickly detect, respond to, and recover from cybersecurity incidents. We collaborate with external cybersecurity experts and law enforcement agencies to enhance our incident response capabilities.


text: Training and Awareness provide ongoing cybersecurity training and awareness programs for all employees to promote a culture of security. Our training programs cover topics such as phishing prevention, secure data handling, and recognizing potential cyber threats.


text: We assess the cybersecurity practices of our third-party vendors and partners to ensure they meet our security standards. Our contracts with third parties include provisions for cybersecurity requirements and incident reporting.


text: We comply with all relevant cybersecurity regulations and standards, including the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation (GDPR). We regularly review and update our cybersecurity policies and procedures to ensure compliance with evolving regulatory requirements.


text: in Cybersecurity continuously invest in advanced cybersecurity technologies, including threat detection and prevention systems, encryption, and secure access controls. Our cybersecurity is part of our overall budget which is reviewed and approved by our board of directors to ensure adequate resources are allocated to protect our assets. the past fiscal year, we experienced no cybersecurity incidents.


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.

companyName: Chilean Cobalt Corp.

ticker: COBA


text: We use a third-party vendor to provide a suite of services to assess, identify, and manage material risks from cybersecurity threats. These services include providing us with a secure email platform, including content examination and data leak prevention; system monitoring and support, including patch management, anti-virus and threat hunting services; and system backup and recovery services. As we expand our business operations, we plan to evaluate the development of enhanced processes that will allow for the identification and assessment of cybersecurity risk that will be integrated into an overall risk management system, which will be managed by senior management and overseen by the Board of Directors.


text: As part of these developments, we plan to identify and address cybersecurity risks related to our business, privacy and compliance issues through a multi-faceted approach that is expected to include third-party assessments, internal information technology (IT) audit, IT security, governance, risk and compliance reviews. In connection with these planned approaches, and to defend, detect and respond to cybersecurity incidents, we, among other things, will consider: conducting proactive privacy and cybersecurity reviews of systems and applications, audits of applicable data policies, performing penetration testing using external third-party tools and techniques to test security controls, conducting employee training, monitoring emerging laws and regulations related to data protection and information security, and implementing appropriate changes.


text: As part of the above-planned processes, we may engage external auditors and consultants with expertise in cybersecurity to assess our internal cybersecurity programs and compliance with applicable practices and standards.


text: We plan to design our risk management program to also assess third-party risks, and we plan to perform third-party risk management to identify and mitigate risks from third parties, such as vendors, suppliers, and other business partners associated with our use of third-party service providers. In addition to new vendor onboarding, we plan to perform risk management during third-party cybersecurity compromise incidents to identify and mitigate risks to us from third-party incidents.


text: We expect that cybersecurity will become an important part of our risk management processes and an area of focus for our Board of Directors and management. We expect that our Board of Directors will be responsible for the oversight of risks from cybersecurity threats. We expect our senior management will provide our Board of Directors updates on at least an annual basis regarding matters of cybersecurity. This is expected to include existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. We expect that our Board members will also engage in periodic conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.


text: Currently, our Chief Operating Officer is expected to lead our cybersecurity risk assessment and management processes and oversee their implementation and maintenance. Our Chief Operating Officer will be tasked with staying informed about, and monitoring the prevention, mitigation, detection and remediation of cybersecurity incidents through his management of, and participation in, the cybersecurity risk management and strategy processes we plan to develop and as described above, including the operation of an incident response plan, and report to the Board of Directors on any appropriate items.


text: The Company has not adopted any insider trading policies and procedures governing the purchase, sale, and/or other dispositions of the Company securities yet, as we are still in the restructuring process. We however plan to adopt this soon once the restructuring process is done.

companyName: Aphoenity International Holdings Inc.


text: In the ordinary course of business, we receive, process, use, and store digitally large amounts of data, including confidential, sensitive, proprietary, and personal information. Maintaining the integrity and availability of our information technology systems and this information, as well as appropriate limitations on access and confidentiality of such information, is important to us and our business operations. To this end, we have implemented policies designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing in them. While we have taken measures designed to protect the security of the confidential and personal information under our control, we cannot provide absolute assurance that any security measures that we or our third-party service providers have implemented will be effective against current or future security threats.

companyName: Mobiquity Technologies, Inc.

ticker: MOBQ


text: Our cybersecurity program is managed by our Chief Technology Officer. Most of the information generated and collected by us is stored and maintained by third-party vendors and service providers, who have demonstrated their own cybersecurity protocols which our management believes to be adequate for protecting our digital files in their possession. Our CTO is responsible for assessing and managing cybersecurity risks. Our CTO has cybersecurity expertise. We have no formal cybersecurity policies and processes in place; however, the Board and management believe cybersecurity represents an important component of our overall approach to risk management and oversight.


text: We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Our Board of Directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. We provide our Board of Directors with periodic updates on cybersecurity and information technology matters and related risk exposures from management.


text: Most information is stored directly to Amazon Web Services platforms, which provide market-leading data security for their centralized servers. Our company follows best practices for security, indemnity and compliance. All connections in and out of our remote services are made over secure connections, including https and Secure Shell (SSH) protocols. On occasion, limited amounts of information such as names and emails are exported from our systems solely for the purposes of accounting and filings and is not shared outside of our company and its contracted accounting consultants, which are under confidentiality agreements.


text: Cybersecurity threats have not materially affected our company, including its business strategy, results of operations or financial condition. Our company is not aware of any material security breach to date. Accordingly, our company has not incurred any expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations. There can be no assurance that our third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be effective in protecting our systems and information.


text: The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.

companyName: PATRIOT GOLD CORP

ticker: PGOL


text: During the year ended, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.


text: One of the functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. The Board receives updates as needed from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition As of December 31, 2024, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.

companyName: ATHENA GOLD CORP

ticker: AHNRF


text: We are not conducting material operations, so cybersecurity threats have not affected our business strategy or results of operations and the Board of Directors will assess the potential threat to future operations as such operations develop. The Board of Directors will oversee management's processes for identifying and mitigating risks, including cybersecurity risks, to facilitate mitigating our risks involved with cybersecurity. help align our risk exposure with our strategic objectives. The Board relies on its executive officers to identify cybersecurity risks and retains oversight of cybersecurity. In the event of an incident, we intend to take appropriate steps from incident detection to mitigation, recovery and notification of appropriate parties. Management is responsible for day-to-day monitoring of cybersecurity, including detection and response and to report risks and incidents to the Board of Directors. We rely on computer software provided by third parties to protect our computer systems against cybersecurity threats

companyName: TechCom, Inc.

ticker: TCRI


text: The identification, detection, prevention and remediation of known or potential IT security vulnerabilities, including those arising from third-party hackers, hardware or software, is extremely costly and time consuming. The Company does not have the manpower, expertise or financial resources to effectively identify, detect, prevent or remediate cybersecurity risks. No assurance or guarantee whatsoever can be given that the Company will not be damaged by the exploitation of its cybersecurity vulnerabilities.

companyName: DarkPulse, Inc.

ticker: DPLS


text: During the year ended December 31, 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks.


text: Overall Risk Management We maintain a cybersecurity program that is reasonably designed to protect our information, and that of our customers, against cybersecurity threats that may result in adverse effects on the confidentiality, integrity, and availability of our information systems.

companyName: Koil Energy Solutions, Inc.

ticker: KLNG


text: The Company integrates cybersecurity risk management into its broader risk management framework to promote a company-wide culture of cyber risk awareness. The head of our IT department continuously evaluates and addresses cyber risks in alignment with business objectives, operational needs and industry-accepted standards, such as the National Institute of Standards and Technology ("NIST").


text: The Company has processes and procedures in place to monitor the prevention, detection, mitigation and remediation of cybersecurity risks. These include but are not limited to: Maintaining a defined and practiced incident response plan; Maintaining cyber insurance coverage; Employing appropriate incident prevention and detection safeguards; Maintaining a defined disaster recovery policy and employing disaster recovery software, where appropriate;


text: Educating, training and testing our user community on information security practices and identification of potential cybersecurity risks and threats; and Reviewing and evaluating new developments in the cyber threat landscape.


text: Managing Third Party Risk Koil Energy recognizes the risks associated with the use of vendors, service providers and other third parties that provide information system services to us, process information on our behalf, or have access to our information systems, and the Company has processes in place to oversee and manage these risks. We conduct thorough risk-weighted security assessments of various third-parties and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. This monitoring includes both annual assessments and assessments on an ongoing basis.


text: Risks from Cybersecurity Incidents To our knowledge, Koil Energy has not been subject to cybersecurity incidents that have materially affected, or are reasonably likely to materially affect the Company, its operations or financial condition.


text: Internal Cybersecurity Team Our internal cybersecurity team, led by our IT Manager, is responsible for implementing, monitoring, and maintaining cybersecurity and data protection practices across the company. Our IT Manager has over 14 years in cybersecurity work experience and managing all levels of the Company's on-premises and cloud infrastructure.


text: Our management team periodically participates in the review of our cybersecurity systems, processes, threats and incidents with our internal cybersecurity team, including the controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Board of Directors The Audit Committee of the Company's Board of Directors (the "Board") is responsible for overseeing the Company's cyber risk. Management has established a process for the Audit Committee to receive regular updates that encompass a broad range of topics, including: Current cybersecurity threat landscape and emerging threats; Status of ongoing cybersecurity initiatives and strategies; Incident reports and learnings from unique cybersecurity events, including those of other companies; Compliance status and efforts with regulatory requirements and industry standards; Regulatory updates; Vulnerability developments; and Other cyber risk topics as requested by the Board.


text: Companies such as ours face a variety of risks, including financial reporting, legal, credit, liquidity, operational, health, safety and cybersecurity risks. The Board believes an effective risk management system will (1) identify the material risks that we face in a timely manner, (2) communicate necessary information with respect to material risks to senior executives and, as appropriate, to our directors (3) implement or oversee implementation of appropriate and responsive risk management and mitigation strategies consistent with our risk profile, and (4) integrate risk management into our decision-making.

companyName: GeoSolar Technologies, Inc.


text: Our Board oversees risk management after receiving briefings from advisors and also based on its own analysis and conclusions regarding the adequacy of our risk management processes. The Board continuously evaluates and manages material risks including geopolitical and enterprise risks, financial risks, environmental risks, health and safety risks and cybersecurity risks.


text: Daniel Chartock, our Chief Growth Officer and Executive Vice President of Operations, is responsible for assessing and managing cybersecurity risks. Mr. Chartock is experienced in assessing and managing cybersecurity risks due to his 30+ years in information technology consulting.


text: To date we have not experienced any cybersecurity threats and any risks from cybersecurity threats have not materially affected, and are not reasonably likely to materially affect, our business strategy, results of operations, or financial condition.


text: Company currently manages its cybersecurity risk through a variety of practices applicable to all users of its information technology and assets, including our officers, directors, contractors, and vendors. These practices include the use of passwords protocols, third party firewalls, antivirus protections, and secure cloud-based data storage. The Company also promotes general security awareness through basic user access controls and regular internal monitoring.

companyName: Cluster Group Holdings Ltd Co

ticker: CLUS


text: Board of Directors oversees cybersecurity risks and performs an annual review of the Company's cybersecurity program, including management's actions to identify, detect, and respond to potential threats.


text: of the date of this report, the Company has not experienced any material cybersecurity incidents, nor has it identified any material cybersecurity threats that have affected or are reasonably likely to materially affect its business strategy, results of operations, or financial condition.


text: We aim to deploy a cyber-risk management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our data and information systems. The Company currently manages its cybersecurity risk through a variety of practices that are applicable to all users of our information technology and information assets, including our officers and directors, contractors, and vendors. The Company uses a combination of technology and monitoring to promote security awareness and prevent security incidents, including network and passwords protocols, third party firewalls, and antivirus protections. Our Board of Directors performs an annual review of our cybersecurity program, including management's actions to identify and detect threats.

companyName: Eline Entertainment Group, Inc.

ticker: EEGI


text: We have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: We recognize the importance of cybersecurity in maintaining the integrity of our systems and data. Our IT Director oversees cybersecurity risk management, conducting assessments as needed based on identified risks or evolving security practices. We implement security measures such as firewalls, encryption, and access controls to help protect against unauthorized access.

companyName: BIOREGENX, INC.

ticker: BRGX


text: To date, we have not experienced any material cybersecurity incidents affecting our operations or financial condition. We continue to monitor risks and adjust our security measures as necessary.


text: Cybersecurity oversight is managed by our IT Director, who is responsible for evaluating risks and implementing security measures. We do not have a dedicated board committee for cybersecurity, but executive leadership is informed of cybersecurity matters as needed.


text: We continue to augment the capabilities of our people, processes, and technologies in order to address our cybersecurity risks. Our cybersecurity risks, and the controls designed to mitigate those risks, are integrated into our overall risk management governance and are reviewed yearly by our Board of Directors.

companyName: Kinetic Seas Inc.

ticker: KSEZ


text: We have implemented a set of comprehensive cybersecurity and data protection policies and procedures. Risks from cybersecurity threats are regularly evaluated as a part of our broader risk management activities and as a fundamental component of our internal control system. Our employees receive annual cybersecurity awareness training, including specific topics related to social engineering and email frauds. We utilize an outsourced information technology firm and consultants with significant expertise in cybersecurity. We invest in advanced technologies for continuous cybersecurity monitoring across our information technology environment which are designed to prevent, detect, and minimize cybersecurity attacks, as well as alert management of such attacks.


text: Our Information Technology General Controls are firmly established based on the National Institute of Standards and Technology ("NIST") cybersecurity framework and cover areas such as risk management, data backup, and disaster recovery. We have utilized an outsourced information technology consultant to reduce and monitor security threats and vulnerabilities. As part of our gap analysis, identified vulnerabilities have been, and will continue to be, promptly addressed with our senior business leadership and our Board of Directors.


text: Our Board of Directors is responsible for overseeing our cybersecurity risk management and strategy. Our President regularly meets with and provides periodic briefings to our Board of Directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like.


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: Marvion Inc.

ticker: MVNC


text: Our cybersecurity risk management program is aligned to the Company's business strategy. It shares common methodologies, reporting channels and governance processes that apply to the other areas of enterprise risk, including legal, compliance, strategic, operational, and financial risk. Key elements of our cybersecurity risk management program include: risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise information technology environment; a security team principally responsible for managing our cybersecurity risk assessment processes and our response to cybersecurity incidents;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security procedures;


text: training and awareness programs for team members that include periodic and ongoing assessments to drive adoption and awareness of cybersecurity processes and procedures;


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and a third-party risk management process for service providers, suppliers, and vendors.


text: In the last two fiscal years, the Company has not experienced any material cybersecurity incidents. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors - "Cybersecurity Breaches and other Disruptions to our Information Technology Systems", which is incorporated by reference into this Item 1C.


text: The Board regularly receives reports from our executive officers and third parties on cybersecurity matters. In addition, the Board receives reports addressing cybersecurity as part of our overall enterprise risk management program and to the extent cybersecurity matters are addressed in regular business updates.


text: Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. These individuals' expertise in IT and cybersecurity generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. They are informed by their respective cybersecurity teams about, and monitor, the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above.


text: Cybersecurity incident" means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through our information systems that jeopardizes the confidentiality, integrity, or availability of our information systems or any information residing therein.

companyName: IIOT-OXYS, Inc.

ticker: ITOX


text: Cybersecurity threat" means any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: Information systems" means electronic information resources, owned or used by us, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of our information to maintain or support our operations.


text: Our website is monitored by a third party to check if our website is secure. We are prepared to inform all parties necessary if any breach of cyber-security were to happen. We have never had this problem and so we have never had to inform consultants, auditors, or other third parties.


text: We have never had a breach of cyber-security at any point in our past. The risk to us of cybersecurity threats is in data storage of customer questions and emails. A breach of customers' data could negatively materially affect our public trust and could result in loss of customers and revenue.


text: Our board of directors has no specific processes for monitoring cybersecurity within the Company. There is no subcommittee specifically for monitoring cybersecurity in the company.


text: Our management monitors our websites and online accounts frequently to manage risks associated with cyber-security risks. Our management communicates with our board on matters of cybersecurity but, has not had to inform them of any breaches thus far.


text: Risk Management and Cybersecurity We are committed to robust cybersecurity measures to protect our data and systems. Our policies include regular risk assessments, employee training, and incident response plans. The board oversees our cybersecurity strategy, ensuring appropriate risk mitigation. Technical controls like firewalls and encryption safeguard our information, while continuous monitoring allows prompt incident response. In case of a cybersecurity incident, we have established procedures for reporting, investigating, and mitigating impacts, with timely disclosure to stakeholders.

companyName: LEGEND SPICES, INC.


text: We use, store, and process limited data related to our operations. As of the date of this filing, we have not yet implemented a formal cybersecurity risk management program designed to identify, assess, and mitigate risks from cybersecurity threats. We intend to implement a cybersecurity risk management program as our business operations and technology infrastructure evolve.

companyName: Natics Corp.

ticker: NTCS


text: Cyber Risk Management and Strategy We plan to implement and maintain a cybersecurity risk management program under the oversight of our Board of Directors. Once implemented, this program will include systematic processes for identifying, assessing, and mitigating cybersecurity risks and will be integrated into our overall risk management processes. We intend to adopt a risk-based approach to managing cyber threats, supported by commonly used cybersecurity technologies, such as cloud-based monitoring and threat detection tools.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing.


text: As part of this effort, we also intend to implement controls to assess and manage risks associated with third-party service providers who may have access to our systems or data. This may include review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: We expect to regularly evaluate and enhance our cybersecurity policies and procedures in response to emerging threats or developments affecting our industry.


text: In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: Cybersecurity risk management is an important part of the Company's overall risk management efforts. We maintain a comprehensive enterprise-wide information security program that comprises policies and controls designed to identify, safeguard against, detect, respond to, mitigate and manage reasonably foreseeable cybersecurity risks and threats. Our approach utilizes diverse security tools to prevent, identify, investigate, resolve and recover from vulnerabilities and security incidents. These include, but are not limited to, internal reporting, monitoring and detection tools. We use a collaborative, enterprise-wide strategy to address cybersecurity risks and allocate significant resources to our cybersecurity and risk management processes, which efforts are intended to adapt to the evolving cybersecurity landscape and promptly address emerging threats. Our cybersecurity risk management program aligns with the National Institute of Standards and Technology (NIST) framework and is organized into five key functions: identification, protection, detection, response and recovery. We regularly assess the threat landscape and employ a layered cybersecurity strategy to prevent, detect and mitigate threats.

companyName: Dalrada Technology Group, Inc.

ticker: DHTI


text: We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our security controls include: Network


text: traffic monitoring and filtering of Sentinelone to protect against phishing attacks hardening hardening barriers to hardware access of on prem hardware firewall in order to keep less secure hardware such as printers and scanners on their own VLAN to minimize attack vectors Board


text: of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters. The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities. Any significant cybersecurity matters, including those related to incidents, are escalated to the Board of Directors.


text: We face cybersecurity threats in the ordinary course of our business and have faced cybersecurity threats and breach attempts in the past. Such threats and breach attempts have not materially affected our business, strategy, results of operations or financial condition. At any given time, however, we may face known or unknown cybersecurity risks and threats that cannot be fully prevented or mitigated, and we may discover vulnerabilities in our cybersecurity programs. Therefore, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: We identify and address cybersecurity threats and risks related to our business with an approach that includes assessments by our management and use of an outside consultant to manage our information technology. In addition, we rely on operating systems and software from established and reliable third-party service providers to provide security. We have employee policies in place designed to reduce risk of cyber-attacks and educate employees on protocol in the event of a potential cybersecurity incident.

companyName: Sonoma Pharmaceuticals, Inc.

ticker: SNOA


text: Currently we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations or financial condition or are reasonably likely to have such a material effect. However, cyber-attacks are increasing in frequency, sophistication and intensity, and despite our ongoing efforts we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents. Please refer to "Risk Factors" in Part I, Item 1A of this Governance


text: The Board of Directors takes an active role, as a whole, in overseeing management regarding our Company's risks, including cybersecurity risks. Our management, including our Chief Executive Officer and our Chief Financial Officer, keeps the Board of Directors apprised of significant risks facing our Company and the approach being taken to understand, manage, and mitigate such risks, including with respect to potential cybersecurity threats.


text: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, information related to our clinical trials, and information of our employees, or Information Systems and Data.

companyName: AETHLON MEDICAL INC

ticker: AEMD


text: The Company's Chief Financial Officer, with assistance from our third-party cybersecurity vendors, is responsible for identifying, assessing, and managing our cybersecurity threats and risks. Together, they identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example, automated tools, evaluating our and our industry's risk profile, conducting real-time monitoring of certain systems, and implementing escalation protocols with our third-party cybersecurity vendors.


text: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: an incident response plan; incident detection and response tools; encryption of certain sensitive data and certain data on mobile systems; certain access controls enforcing the principle of need-to-know encryption of certain sensitive data and certain data on mobile systems; physical security measures; asset management, tracking and disposal; monitoring of certain systems; and employee training.


text: Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, cybersecurity risk is addressed through our quality management system and processes and overseen by our audit committee of the board of directors. We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including, for example, professional services firms, including legal counsel and certain cybersecurity service providers.


text: We use third-party service providers to perform a variety of functions throughout our business, such as hosting companies and contract research organizations. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program includes conducting a risk assessment for certain vendors.


text: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. Risk Factors in this Annual Report on Form 10-K, including " If our information technology systems, or those of third parties with whom we work, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to: regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences. "


text: Our board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The board of directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.


text: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the Chief Executive Officer, and Chief Financial Officer.


text: The CFO is responsible for hiring appropriate personnel (including selecting third-party cybersecurity vendors), helping to integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities to relevant personnel. The CFO is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.


text: Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including CFO/CEO. The CFO/CEO work with our incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified. In addition, our incident response plan includes reporting to the audit committee of the board of directors for certain cybersecurity incidents.


text: The audit committee receives periodic reports from the CFO concerning our significant cybersecurity threats and risk and the processes we have implemented to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.


text: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We currently have security measures in place to protect our clients, customers, employees, and vendor information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: Stemtech Corp

ticker: STEK


text: Our current cybersecurity risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures, and technology we use to oversee and identify risks from cybersecurity threats.


text: & COO and CEO are responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside consulting firm to monitor activity and advise the company of cybersecurity protocols.


text: We routinely undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including an annual risk review, policy reviews and revisions. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a cybersecurity incident by the administering of local and cloud based back up of files. and emails.


text: We engaged and used the advice of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident, and manage our risk assessment program. Among other things, these providers have recommended periodic evaluations of the work stations.


text: FMA/2FA, this is our first AND most important first line of defense, no one should have MFA bypassed or disabled, with no exceptions.


text: Email Banner for external emails. This banner assists us to identify any phishing / impersonation email and cannot be bypassed.


text: Conditional Access Policy (CAP): Rejects connections to Exchange Online from un-authorized countries. We are further enhancing this control by implementing ACL's (access lists) in our CRM and ERP systems and any other mission critical platform. ALL platforms should have MFA enforced, any platform not supporting MFA in 2024 is deemed high-risk and immediately replaced as it is obsolete and poses high-risk to the Company.


text: As of the date of this report, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our results of operations or financial condition. However, an actual or perceived breach of our security could damage our reputation and cause existing Independent Business Partners (IBPs or distributors) / customers to discontinue, as well as prevent us from attracting new clients / customers. and / or subject us to third-party lawsuits, regulatory fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition. We currently do not carry a cyber liability insurance policy, but are evaluating whether to acquire one to mitigate any financial impact of a cybersecurity breach.


text: In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.

companyName: Orion Bliss Corp.

ticker: ORIB


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.

companyName: King Resources, Inc.

ticker: KRFG


text: Our cybersecurity risk management program is aligned to the Company's business strategy. It shares common methodologies, reporting channels and governance processes that apply to the other areas of enterprise risk, including legal, compliance, strategic, operational, and financial risk. Key elements of our cybersecurity risk management program include: risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise information technology environment; a security team principally responsible for managing our cybersecurity risk assessment processes and our response to cybersecurity incidents;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security procedures;


text: training and awareness programs for team members that include periodic and ongoing assessments to drive adoption and awareness of cybersecurity processes and procedures;


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and a third-party risk management process for service providers, suppliers, and vendors.


text: In the last two fiscal years, the Company has not experienced any material cybersecurity incidents. For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, refer to Item 1A. Risk Factors - "Cybersecurity Breaches and other Disruptions to our Information Technology Systems", which is incorporated by reference into this Item 1C.


text: The Board regularly receives reports from our executive officers and third parties on cybersecurity matters. In addition, the Board receives reports addressing cybersecurity as part of our overall enterprise risk management program and to the extent cybersecurity matters are addressed in regular business updates.


text: Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. These individuals' expertise in IT and cybersecurity generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. They are informed by their respective cybersecurity teams about, and monitor, the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above.


text: We acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.

companyName: VitaNova Life Sciences Corp

ticker: VNOV


text: As a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.


text: Given our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.


text: We are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.


text: In addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.


text: Despite our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats.


text: We recognize the critical importance of maintaining the trust and confidence of business partners and employees toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. Our Board is actively involved in oversight of our risk management activities, and cybersecurity represents an important element of our overall approach to risk management. In general, we seek to address cybersecurity risks by utilizing reputable third party vendors and service providers to manage and maintain our information systems and assets in accordance with strong cybersecurity policies, standards, processes and practices, and by preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: PharmaCyte Biotech, Inc.

ticker: PMCB


text: We consider risks from cybersecurity threats alongside other company risks as part of our overall risk assessment process. We face risks related to cybersecurity such as unauthorized access, cybersecurity attacks and other security incidents, including as perpetrated by hackers and unintentional damage or disruption to hardware and software systems, loss of data, and misappropriation of confidential information. To identify and assess material risks from cybersecurity threats, we maintain policies to ensure our systems are effective and prepared for information security risks. For example, our PharmaCyte Information Security Policy, which applies to all employees, contractors and third parties granted access to our systems and provides guidelines for maintaining information security, including safeguarding personal and company-issued digital devices, learning to detect phishing and other attacks, restricting data transfer, and ensuring the judicious use of the internet and social media. We also maintain a more general Risk Management Strategy that sets forth our procedures for identifying, assessing, responding to, monitoring, and reporting risks, including any cyber-related risks.


text: Our approach to addressing cybersecurity threat risks also includes mitigating risk associated with our use of third-party service providers. For example, when we enter into contracts with third-party collaborators or vendors pursuant to which sensitive business or personal data will be shared or accessible, we include provisions safeguarding the protection of confidential information. We also utilize a third-party service provider to maintain our information systems and assets and to employ technical safeguards that are designed to protect our information systems from cybersecurity threats.


text: Our incident response plan coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable legal obligations and mitigate damage to our business and reputation. We maintain an Information Security Incident Response form that directs a detector of any incident to report such incident to our Information Security Officer, whom we contract through a third-party service provider. Following notice of any such incident, our Information Security Officer would then work with our Chief Financial Officer and our Board to establish an appropriate response plan and to determine the materiality of the incident and any disclosure obligations.


text: As discussed in more detail under "Cybersecurity Governance" below, our Board provides oversight of our risk management and strategy processes.


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading "We may be unable to adequately protect our information systems from cyberattacks, which could result in the disclosure of confidential or proprietary information, including personal data, damage our reputation, and subject us to significant financial and legal exposure," which disclosures are incorporated by reference herein.


text: In the last three fiscal years, we have not experienced any material cybersecurity incidents and the expenses we have incurred from cybersecurity incidents were immaterial. This includes penalties and settlements, of which there were none.


text: Cybersecurity Governance; Management Cybersecurity is part of our overall risk management processes. In general, our Board oversees risk management activities designed and implemented by our management, and considers specific risks, including, for example, risks associated with our strategic plan, business operations, and capital structure. Any cybersecurity incident that occurs would be brought to the immediate attention of the Board.


text: Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by a contracted third-party Information Security Officer. Such individual has over 25 years of experience in information technology, including over 14 years of experience in cybersecurity, and has a master's degree in cybersecurity. Our Information Security Officer is informed about and monitors our cybersecurity risk through his participation in the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan.


text: Inc. has implemented basic but targeted cybersecurity risk management measures appropriate for its early-stage operations and limited digital footprint. As a digital marketplace operating in a primarily cloud-based environment, the Company's exposure to cybersecurity threats is continuously monitored by executive management.

companyName: Mercalot Inc.


text: The Company currently relies on third-party hosting and software providers for its core platform operations, email communications, and data storage. These vendors maintain their own cybersecurity programs, which include network protection, access controls, and incident response procedures. While Mercalot Inc. does not yet employ a dedicated IT security team, its directors are actively involved in overseeing operational and technological risk, including cybersecurity.


text: Executive management, consisting of the Chief Executive Officer and the Board, is responsible for identifying, evaluating, and responding to potential cyber risks. The Company periodically reviews its internal systems and third-party vendor protocols to assess vulnerabilities and ensure secure handling of sensitive business information.


text: To date, Mercalot Inc. has not experienced any material cybersecurity incidents, and no specific threat has materially affected or is reasonably likely to materially affect the Company's business strategy, operations, or financial condition. However, the Company recognizes that its reliance on cloud infrastructure and digital communication tools poses an ongoing cybersecurity risk and will continue to assess and strengthen controls as operations scale. Management plans to formalize its cybersecurity policies and implement internal training protocols as the business grows.


text: any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.