text: Pursuant to the terms of the Fund's LLC Agreement, the Manager renders management, advisory and administrative services to the Fund, which includes the assessing, identifying, and managing of material risks from cybersecurity threats through its Corporate IT Security Governance program. Ridgewood Energy's Corporate IT Security Governance program consists of an information security framework and organizational structure with senior management oversight that are designed to safeguard critical information assets. Cybersecurity risk is evaluated based upon risk-based approach.

companyName: RIDGEWOOD ENERGY T FUND LLC


text: An analysis of information and technology assets that ranks the assets based upon their risk of potential internal and external threats and the impact of the potential loss of integrity, confidentiality, and availability of that asset is updated as appropriate. An Information Security Risk Assessment led by the Manager's Chief Information Officer ("CIO") is performed on an annual basis, and/or upon major changes of cybersecurity related processes and infrastructure, for evaluating the potential impacts to key technology, processes, and people upon known relevant threats. Either a mitigating action plan and/or risk acceptance with valid business reasons is required as a response to each identified risk. The results of the Information Security Risk Assessment are available to senior management for review and approval.

secItem: Item 1C


text: The Manager has developed and implemented additional programs that assist in reducing risk and providing additional protection of confidential information including:


text: Collaborative Approach: A comprehensive, cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by senior management in a timely manner.


text: Technical Safeguards: Technical safeguards designed to protect the Fund's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: Incidence Response and Recovery Planning: An Incident Response Plan that dictates how the Manager prepares, identifies, contains, remediates, and recovers from various vulnerabilities, threats, and events, including cybersecurity events impacting the Fund.


text: A comprehensive, risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of the Manager's systems, as well as the systems of third-parties that could adversely impact the Fund and its investors in the event of a cybersecurity incident affecting those third-party systems.


text: Education and Awareness: Security Awareness training is provided for all new and existing employees that reviews information concerning cyber risks and user responsibilities, and heightens awareness of cyber threats. Training is documented and reported to senior management when appropriate.


text: The Fund does not have its own board of directors or any board committees. The Fund relies upon the senior management oversight of the Manager reporting cybersecurity risks to the executive officers of the Fund. The Manager has a Cyber Risk Committee in place comprised of the CIO and other executive officers of the Fund that is responsible for reviewing and approving or rejecting escalated non-standard IT change requests. The CIO communicates regularly and serves as the Fund's representation to address significant information technology activities and initiatives. The CIO has more than twenty years of experience as an information technology professional and has been CIO since 2007. The CIO has periodic calls with a third-party virtual Chief Information Security Officer on review of policy and procedures best practices and cybersecurity threats.


text: In 2023, there were no risks from cybersecurity threats that have materially affected or reasonably likely to material affect the Fund, its business strategy, results of operations or financial condition.


text: Pursuant to the terms of the Fund's LLC Agreement, the Manager renders management, advisory and administrative services to the Fund, which includes the assessing, identifying, and managing of material risks from cybersecurity threats through its Corporate IT Security Governance program. Ridgewood Energy's Corporate IT Security Governance program consists of an information security framework and organizational structure with senior management oversight that are designed to safeguard critical information assets.

companyName: Ridgewood Energy U Fund LLC


text: Cybersecurity risk is evaluated based upon risk-based approach. An analysis of information and technology assets that ranks the assets based upon their risk of potential internal and external threats and the impact of the potential loss of integrity, confidentiality, and availability of that asset is updated as appropriate.


text: An Information Security Risk Assessment led by the Manager's Chief Information Officer ("CIO") is performed on an annual basis, and/or upon major changes of cybersecurity related processes and infrastructure, for evaluating the potential impacts to key technology, processes, and people upon known relevant threats. Either a mitigating action plan and/or risk acceptance with valid business reasons is required as a response to each identified risk. The results of the Information Security Risk Assessment are available to senior management for review and approval.


text: Education and Awareness: Security Awareness training is provided for all new and existing employees that reviews information concerning cyber risks and user responsibilities and heightens awareness of cyber threats. Training is documented and reported to senior management when appropriate.


companyName: RIDGEWOOD ENERGY V FUND LLC


companyName: Ridgewood Energy W Fund LLC


text: An Incident Response Plan that dictates how the Manager prepares, identifies, contains, remediates, and recovers from various vulnerabilities, threats, and events, including cybersecurity events impacting the Fund.


companyName: RIDGEWOOD ENERGY X FUND, LLC


companyName: RIDGEWOOD ENERGY Y FUND LLC


text: The Company recognizes the importance of assessing, identifying, and managing material risks associated with cybersecurity threats (as defined in Item 106(a) of Regulation S-K). These risks include, among others, operational risks, fraud, and violation of privacy. The Company, a shell entity, does not have processes in place since cybersecurity is not a risk to the Company due to the size of the Company, nature of its operations, and the number of transactions during the year. As needed, and in order to keep the Company informed of new and evolving cybersecurity risks, the Company consults with external parties such as information technology experts about risk management and strategy.

companyName: Wright Investors Service Holdings, Inc.

ticker: IWSH


text: The audit committee assists the board of directors in fulfilling its oversight responsibilities with respect to the adequacy and effectiveness of the Company's information security policies and practices and the internal controls regarding information security risks. The board and its committees engage with management to discuss potential enterprise risks, including matters related to cybersecurity.


text: We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.


text: The Trust does not have any officers, directors or employees. The Sponsor, a subsidiary of WisdomTree, Inc., is responsible for the oversight and overall management of the Trust. The Sponsor relies on WisdomTree Inc.'s cybersecurity framework for the Trust's cybersecurity risk management and strategy. Key aspects of such framework are summarized below.

companyName: WisdomTree Bitcoin Fund

ticker: BTCW


text: WisdomTree Inc.'s enterprise-wide cybersecurity risk management policies and procedures are informed by industry standards, and they are designed to address cybersecurity risks identified by external auditors and assessors, threat intelligence providers, internal stakeholders, vulnerability management programs and security management programs. WisdomTree Inc.'s team of information technology and cybersecurity professionals, led by its Chief Information Officer, or CIO, manages and maintains remediation strategies for identified cybersecurity risks.


text: Inc.'s cybersecurity risk management program is designed to be aligned with its business strategy. It shares common methodologies, reporting channels and governance processes that apply to other areas of enterprise risk, including legal, compliance, strategic, operational and financial risk.


text: The cybersecurity risk management program and related operations and processes are directed by WisdomTree Inc.'s CIO. Currently, the CIO role is held by an individual who has been in the role for over nine years, has over 22 years of cybersecurity, information technology and systems engineering experience, and has advanced training in the field of technology.


text: CIO is a member of WisdomTree, Inc.'s Governance Committee and regularly reports on cybersecurity risk management to other members of the Governance Committee comprised of WisdomTree Inc.'s senior executive officers. The Governance Committee oversees the prioritization and escalation of risks from cybersecurity threats and is responsible for strategy, operations, financial management, information technology, compliance, legal, administration and corporate governance. The members of the Governance Committee collectively possess experience in these areas, including cybersecurity and risk management.


text: The audit committee of WisdomTree, Inc. (the "Audit Committee") oversees the management of cybersecurity risks. Pursuant to the Audit Committee charter, the Audit Committee is responsible for discussing cybersecurity-related risks with management and the steps management has taken to monitor and control such risks, including WisdomTree Inc.'s risk assessment and risk management policies. The CIO regularly reports to the Audit Committee on cybersecurity risks, and the chair of the Audit Committee reports on these discussions with the full board of directors of WisdomTree, Inc. In addition, the CIO provides periodic reports to the board of directors.


text: As of December 31, 2023, cybersecurity risks have not materially affected the Trust's business strategy, results of operations or financial condition. However, the Trust can provide no assurance that there will not be cybersecurity threats or incidents in the future or that they will not materially affect the Trust. For more information regarding the risks the Trust faces from cybersecurity threats, see Item 1A. "Risk Factors" included in this report.


text: Cyber criminals are becoming more sophisticated and effective every day, and they are increasingly targeting enterprise software companies. All companies utilizing technology are subject to threats of breaches of their cybersecurity programs. To mitigate the threat to our business, we have begun to establish a comprehensive approach to cybersecurity risk management and hold securing the data customers and other stakeholders entrust to us as one of our top priorities. As described in more detail below, we have established policies, standards, processes and practices for testing, training, and monitoring material risks from cybersecurity threats. We have devoted financial and personnel resources to implement security measures to meet regulatory requirements and customer expectations, and we intend to continue to make investments to maintain the security of our data and cybersecurity infrastructure. There can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective. Although our Risk Factors include further detail about the material cybersecurity risks we face, we believe that risks have not materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that they will not materially affect us, including our business strategy, results of operations, or financial condition.

companyName: VerifyMe, Inc.

ticker: VRME


text: We are in the process of establishing controls and procedures designed to ensure prompt escalation of material cybersecurity incidents so that decisions regarding public disclosure and reporting of such incidents can be made by management and the Board in a timely manner. We intend to continue to review and enhance our incident response and recovery plan for the Company Our policies require each of our employees to contribute to our data security efforts. We regularly remind employees of the importance of handling and protecting customer and employee data, including through annual privacy and security training to enhance employee awareness of how to detect and respond to cybersecurity threats. Our incident response and recovery plans and policies will address — and guide our employees, management and the Board on our response to a cybersecurity incident.


text: Our cybersecurity policies, standards, processes and practices are also assessed by third party cybersecurity providers. These assessments include a variety of activities including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness.


text: Our Board of Directors is responsible for monitoring and assessing strategic risk exposure related to cybersecurity risks, and our executive officers are responsible for the day-to-day assessment and management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole.


text: Currently, Jack Wang, our chief information officer of our subsidiary PeriShip Global, has primary responsibility for managing material cybersecurity risks over our Precision Logistics Segment while Paul Ryan, Executive Vice President, Authentication Segment, has the primary responsibility for assessing and managing material cybersecurity risks over our Authentication Segment. Mr. Wang holds an undergraduate and master's degree in computer science. Our CIO has served in various roles in information technology and security for over 20 years. Mr. Ryan has 30 years of experience in global software and technology businesses. Both Mr. Wang and Mr. Ryan are responsible for reporting any cybersecurity related incidents to our executive officers. Our executive officers are responsible for reporting material cybersecurity related incidents to our Board of Directors.


text: We intend to review our current reporting structure and may implement other structures governing the day-to-day management and reporting of cybersecurity risks.


text: Cybersecurity Program Overview As part of our overall risk management processes and procedures, we have instituted a cybersecurity program designed to identify, assess and manage material risks from cybersecurity threats. The cyber risk management program involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity program, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We have implemented policies to ensure we can control and monitor all devices that may have access to our protected information. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. Our risk management, legal, and compliance personnel oversee and identify material risks from cybersecurity threats associated with our use of such entities.

companyName: Nxu, Inc.

ticker: NXUR


text: Board Oversight of Cybersecurity Risks Our Board provides strategic oversight on cybersecurity matters, including material risks associated with cybersecurity threats. Our Board receives periodic updates from our Chief Legal Officer, President, and Director of Information Technology and more frequently as needed, regarding the overall state of our cybersecurity program, information on the current threat landscape, and material risks from cybersecurity threats and cybersecurity incidents.


text: Management's Role in Cybersecurity Risk Management Our management team, including our Chief Legal Officer, President, and Director of Information Technology is responsible for assessing and managing material risks from cybersecurity threats. Members of our management team possess relevant expertise in various disciplines that are key to effectively managing such risks, such as technology systems, technology leadership, technological development, cybersecurity, regulatory compliance and corporate governance. Our Director of Information Technology has over 10 years of experience in technology systems and cybersecurity and has the requisite training, skills, and experience to manage our cybersecurity risks. Our management team is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents, including through the receipt of notifications from third-party service providers and reliance on communications with our risk management, legal, and/or compliance personnel.


text: Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats are assessed on an ongoing basis, and how such risks could materially affect our business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, we have not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that we believe have materially affected, or are reasonably likely to materially affect, us, including our business strategy, operational results, and financial condition.


text: Our corporate information technology, communication networks, enterprise applications, accounting and financial reporting platforms, and related systems, and those that we offer to our customers are necessary for the operation of our business. We use these systems, among others, to manage our customer and vendor relationships, for internal communications, for accounting to operate record-keeping functions, and for many other key aspects of our business. Our business operations rely on the secure collection, storage, transmission, and other processing of proprietary, confidential, and sensitive data.

companyName: REGO PAYMENT ARCHITECTURES, INC.

ticker: RPMT


text: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and tenant data ("Information Systems and Data"). We identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment and our risk profile using various methods.


text: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards, and/or policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including risk assessments and incident detection and response. We work with third parties from time to time that assist us to identify, assess, and manage cybersecurity risks, including professional services firms and consulting firms.


text: To operate our business, we utilize certain third-party service providers to perform a variety of functions. We seek to engage reliable, reputable service providers that maintain cybersecurity programs.


text: We are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations, or financial condition.


text: Our full Board oversees the Company's enterprise risk management process, including the management of risks arising from cybersecurity threats. The Board receives prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed.


text: Management plays a crucial role in assessing and managing material risks from cybersecurity threats. At the management level, the Company's cybersecurity risk management and strategy is led by its Head of Product and Operations, who reports to the CEO. The qualifications of the Head of Product and Operations include over 20 years of IT management, cybersecurity, and information governance experience. The Head of Product and Operations is regularly informed about the latest developments in cybersecurity, including emerging threats and technologies to adapt security measures accordingly. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents.


text: Risk Assessment: Management conducts annual cybersecurity risk assessments to identify and evaluate potential threats and vulnerabilities. Management considers the likelihood and potential impact of various cybersecurity risks, considering the Company's assets, systems, and operations, to prioritize mitigation efforts. Compliance with Regulations: Management implements and maintains compliance with relevant cybersecurity regulations and standards applicable to the Company.


text: The Head of Product and Operations is promptly informed of potential cybersecurity risks, threats, and vulnerabilities by any employees or consultants. Once an incident has been identified, the Head of Product and Operations and the security consulting team assess the criticality and impact of the incident on the Company's business operations. The Head of Product and Operations then formulates and oversees a response to contain, eradicate and resolve incidents in accordance with the Company's incident response plan. Management is responsible for reporting incidents to the appropriate authorities as necessary and engaging the senior leadership on all material incidents.


text: As a blank check company, we have no operations and therefore do not have any operations of our own that face cybersecurity threats. Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates. Therefore, we do not consider that we face significant cybersecurity risk and have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk.

companyName: Ault Disruptive Technologies Corp


text: However, we do depend on the digital technologies of third parties, and as noted in Item 1A. Risk Factors of this Form 10-K, any sophisticated and deliberate attacks on, or security breaches in, systems or infrastructure or the cloud that we utilize, including those of third parties, could lead to corruption or misappropriation of our assets, proprietary information and sensitive or confidential data. Because of our reliance on the technologies of third parties, we also depend upon the personnel and the processes of third parties to protect against cybersecurity threats, and we have no personnel or processes of our own for this purpose. Our board of directors oversees risk for our Company, and prior to filings with the SEC, our board of directors reviews our risk factors, including the descriptions of the risks we face from cybersecurity threats, as described in Item 1A. Risk Factors of this Form 10-K. In fiscal year 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.


text: Information Security Program Our information security organization safeguards the confidentiality, integrity, and availability of our systems, services, and data. We employ skilled security and technology professionals, both internal and external, and continually invest in the resources necessary to adapt and counter evolving cybersecurity threats. Our work is overseen by the Task Force (as defined below) for strategic guidance and accountability.

companyName: TurnOnGreen, Inc.

ticker: TOGI


text: Our information security program incorporates a robust cybersecurity risk management strategy. This strategy prioritizes continuous improvement and ensures the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We leverage industry best practices, including guidance from the National Institute of Standards and Technology (NIST), to identify, assess, and manage cybersecurity risks relevant to our business. While we don't adhere to any specific technical standards or specifications, NIST provides a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Risk Identification: We proactively identify potential threats across our facilities, vendors, operations, systems, and broader IT environment. Threat intelligence, current attack trends, and industry-specific threats inform our risk assessments. Risk Evaluation: We conduct regular risk assessments to measure our preparedness against identified threats. Actionable Plans: We ensure risk is addressed and tracking any necessary remediation through an action plan.


text: While cybersecurity risks are inherent to our industry, we have experienced no material impact on our business strategy, operations, or financial condition to date. We remain vigilant in managing these risks through our comprehensive security program.


text: Management is responsible for the cybersecurity risk management program as well as actions to identify, assess, mitigate, and remediate material issues. The Company's cybersecurity risk management program is supervised by our Chief Technology Officer ("CTO"), who reports directly to the Company's Chief Executive Officer. The CTO and his team are responsible for leading cybersecurity strategy, policy, standards, architecture and processes.


text: Our board of directors has ultimate oversight of and is charged of cybersecurity matters and receives reports from the CTO on, among other things, the Company's cyber risks and threats, the status of projects to strengthen the Company's information security systems, and the emerging threat landscape. In accordance with our cyber incident response plan, the board of directors is promptly informed by management of cybersecurity incidents with the potential to materially adversely affect the Company or its information systems and is regularly updated about incidents with lesser impact potential. At least annually, the board of directors reviews and discusses the Company's technology strategy in combination with the Company's strategic objectives with Management.


text: In an effort to detect and defend against cyber threats, the Company annually provides its employees with various cybersecurity and data protection training programs. These programs cover timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educate employees on the importance of reporting all incidents promptly.


text: The mission of our information security program is to design, implement, and maintain a comprehensive information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. Our information security program is comprised of internal and external security and technology professionals who work collaboratively to identify, assess, manage, and mitigate cybersecurity risks and threats across the Company, our subsidiaries, and third-party contractors.

companyName: Hyperscale Data, Inc.

ticker: GPUS


text: We recognize the importance of effectively managing material risks associated with cybersecurity threats, as defined in Item 106(a) of Regulation S-K. Our risk management program integrates the monitoring and management of these risks and threats and is informed by applicable laws, regulations, industry standards, and best practices. We continue to invest in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.


text: Our information security organization is committed to maintaining a robust and resilient security posture that enables us to protect our assets, maintain our stakeholders' trust, and support our business's overall success.


text: Our cybersecurity risk management and strategy are integral components of our comprehensive information security program. They guide our continuous efforts to evaluate and improve the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We have adopted an Information Security Policy (the "Info-Sec Policy") and an Incident Response Plan (the "Response Plan") that establish administrative, physical, and technical controls and procedures to protect sensitive data throughout the Company. These policies also outline processes to assess, identify, manage, and report cybersecurity risks and incidents. The Info-Sec Policy applies to all persons working for the Company and any third parties working with us in any capacity.


text: Our approach to controls and risk management is informed by applicable laws and regulations, as well as industry standards and best practices. These serve as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Identifying cybersecurity risks that could impact our facilities, third-party vendors/partners, operations, critical systems, information, and broader enterprise information technology environment. Risks are informed by threat intelligence, current and historical adversarial activity, and industry-specific threats; Performing cybersecurity risk assessments to evaluate our readiness if the risks were to materialize; Ensuring risk is addressed and tracking any necessary remediation through an action plan;


text: Analyzing all third-party vendors for compliance with our internal Info-Sec Policy to assess potential risks associated with their security controls. We generally require third parties to maintain security controls, notify us promptly of any data breach or cybersecurity incident that may impact our data, and provide written assurance of corrective actions; and Engaging and utilizing a comprehensive suite of security solutions, including enterprise mobility management, endpoint protection, secure file transfer, and security information and event management to monitor and actively respond to cybersecurity threats. These solutions work together to secure our endpoints, protect against malware, ensure the safe transfer of files, and provide our cybersecurity team with the functionality to build alerts on specific use cases that are important and unique to our business.


text: Our Board oversees cybersecurity risk as part of its overall risk oversight function. Our information technology department (the "IT Department"), which functions as our Information Security Advisory Team, is responsible for managing our information security program and implementing cybersecurity risk management practices. The IT Department is led by our Chief Technology Officer and Chief Information Officer, who oversee our cybersecurity strategy and ensure its alignment with business objectives.


text: The IT Department collaborates with various stakeholders across the organization to identify, assess, and mitigate cybersecurity risks. They regularly monitor and adapt our information security program to address the evolving threat landscape.


text: In the event of a cybersecurity incident, the IT Department promptly reports the matter to the Executive Committee, which consists of our senior leadership team. The Executive Committee is responsible for assessing the severity and potential impact of the incident and determining the appropriate course of action. The Executive Committee keeps the Board informed of significant cybersecurity incidents and provides updates on the overall status of our cybersecurity program as needed.


text: This governance structure ensures that cybersecurity risks are effectively managed by the IT Department, with oversight from the Executive Committee and the Board. It maintains clear lines of communication and accountability, enabling timely decision-making and response to cybersecurity matters.


text: In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not successfully eliminate all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred.


text: The Company recognizes the critical importance of cybersecurity in safeguarding sensitive information, maintaining operational resilience, and protecting its customers and stakeholders' interests. A cybersecurity policy should be designed to establish a comprehensive framework for identifying, assessing, mitigating, and responding to cybersecurity risks across the organization.

companyName: NETWORK CN INC

ticker: NWCN


text: At such time as the Company possesses sufficient resources, it will establish a cybersecurity policy appropriate for our business which implements protocols to evaluate, recognize, and address significant risks, including those posed by cybersecurity threats. As part of this strategy, we expect to incorporate standard traffic monitoring tools, educate our personnel to identify and report abnormal activities, and partner with reputable service providers capable of upholding security standards equivalent to or exceeding our own.


text: We will seek to integrate these measures into our broader operational risk management framework aimed at minimizing exposure to unnecessary risks across our operations. We may work with outside consultants and third-party service providers to implement industry-standard strategies aimed at identifying and mitigating potential threats or vulnerabilities within our systems. Additionally, we expect that our policy strategy will include a comprehensive cyber crisis response plan to manage high severity security incidents, ensuring efficient coordination across the organization.


text: Cybersecurity threats have not significantly impacted our operations, and we do not anticipate such risks materially affecting our business, strategy, financial condition, or results of operations.


text: However, given the escalating sophistication of cyber threats, the preventive measures we adopt may not always suffice. Despite well-designed controls, we acknowledge the inability to foresee all security breaches, including those stemming from third-party misuse of artificial intelligence ("AI") technologies, and the potential challenges in implementing timely preventive measures.


text: Our Chief Executive Officer will oversee our information security programs, including cybersecurity initiatives, and is integrated into the cybersecurity the incident response process that we adopt. Our board of directors will oversee cybersecurity risk management activities, supported by Company management and external consultants.


text: The mission of our information security program is to design, implement, and maintain a comprehensive information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. Our information security program is comprised of internal and external security and technology professionals who work collaboratively to identify, assess, manage, and mitigate cybersecurity risks and threats across our company, our subsidiaries, and third-party contractors.

companyName: RiskOn International, Inc.


text: We recognize the importance of effectively managing material risks associated with cybersecurity threats, as defined in Item 106(a) of Regulation S-K. Our risk management program integrates the monitoring and management of these risks and threats and is informed by applicable laws, regulations, industry standards, and best practices. We continue to invest in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.


text: Our information security organization is committed to maintaining a robust and resilient security posture that enables us to protect our assets, maintain our stakeholders' trust, and support our business's overall success.


text: Our cybersecurity risk management and strategy are integral components of our comprehensive information security program. They guide our continuous efforts to evaluate and improve the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We have adopted an Information Security Policy (the "Info-Sec Policy") and an Incident Response Plan (the "Response Plan") that establish administrative, physical, and technical controls and procedures to protect sensitive data throughout the Company. These policies also outline processes to assess, identify, manage, and report cybersecurity risks and incidents. The Info-Sec Policy applies to all persons working for the Company and any third parties working with us in any capacity.


text: Our approach to controls and risk management is informed by applicable laws and regulations, as well as industry standards and best practices. These serve as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Identifying cybersecurity risks that could impact our facilities, third-party vendors/partners, operations, critical systems, information, and broader enterprise information technology environment. Risks are informed by threat intelligence, current and historical adversarial activity, and industry-specific threats; Performing cybersecurity risk assessments to evaluate our readiness if the risks were to materialize; Ensuring risk is addressed and tracking any necessary remediation through an action plan;


text: Analyzing all third-party vendors for compliance with our internal Info-Sec Policy to assess potential risks associated with their security controls. We generally require third parties to maintain security controls, notify us promptly of any data breach or cybersecurity incident that may impact our data, and provide written assurance of corrective actions; and Engaging and utilizing a comprehensive suite of security solutions, including enterprise mobility management, endpoint protection, secure file transfer, and security information and event management to monitor and actively respond to cybersecurity threats. These solutions work together to secure our endpoints, protect against malware, ensure the safe transfer of files, and provide our cybersecurity team with the functionality to build alerts on specific use cases that are important and unique to our business.


text: Our Board oversees cybersecurity risk as part of its overall risk oversight function. Our information technology department (the "IT Department"), which functions as our Information Security Advisory Team, is responsible for managing our information security program and implementing cybersecurity risk management practices. The IT Department is led by our Chief Executive Officer and our Chief Technology Officer (the "IT Officers"), who oversee our cybersecurity strategy and ensure its alignment with business objectives.


text: The IT Department collaborates with various stakeholders across the organization to identify, assess, and mitigate cybersecurity risks. They regularly monitor and adapt our information security program to address the evolving threat landscape.


text: In the event of a cybersecurity incident, the IT Department promptly reports the matter to the Board. The Board is ultimately responsible for assessing the severity and potential impact of the incident and determining the appropriate course of action. The IT Officers keep the Board informed of significant cybersecurity incidents and provides updates on the overall status of our cybersecurity program as needed.


text: This governance structure ensures that cybersecurity risks are effectively managed by the IT Department, with oversight from the IT Officers and the Board. It maintains clear lines of communication and accountability, enabling timely decision-making and response to cybersecurity matters.


text: In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not successfully eliminate all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred.


text: The Company manages cybersecurity and data protection through a continuously evolving framework. The framework is intended to allow us to identify, assess and mitigate the various risks we face, and assists us in establishing policies and safeguards, which are modified as new cybersecurity risks and incidents occur, to protect our systems and the information of those we serve. Our cybersecurity program is managed by our Chief Information Security Officer. The Audit Committee of the Board of Directors has oversight of our cybersecurity policy and is responsible for reviewing and assessing the Company's cybersecurity risk management, procedures and resource commitment, including key risk areas and mitigation strategies.

companyName: Value Exchange International, Inc.

ticker: VEII


text: As part of this process, the Audit Committee receives regular updates from the Chief Information Security Officer on critical issues related to our information security risks, cybersecurity strategy, supplier risk and business continuity capabilities.


text: The Company's framework includes an incident management and response program that monitors the Company's information systems for vulnerabilities, threats and incidents; manages and takes action to contain incidents that occur; remediates vulnerabilities; and communicates the details of threats and incidents to management, including the Chief Information Security Officer, as deemed necessary or appropriate. Pursuant to the Company's incident response plan, incidents are reported to the Audit Committee, appropriate government agencies and other authorities, as deemed necessary or appropriate, considering the actual or potential impact, significance and scope.


text: We work to require our third-party partners and contractors to handle data in accordance with our data privacy and information security requirements and applicable laws. We regularly engage with our suppliers, partners, contractors, service providers and internal development teams to identify and remediate vulnerabilities in a timely manner and monitor system upgrades to mitigate future risk, and ensure they employ appropriate and effective controls and continuity plans for their systems and operations.


text: To ensure that our program is designed and operating effectively, we perform regular vulnerability assessments and penetration tests to improve system security and address emerging security threats. We complete an enterprise information risk assessment as part of our overall enterprise information security risk management assessment, which is overseen by our Chief Information Security Officer. This risk assessment is a review of internal and external threats that evaluates changes to the information risk landscape to inform the program enhancements to be made in the future to rapidly respond and recover from potential attacks, including rebuild and recovery protocols for key systems. We evaluate our enterprise information security risk to ensure we address any unexpected or unforeseen changes in the risk environment or our systems and the resulting impacts are communicated to the Company's overall enterprise risk management program. We believe our Chief Information Security Officer, who has over 20 years of experience managing information technology and cybersecurity matters, has the appropriate knowledge, experience and expertise to effectively manage our cybersecurity program.


text: The Board of Directors has oversight for the most significant risks facing us and for our processes to identify, prioritize, assess, manage, and mitigate those risks. The Audit Committee has been designated by our Board to oversee cybersecurity risks. The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our Chief Information Security Officer as well as other members of the senior leadership team. The Board also receives periodic updates from management and the Audit Committee on cybersecurity risks.


text: As of December 31, 2023, the Company had not identified any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition, but there can be no assurance that any such risk will not materially affect the Company in the future, especially in light of the continuing efforts of sophisticated hackers to develop new means, and more effective versions of existing means, accessing and fraudulently exploiting companies' computer and network systems and communications systems. For further information about the cybersecurity risks we face, and potential impacts, see Part I, Item 1A, "Risk Factors."


text: April 2024 Email Spoofing Incident. At 10:25 p.m., local Hong Kong SAR time, on April 9, 2024, the Company received information that indicated a possible email spoofing incident involving a wire transfer payment of accounting fees owed to the Company's public auditor. By April 11, 2024, the Company verified that the Company had wired $30,825 as an intended payment of accounting fees owed to the public auditor to a third-party bank account on March 27, 2024, as a result of email spoofing presenting an invoice under the identity of the public auditor. An internal incident report was distributed by the Company's Chief Information Security Officer about this email spoofing incident to Company's senior officers, finance department personnel, Audit Committee and the Board. Based on conversations with Company's bank and local law enforcement, the Company does not believe that recovery of the $30,825 payment is possible. As a result of an internal review of this email spoofing incident involving the senior officers of the Company, the Company's Chief Information Security Officer and Company's Audit Committee, the Company adopted the following actions as of April 12, 2024: - Only verified email addresses allowed for incoming and outgoing emails by the Company email system; - Briefing company personnel about the incident and cybersecurity safeguard measures adopted;


text: - Overall enterprise information security risk management assessment, overseen by our Chief Information Security Officer, to determine any additional safeguards, both technology based and internal processes, for email spoofing and related cybersecurity risks; and - Established regular cybersecurity and information technology matters and related risk exposure reports and briefings of Audit Committee.


text: The Company does not believe the April 2024 email spoofing incident was "material" due to the limited amount of money involved and the corrective measures adopted to prevent future incidents of a similar nature.


text: The Company identified another email spoofing effort in May 2014 by a scammer pretending to be one of the Company's subsidiaries and asking an existing customer for payment owed to the subsidiary to be sent to the scammer's bank account. This effort was detected by the Company and the customer and no money was sent to the scammer's bank account.


text: Company or its legal counsel filed reports of these incidents with appropriate regulatory and enforcement agencies in the appropriate jurisdictions.


text: The mission of our information security program is to design, implement, and maintain a comprehensive information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. Our information security program is comprised of internal and external security and technology professionals who work collaboratively to identify, assess, manage, and mitigate cybersecurity risks and threats across the Company and third-party contractors.

companyName: Alzamend Neuro, Inc.

ticker: ALZN


text: We recognize the importance of effectively managing material risks associated with cybersecurity threats, as defined in Item 106(a) of Regulation S-K. Our risk management program integrates the monitoring and management of these risks and threats and is informed by applicable laws, regulations, industry standards, and best practices. We continue to invest in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.


text: Our information security organization is committed to maintaining a robust and resilient security posture that enables us to protect our assets, maintain our stakeholders' trust, and support our business's overall success.


text: Our cybersecurity risk management and strategy are integral components of our comprehensive information security program. They guide our continuous efforts to evaluate and improve the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We have adopted an Information Security Policy (the "Info-Sec Policy") and an Incident Response Plan (the "Response Plan") that establish administrative, physical, and technical controls and procedures to protect sensitive data throughout the Company. These policies also outline processes to assess, identify, manage, and report cybersecurity risks and incidents. The Info-Sec Policy applies to all persons working for the Company and any third parties working with us in any capacity.


text: Our approach to controls and risk management is informed by applicable laws and regulations, as well as industry standards and best practices. These serve as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Identifying cybersecurity risks that could impact our facilities, third-party vendors/partners, operations, critical systems, information, and broader enterprise information technology environment. Risks are informed by threat intelligence, current and historical adversarial activity, and industry-specific threats; Performing cybersecurity risk assessments to evaluate our readiness if the risks were to materialize; Ensuring risk is addressed and tracking any necessary remediation through an action plan;


text: Analyzing all third-party vendors for compliance with our internal Info-Sec Policy to assess potential risks associated with their security controls. We generally require third parties to maintain security controls, notify us promptly of any data breach or cybersecurity incident that may impact our data, and provide written assurance of corrective actions; and Engaging and utilizing a comprehensive suite of security solutions, including enterprise mobility management, endpoint protection, secure file transfer, and security information and event management to monitor and actively respond to cybersecurity threats. These solutions work together to secure our endpoints, protect against malware, ensure the safe transfer of files, and provide our cybersecurity team with the functionality to build alerts on specific use cases that are important and unique to our business.


text: Our Board oversees cybersecurity risk as part of its overall risk oversight function. We utilize resources from AULT to act as our information technology department (the "IT Department"), which functions as our Information Security Advisory Team. The IT Department is responsible for managing our information security program and implementing cybersecurity risk management practices.


text: The IT Department collaborates with various stakeholders across the organization to identify, assess, and mitigate cybersecurity risks. They regularly monitor and adapt our information security program to address the evolving threat landscape.


text: In the event of a cybersecurity incident, the IT Department promptly reports the matter to the Chief Financial Officer. The Chief Financial Officer is responsible for assessing the severity and potential impact of the incident and determining the appropriate course of action. The Chief Financial Officer keeps the Board informed of significant cybersecurity incidents and provides updates on the overall status of our cybersecurity program as needed.


text: This governance structure ensures that cybersecurity risks are effectively managed by the IT Department, with oversight from the Chief Financial Officer and the Board. It maintains clear lines of communication and accountability, enabling timely decision-making and response to cybersecurity matters.


text: During fiscal 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not successfully eliminate all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred.


text: The Company recognizes the critical importance of maintaining the safety and security of our systems and data amidst an ever-evolving landscape of cybersecurity threats and has adopted a process for overseeing and managing cybersecurity and related risks.

companyName: Good Times Restaurants Inc.

ticker: GTIM


text: Our approach to cybersecurity encompasses a wide range of strategies, practices, and technologies designed to safeguard our systems and data. This process involves continuous monitoring, risk assessment, implementation of advanced security measures, and regular updates to our protocols to address emerging threats.


text: As of the date of this report, we are not aware of any cybersecurity incidents that have had a material effect on our operations, business, results of operations, or financial condition.


text: As part of the Company's overall risk management strategy, the Company has instituted a cybersecurity risk management program and a set of procedures to protect, identify, detect, respond to, and manage reasonably foreseeable cybersecurity risks and threats. A variety of security tools are utilized to prevent, identify, investigate, address, and recover from identified vulnerabilities and security incidents. We employ security technologies, including firewalls, encryption, intrusion detection systems, and multi-factor authentication. In addition, we purchase cybersecurity insurance through a reputable carrier, which includes access to a breach coach and a preferred panel of experienced, qualified vendors to respond to an actual attack.


text: There can be no assurances that our cybersecurity risk management program, including policies, controls, or procedures will be effective in preventing successful attacks on our information technology infrastructure or digital assets, or that the limits of our cybersecurity policy will be sufficient to cover losses which could be incurred in a successful attack.


text: Personnel and Third-Party Engageme nt Our Information Technology department is led by the Director of Technology who has more than twenty years of experience in technology management and cybersecurity, conducts regular risk assessments and continuously monitors our networks and systems.


text: The Company engages third party risk security vendors to identify, mitigate, and remediate cybersecurity risks. A third-party vendor is utilized to perform quarterly scans of all our network endpoints. Any issues identified by the scans are remediated. Annual penetration tests are conducted, which simulate real-world threats, including social engineering threats, to the Company's network and other digital assets. These tests include comprehensive "Dark Web" searches of all domain user emails. We require the annual submission of SOC 1 security certificates from third party vendors that provide systems underlying our financial reporting infrastructure or with access to our financial and sales data.


text: The Director's presentation at the Company's monthly senior leadership meeting, led by the CEO, includes the results of the most recent scans and routine testing. Should a cybersecurity incident occur, the Director would immediately report it to the CEO, who would report any material cybersecurity breach promptly to the Company's Board of Directors.


text: The Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Audit Committee has the primary responsibility to oversee effective governance in managing risks associated with cybersecurity threats. At each quarterly Audit Committee meeting, Management presents a cybersecurity update, which includes results of testing by third-party vendors and any suspected cybersecurity incidents.


text: Pursuant to the terms of the Fund's LLC Agreement, the Manager renders management, advisory and administrative services to the Fund, which includes the assessing, identifying, and managing of material risks from cybersecurity threats through its Corporate IT Security Governance program. Ridgewood Energy's Corporate IT Security Governance program consists of an information security framework and organizational structure with senior management oversight that are designed to safeguard critical information assets. Cybersecurity risk is evaluated based upon risk-based approach.

companyName: RIDGEWOOD ENERGY A-1 FUND LLC


text: An analysis of information and technology assets that ranks the assets based upon their risk of potential internal and external threats and the impact of the potential loss of integrity, confidentiality, and availability of that asset is updated as appropriate. An Information Security Risk Assessment led by the Manager's Chief Information Officer ("CIO") is performed on an annual basis, and/or upon major changes of cybersecurity related processes and infrastructure, for evaluating the potential impacts to key technology, processes, and people upon known relevant threats. Either a mitigating action plan and/or risk acceptance with valid business reasons is required as a response to each identified risk. The results of the Information Security Risk Assessment are available to senior management for review and approval.


text: The Manager has developed and implemented additional programs that assist in reducing risk and providing additional protection of confidential information including:


text: Collaborative Approach: A comprehensive, cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by senior management in a timely manner.


text: Technical Safeguards: Technical safeguards designed to protect the Fund's information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: Incidence Response and Recovery Planning: An Incident Response Plan that dictates how the Manager prepares, identifies, contains, remediates, and recovers from various vulnerabilities, threats, and events, including cybersecurity events impacting the Fund.


text: A comprehensive, risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of the Manager's systems, as well as the systems of third-parties that could adversely impact the Fund and its investors in the event of a cybersecurity incident affecting those third-party systems.


text: Education and Awareness: Security Awareness training is provided for all new and existing employees that reviews information concerning cyber risks and user responsibilities and heightens awareness of cyber threats. Training is documented and reported to senior management when appropriate.


text: The Fund does not have its own board of directors or any board committees. The Fund relies upon the senior management oversight of the Manager reporting cybersecurity risks to the executive officers of the Fund. The Manager has a Cyber Risk Committee in place comprised of the CIO and other executive officers of the Fund that is responsible for reviewing and approving or rejecting escalated non-standard IT change requests. The CIO communicates regularly and serves as the Fund's representation to address significant information technology activities and initiatives. The CIO has more than twenty years of experience as an information technology professional and has been CIO since 2007. The CIO has periodic calls with a third-party virtual Chief Information Security Officer on review of policy and procedures best practices and cybersecurity threats.


text: In 2024, there were no risks from cybersecurity threats that have materially affected or reasonably likely to materially affect the Fund, its business strategy, results of operations or financial condition.


text: Pursuant to the terms of the Fund's LLC Agreement, the Manager renders management, advisory and administrative services to the Fund, which includes the assessing, identifying, and managing of material risks from cybersecurity threats through its Corporate IT Security Governance program. Ridgewood Energy's Corporate IT Security Governance program consists of an information security framework and organizational structure with senior management oversight that are designed to safeguard critical information assets.

companyName: Ridgewood Energy O Fund LLC


text: Cybersecurity risk is evaluated based upon risk-based approach. An analysis of information and technology assets that ranks the assets based upon their risk of potential internal and external threats and the impact of the potential loss of integrity, confidentiality, and availability of that asset is updated as appropriate.


text: An Information Security Risk Assessment led by the Manager's Chief Information Officer ("CIO") is performed on an annual basis, and/or upon major changes of cybersecurity related processes and infrastructure, for evaluating the potential impacts to key technology, processes, and people upon known relevant threats. Either a mitigating action plan and/or risk acceptance with valid business reasons is required as a response to each identified risk. The results of the Information Security Risk Assessment are available to senior management for review and approval.


companyName: RIDGEWOOD ENERGY Q FUND LLC


companyName: RIDGEWOOD ENERGY S FUND LLC


text: Education and Awareness: Security Awareness training is provided for all new and existing employees that reviews information concerning cyber risks and user responsibilities, and heightens awareness of cyber threats. Training is documented and reported to senior management when appropriate.


companyName: RIDGEWOOD ENERGY T FUND LLC


companyName: Ridgewood Energy U Fund LLC


companyName: RIDGEWOOD ENERGY V FUND LLC


companyName: Ridgewood Energy W Fund LLC


text: An Incident Response Plan that dictates how the Manager prepares, identifies, contains, remediates, and recovers from various vulnerabilities, threats, and events, including cybersecurity events impacting the Fund.


companyName: RIDGEWOOD ENERGY X FUND, LLC


companyName: RIDGEWOOD ENERGY Y FUND LLC


text: Cyber criminals are becoming more sophisticated and effective every day, and they are increasingly targeting enterprise software companies. All companies utilizing technology are subject to threats of breaches of their cybersecurity programs. To mitigate the threat to our business, we have established a comprehensive approach to cybersecurity risk management and hold securing the data customers and other stakeholders entrust to us as one of our top priorities. As described in more detail below, we have established policies, standards, processes and practices for testing, training, and monitoring material risks from cybersecurity threats. We have devoted financial and personnel resources to implement security measures to meet regulatory requirements and customer expectations, and we intend to continue to make investments to maintain the security of our data and cybersecurity infrastructure. There can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective. Although our Risk Factors include further details about the material cybersecurity risks we face, we believe that risks have not materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that they will not materially affect us, including our business strategy, results of operations, or financial condition.

companyName: VerifyMe, Inc.


text: We have established controls and procedures designed to ensure prompt escalation of material cybersecurity incidents so that decisions regarding public disclosure and reporting of such incidents can be made by management and the Board in a timely manner. We intend to continue to review and enhance our incident response and recovery plan for the Company. Our policies require each of our employees to contribute to our data security efforts. We regularly remind employees of the importance of handling and protecting customer and employee data, including through annual privacy and security training to enhance employee awareness of how to detect and respond to cybersecurity threats. Our incident response and recovery plans and policies will address — and guide our employees, management and the Board on our response to a cybersecurity incident.


text: Our cybersecurity policies, standards, processes and practices are also assessed by third party cybersecurity providers. These assessments include a variety of activities including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness.


text: Our Board of Directors is responsible for monitoring and assessing strategic risk exposure related to cybersecurity risks, and our executive officers are responsible for the day-to-day assessment and management of the material risks we face. Our Board of Directors administers its cybersecurity risk oversight function directly as a whole.


text: Currently, Jack Wang senior advisor of our subsidiary PeriShip Global, has primary responsibility for managing material cybersecurity risks. Mr. Wang holds an undergraduate and master's degree in computer science and has served in various roles in information technology and security for over 20 years. Mr. Wang is responsible for reporting any cybersecurity related incidents to our executive officers. Our executive officers are responsible for reporting material cybersecurity related incidents to our Board of Directors. We may implement other reporting structures governing the day-to-day management and reporting of cybersecurity risks.


text: Cybersecurity Program Overview As part of our overall risk management processes and procedures, we have instituted a cybersecurity program designed to identify, assess and manage material risks from cybersecurity threats. The cyber risk management program involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. We have implemented policies to ensure we can control and monitor all devices that may have access to our protected information. We may engage external experts, including cybersecurity assessors, consultants and auditors, to evaluate cybersecurity measures and risk management processes as needed. Our Chief Financial Officer and President oversee and identify material risks from cybersecurity threats associated with our use of third-party service providers

companyName: Nxu, Inc.


text: Board Oversight of Cybersecurity Risks Our Board provides strategic oversight on cybersecurity matters, including material risks associated with cybersecurity threats. Our Board receives periodic updates from our Chief Executive Officer and President regarding the overall state of our cybersecurity program, information on the current threat landscape, and material risks from cybersecurity threats and cybersecurity incidents.


text: Management's Role in Cybersecurity Risk Management Our Chief Executive Officer and President are responsible for assessing and managing material risks from cybersecurity threats. Our Chief Executive Officer and President possess relevant expertise in various disciplines that are key to effectively managing such risks, such as technology systems, technology leadership, technological development, cybersecurity, regulatory compliance and corporate governance. Our Chief Executive Officer and President are informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents, including through the receipt of notifications from third-party service providers and reliance on communications with our Chief Financial Officer and legal personnel.


text: Assessment of Cybersecurity Risk The potential impact of risks from cybersecurity threats are assessed on an ongoing basis, and how such risks could materially affect our business strategy, operational results, and financial condition are regularly evaluated. During the reporting period, we have not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that we believe have materially affected, or are reasonably likely to materially affect, us, including our business strategy, operational results, and financial condition.


text: The Trust does not have any officers, directors or employees. The Sponsor, a subsidiary of WisdomTree, Inc., is responsible for the oversight and overall management of the Trust. The Sponsor relies on WisdomTree Inc.'s cybersecurity framework for the Trust's cybersecurity risk management and strategy. Key aspects of such framework are summarized below.

companyName: WisdomTree Bitcoin Fund


text: WisdomTree Inc.'s enterprise-wide cybersecurity risk management policies and procedures are informed by industry standards, and they are designed to address cybersecurity risks identified by external auditors and assessors, threat intelligence providers, internal stakeholders, vulnerability management programs and security management programs. WisdomTree Inc.'s team of information technology and cybersecurity professionals, led by its Chief Information Officer, or CIO, manages and maintains remediation strategies for identified cybersecurity risks.


text: WisdomTree Inc.'s cybersecurity risk management program is designed to be aligned with its business strategy. It shares common methodologies, reporting channels and governance processes that apply to other areas of enterprise risk, including legal, compliance, strategic, operational and financial risk.


text: Related to Cybersecurity Risks The cybersecurity risk management program and related operations and processes are directed by WisdomTree Inc.'s CIO. Currently, the CIO role is held by an individual who has been in the role for over ten years, has over 23 years of cybersecurity, information technology and systems engineering experience, and has advanced training in the field of technology.


text: The CIO is a member of WisdomTree, Inc.'s Governance Committee and regularly reports on cybersecurity risk management to other members of the Governance Committee comprised of WisdomTree Inc.'s senior executive officers. The Governance Committee oversees the prioritization and escalation of risks from cybersecurity threats and is responsible for strategy, operations, financial management, information technology, compliance, legal, administration and corporate governance. The members of the Governance Committee collectively possess experience in these areas, including cybersecurity and risk management.


text: The audit committee of WisdomTree, Inc. (the "Audit Committee") oversees the management of cybersecurity risks. Pursuant to the Audit Committee charter, the Audit Committee is responsible for discussing cybersecurity-related risks with management and the steps management has taken to monitor and control such risks, including WisdomTree Inc.'s risk assessment and risk management policies. The CIO regularly reports to the Audit Committee on cybersecurity risks, and the chair of the Audit Committee reports on these discussions with the full board of directors of WisdomTree, Inc. In addition, the CIO provides periodic reports to the board of directors.


text: As of December 31, 2024, cybersecurity risks have not materially affected the Trust's business strategy, results of operations or financial condition. However, the Trust can provide no assurance that there will not be cybersecurity threats or incidents in the future or that they will not materially affect the Trust. For more information regarding the risks the Trust faces from cybersecurity threats, see Item 1A. "Risk Factors" included in this report.


text: The Company recognizes the importance of assessing, identifying, and managing material risks associated with cybersecurity threats (as defined in Item 106(a) of Regulation S-K). These risks include, among others, operational risks, fraud, and violation of privacy. The Company, a shell entity, does not have processes in place since cybersecurity is not a risk to the Company due to the size of the Company, nature of its operations, and the number of transactions during the year. As needed, and in order to keep the Company informed of new and evolving cybersecurity risks, the Company consults with external parties such as information technology experts about risk management and strategy.

companyName: Wright Investors Service Holdings, Inc.


text: The audit committee assists the board of directors in fulfilling its oversight responsibilities with respect to the adequacy and effectiveness of the Company's information security policies and practices and the internal controls regarding information security risks. The board and its committees engage with management to discuss potential enterprise risks, including matters related to cybersecurity.


text: We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.


text: Our corporate information technology, communication networks, enterprise applications, accounting and financial reporting platforms, and related systems, and those that we offer to our customers are necessary for the operation of our business. We use these systems, among others, to manage our customer and vendor relationships, for internal communications, for accounting to operate record-keeping functions, and for many other key aspects of our business. Our business operations rely on the secure collection, storage, transmission, and other processing of proprietary, confidential, and sensitive data.

companyName: REGO PAYMENT ARCHITECTURES, INC.


text: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and tenant data ("Information Systems and Data").


text: We identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment and our risk profile using various methods.


text: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards, and/or policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including risk assessments and incident detection and response. We work with third parties from time to time that assist us to identify, assess, and manage cybersecurity risks, including professional services firms and consulting firms.


text: To operate our business, we utilize certain third-party service providers to perform a variety of functions. We seek to engage reliable, reputable service providers that maintain cybersecurity programs.


text: We are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations, or financial condition.


text: Our full Board of Directors (the "Board") oversees the Company's enterprise risk management process, including the management of risks arising from cybersecurity threats. The Board receives prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed.


text: Management plays a crucial role in assessing and managing material risks from cybersecurity threats. At the management level, the Company's cybersecurity risk management and strategy is led by its Head of Product and Operations, who reports to the CEO. The qualifications of the Head of Product and Operations include over 20 years of IT management, cybersecurity, and information governance experience. The Head of Product and Operations is regularly informed about the latest developments in cybersecurity, including emerging threats and technologies to adapt security measures accordingly. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents. Management's role includes:


text: Risk Assessment: Management conducts annual cybersecurity risk assessments to identify and evaluate potential threats and vulnerabilities. Management considers the likelihood and potential impact of various cybersecurity risks, considering the Company's assets, systems, and operations, to prioritize mitigation efforts. Compliance with Regulations: Management implements and maintains compliance with relevant cybersecurity regulations and standards applicable to the Company.


text: The Head of Product and Operations is promptly informed of potential cybersecurity risks, threats, and vulnerabilities by any employees or consultants. Once an incident has been identified, the Head of Product and Operations and the security consulting team assess the criticality and impact of the incident on the Company's business operations.


text: The Head of Product and Operations then formulates and oversees a response to contain, eradicate and resolve incidents in accordance with the Company's incident response plan. Management is responsible for reporting incidents to the appropriate authorities as necessary and engaging the senior leadership on all material incidents.


text: Our business is highly dependent on information technology. In the ordinary course of our business, we store sensitive data, including our proprietary business information and that of our business partners, and non-public personally identifiable information of mortgage borrowers, on our networks. The secure maintenance, processing and transmission of this information is critical to our operations. Computer malware, viruses, ransomware and phishing attacks remain widespread and are increasingly sophisticated. We are frequently the target of attempted cyber threats, as are many other organizations within the financial servicing industry. We continuously monitor and develop our information technology networks and infrastructure to help prevent, detect, address and mitigate the risk of unauthorized access, misuse, computer viruses, and other events that could have a security impact. Despite these security measures, our information technology and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other disruptions. Any such breach could compromise our networks and the information stored there could be accessed, publicly disclosed, lost or stolen. Such access, disclosure or other loss of information could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, regulatory penalties, disruption to our operations or trading activities or damage to our reputation, all of which could have a material adverse effect on our business, results of operations and financial condition. For additional information on these risks, see Item 1A, "Risk Factors".

companyName: Korth Direct Mortgage Inc.


text: We recognize the importance of protecting our information and our information technology systems, and assessing, identifying and managing cybersecurity-related risks have been integrated into our risk management processes. We focus on information technology and cybersecurity measures at both an enterprise-wide operational level and an individual employee level. We have in place various methods and levels of information technology and cybersecurity measures which are aimed at protecting our information and information technology systems to help secure long-term value for our stockholders and other stakeholders. By way of example, these measures include the following:


text: Industry-Standard Security Frameworks: We adhere to recognized security frameworks, including the National Institute of Standards and Technology (NIST), and employ controls such as antivirus and anti-malware protections, multi-factor authentication (MFA), complex password policies, patch management, email security solutions, and firewall protections.


text: Threat Detection and Risk Management: We leverage advanced security technologies, including endpoint detection and response (EDR), security information and event management (SIEM), and vulnerability management tools to proactively identify and mitigate risks.


text: Incident Response Protocols: We maintain a formal cybersecurity incident response plan that ensures a structured and comprehensive response to security incidents. This plan involves senior executives, external legal and forensic incident response retainer with our third-party Security Operations Center (SOC).


text: Continuous Security Assessments: We conduct regular cybersecurity audits, third-party risk assessments, penetration tests, and targeted control evaluations to identify and remediate potential vulnerabilities. Our security program is continuously monitored and assessed by an external 24/7 Security Operations Center (SOC).


text: Disaster Recovery and Data Resiliency: We have robust backup and disaster recovery processes in place to ensure business continuity in the event of a security incident or system failure.


text: Employee Awareness and Training: We implement comprehensive cybersecurity and data privacy training programs to enhance employee awareness of cyber risks and reinforce secure operational practices.


text: As part of our commitment to information security and data protection, we have achieved SOC 2 Type II certification in 2024. This certification, issued by an independent third-party auditor, verifies that our security controls meet the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria for security, availability, processing integrity, confidentiality, and privacy. The SOC 2 Type II audit evaluates the effectiveness of our cybersecurity and IT controls over an extended period, further validating our commitment to safeguarding sensitive information and maintaining a secure operational environment.


text: Our executive team is responsible for overseeing matters relating to our information technology and cybersecurity risk exposures and the steps our Company takes to monitor and mitigate these risks. The executive team is briefed quarterly or as needed by senior management and the Chief Information Security Officer, or CISO, on cybersecurity matters, or more frequently as the circumstances require. Our Vice President of Technology, who serves as our CISO, oversees data privacy, information technology, and cybersecurity matters. Our CISO has extensive information technology and program management experience, has served in this role for the Company since 2022 and has supported the Company's information security function since 2017.


text: To date, we believe that the risks from identified cybersecurity threats, have no t materially affected and are not reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.


text: The mission of our information security program is to design, implement, and maintain a comprehensive information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. Our information security program is comprised of internal and external security and technology professionals who work collaboratively to identify, assess, manage, and mitigate cybersecurity risks and threats across the Company, our subsidiaries, and third-party contractors.

companyName: Hyperscale Data, Inc.


text: We recognize the importance of effectively managing material risks associated with cybersecurity threats, as defined in Item 106(a) of Regulation S-K. Our risk management program integrates the monitoring and management of these risks and threats and is informed by applicable laws, regulations, industry standards, and best practices. We continue to invest in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.


text: Our information security organization is committed to maintaining a robust and resilient security posture that enables us to protect our assets, maintain our stakeholders' trust, and support our business's overall success.


text: Our cybersecurity risk management and strategy are integral components of our comprehensive information security program. They guide our continuous efforts to evaluate and improve the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We have adopted an Information Security Policy (the "Info-Sec Policy") and an Incident Response Plan (the "Response Plan") that establish administrative, physical, and technical controls and procedures to protect sensitive data throughout the Company. These policies also outline processes to assess, identify, manage, and report cybersecurity risks and incidents. The Info-Sec Policy applies to all persons working for the Company and any third parties working with us in any capacity.


text: Our approach to controls and risk management is informed by applicable laws and regulations, as well as industry standards and best practices. These serve as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Identifying cybersecurity risks that could impact our facilities, third-party vendors/partners, operations, critical systems, information, and broader enterprise information technology environment. Risks are informed by threat intelligence, current and historical adversarial activity, and industry-specific threats; Performing cybersecurity risk assessments to evaluate our readiness if the risks were to materialize; Ensuring risk is addressed and tracking any necessary remediation through an action plan;


text: Analyzing all third-party vendors for compliance with our internal Info-Sec Policy to assess potential risks associated with their security controls. We generally require third parties to maintain security controls, notify us promptly of any data breach or cybersecurity incident that may impact our data, and provide written assurance of corrective actions; and Engaging and utilizing a comprehensive suite of security solutions, including enterprise mobility management, endpoint protection, secure file transfer, and security information and event management to monitor and actively respond to cybersecurity threats. These solutions work together to secure our endpoints, protect against malware, ensure the safe transfer of files, and provide our cybersecurity team with the functionality to build alerts on specific use cases that are important and unique to our business.


text: Our Board oversees cybersecurity risk as part of its overall risk oversight function. Our information technology department (the "IT Department"), which functions as our Information Security Advisory Team, is responsible for managing our information security program and implementing cybersecurity risk management practices. The IT Department is led by our Chief Information Officer, who oversees our cybersecurity strategy and ensure its alignment with business objectives.


text: The IT Department collaborates with various stakeholders across the organization to identify, assess, and mitigate cybersecurity risks. They regularly monitor and adapt our information security program to address the evolving threat landscape.


text: In the event of a cybersecurity incident, the IT Department promptly reports the matter to the Executive Committee, which consists of our senior leadership team. The Executive Committee is responsible for assessing the severity and potential impact of the incident and determining the appropriate course of action. The Executive Committee keeps the Board informed of significant cybersecurity incidents and provides updates on the overall status of our cybersecurity program as needed.


text: This governance structure ensures that cybersecurity risks are effectively managed by the IT Department, with oversight from the Executive Committee and the Board. It maintains clear lines of communication and accountability, enabling timely decision-making and response to cybersecurity matters.


text: In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not successfully eliminate all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred.


text: We aim to deploy a cyber-risk management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our data and information systems. The Company currently manages its cybersecurity risk through a variety of practices that are applicable to all users of our information technology and information assets, including our officers and directors, contractors, and vendors. The Company uses a combination of technology and monitoring to promote security awareness and prevent security incidents, including network and passwords protocols, third party firewalls, and antivirus protections. Our Board of Directors performs an annual review of our cybersecurity program, including management's actions to identify and detect threats.

companyName: Kuber Resources Corp

ticker: KUBR


text: We have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.


text: Our information security organization safeguards the confidentiality, integrity, and availability of our systems, services, and data. We employ skilled security and technology professionals, both internal and external, and continually invest in the resources necessary to adapt and counter evolving cybersecurity threats. Our work is overseen by the Task Force (as defined below) for strategic guidance and accountability.

companyName: TurnOnGreen, Inc.


text: Our information security program incorporates a robust cybersecurity risk management strategy. This strategy prioritizes continuous improvement and ensures the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We leverage industry best practices, including guidance from the National Institute of Standards and Technology (NIST), to identify, assess, and manage cybersecurity risks relevant to our business. While we don't adhere to any specific technical standards or specifications, NIST provides a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.


text: Risk Identification: We proactively identify potential threats across our facilities, vendors, operations, systems, and broader IT environment. Threat intelligence, current attack trends, and industry-specific threats inform our risk assessments. Risk Evaluation: We conduct regular risk assessments to measure our preparedness against identified threats. Actionable Plans: We ensure risk is addressed and tracking any necessary remediation through an action plan.


text: While cybersecurity risks are inherent to our industry, we have experienced no material impact on our business strategy, operations, or financial condition to date. We remain vigilant in managing these risks through our comprehensive security program.


text: Management is responsible for the cybersecurity risk management program as well as actions to identify, assess, mitigate, and remediate material issues. The Company's cybersecurity risk management program is supervised by our Chief Technology Officer ("CTO"), who reports directly to the Company's Chief Executive Officer. The CTO and his team are responsible for leading cybersecurity strategy, policy, standards, architecture and processes.


text: Our board of directors has ultimate oversight of and is charged of cybersecurity matters and receives reports from the CTO on, among other things, the Company's cyber risks and threats, the status of projects to strengthen the Company's information security systems, and the emerging threat landscape. In accordance with our cyber incident response plan, the board of directors is promptly informed by management of cybersecurity incidents with the potential to materially adversely affect the Company or its information systems and is regularly updated about incidents with lesser impact potential. At least annually, the board of directors reviews and discusses the Company's technology strategy in combination with the Company's strategic objectives with Management.


text: In an effort to detect and defend against cyber threats, the Company annually provides its employees with various cybersecurity and data protection training programs. These programs cover timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educate employees on the importance of reporting all incidents promptly.


text: The mission of our information security program is to design, implement, and maintain a comprehensive information security program that protects our systems, services, and data against unauthorized access, disclosure, modification, damage, and loss. Our information security program is comprised of internal and external security and technology professionals who work collaboratively to identify, assess, manage, and mitigate cybersecurity risks and threats across the Company and third-party contractors.

companyName: Alzamend Neuro, Inc.


text: We recognize the importance of effectively managing material risks associated with cybersecurity threats, as defined in Item 106(a) of Regulation S-K. Our risk management program integrates the monitoring and management of these risks and threats and is informed by applicable laws, regulations, industry standards, and best practices. We continue to invest in information security resources to mature, expand, and adapt our capabilities to address emerging cybersecurity risks and threats.


text: Our information security organization is committed to maintaining a robust and resilient security posture that enables us to protect our assets, maintain our stakeholders' trust, and support our business's overall success.


text: Our cybersecurity risk management and strategy are integral components of our comprehensive information security program. They guide our continuous efforts to evaluate and improve the confidentiality, integrity, and availability of our critical systems, data, and operations.


text: We have adopted an Information Security Policy (the "Info-Sec Policy") and an Incident Response Plan (the "Response Plan") that establish administrative, physical, and technical controls and procedures to protect sensitive data throughout the Company. These policies also outline processes to assess, identify, manage, and report cybersecurity risks and incidents. The Info-Sec Policy applies to all persons working for the Company and any third parties working with us in any capacity.


text: Our approach to controls and risk management is informed by applicable laws and regulations, as well as industry standards and best practices. These serve as a guide to help us identify, assess, and manage cybersecurity controls and risks relevant to our business.