text: Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, internal IT Audit, IT security, governance, risk and compliance reviews. To defend, detect and respond to cybersecurity incidents, we, among other things: conduct proactive privacy and cybersecurity reviews of systems and applications, audit applicable data policies, conduct employee training, monitor emerging laws and regulations related to data protection and information security and implement appropriate changes.


text: Our risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from third parties such as vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party risks when handling and/or processing our employee, business or customer data.

companyName: MIRA PHARMACEUTICALS, INC.

ticker: MIRA

secItem: Item 1C


text: To date, we have not identified any cybersecurity threats or past incidents that have had, or are likely to have, a material impact on our company's operations, business strategy, financial performance, or results of operations.


text: To manage our cybersecurity governance, we use Coalition Control, a cyber risk management platform that combines insurance, technology, and services from Coalition and its partners into an online experience. It allows us to detect, assess, and mitigate cyber risks proactively.


text: Coalition Control monitors and detects risks across our entire external digital footprint, including assets, apps, services, and data leaks. The tool shows us where any potential vulnerabilities are identified and how to fix them.


text: CFO is responsible for the day-to-day oversight of cybersecurity risks, and who utilizes the Coalition management platform for such risk management. Our CFO keeps the Board apprised of ongoing cybersecurity risk mitigation and any breaches if presented.


text: In the ordinary course of our business, we collect and store certain confidential information such as information about our employees, contractors, vendors, customers, suppliers, independent sales agents and distributors. We have processes in place for assessing, identifying, and managing material risks from cybersecurity threats, and we monitor the Company's overall security score to assess performance and identify areas for improvement. In recent years, we have installed a new firewall to better protect from network intrusions, hired a Network and Security Administrator, and engaged a third-party service provider to perform an internal penetration test in order to identify and address vulnerabilities. Additionally, we introduced always-on VPN in an effort to better restrict off-campus network access in light of the increase in the number of our employees working remotely in recent years, enhanced our monitoring and control capabilities, and hardened our cloud computing cyber security footprint. Management continually re-assesses the Company's cybersecurity risk environment based on changing circumstances and new information identified by its monitoring, scanning and testing as well as third party resources.

companyName: Xtant Medical Holdings, Inc.

ticker: XTNT


text: Management and Strategy Our processes for assessing, identifying, and managing cybersecurity threats have been integrated into the our overall risk management processes. The information provided by these processes facilitates management's ongoing assessment of our cybersecurity risk environment and provides current and accurate information regarding cybersecurity risks to management, our Audit Committee and Board of Directors to allow appropriate management of such risks through remediation or other risk mitigation activities.


text: We maintain a cybersecurity program that is designed to identify, protect from, detect, respond to, and recover from cybersecurity threats and risks, and protect the confidentiality, integrity, and availability of its information systems, including the information residing on such systems. The National Institute of Standards and Technology Cybersecurity Framework helps us inform our cybersecurity agenda and prioritize our cybersecurity activities. We take a risk-based approach to cybersecurity, which begins with the identification and evaluation of cybersecurity risks or threats that could affect our operations, finances, legal or regulatory compliance, or reputation. The scope of our evaluation encompasses risks that may be associated with both our internally managed IT systems and key business functions and sensitive data operated or managed by third-party service providers. Once identified, cybersecurity risks and related mitigation efforts are prioritized based on their potential impact, likelihood, velocity, and vulnerability, considering both quantitative and qualitative factors. Risk mitigation strategies are developed and implemented based on the specific nature of each cybersecurity risk. These strategies include, among others, the application of cybersecurity policies and procedures, implementation of administrative, technical, and physical controls, and employee training, education, and awareness initiatives. has implemented risk management structures, policies and procedures and is responsible for our day-to-day cybersecurity risk management. Our Director of Information Technology, Chris Dennis, is responsible for our day-to-day assessment and management of cybersecurity risks.


text: Mr. Dennis has served as our Director of Information Technology since June 2019. Mr. Dennis additionally is the founder of a data privacy consulting company and has over 20 years of experience in the data management space. We have implemented a number of processes which allow Mr. Dennis and his team to be informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents. These processes include, among other things, system alerts of potential malicious cyber activity, access to real-time dashboards that monitor and assess our systems, status reports provided on a daily, weekly and monthly basis, and regular ongoing communications with service providers regarding potential new attack vectors and vulnerabilities. Mr. Dennis and his team share such information with our management team and reports information about such risks to our Audit Committee.


text: of Consultants and Advisors engage various third-party cybersecurity service providers to assess and enhance our cybersecurity practices and assist with protection and monitoring of our systems and information, including with respect to protection of our e-mail, system access, network monitoring, endpoint protection, vulnerability assessments and penetration testing. We engage cybersecurity consultants, auditors, and other third parties to assess and enhance our cybersecurity practices, such as a third party consulting firm to perform tabletop exercises and evaluate our cyber processes including an assessment of our incident response procedures.


text: Board of Directors, both directly and through the delegation of responsibilities to the Audit committee oversees the proper functioning of our cybersecurity risk management program. In particular, the Audit Committee assists the Board of Directors in its oversight of management's responsibility to assess, manage and mitigate risks associated with the Company's business and operational activities, to administer the Company's various compliance programs, in each case including cybersecurity concerns, and to oversee our information technology systems, processes and data. The Audit Committee, which is comprised entirely of independent directors, is responsible for periodically reviewing and assessing with management (i) the adequacy of controls and security for our information technology systems, processes and data, and (ii) our contingency plans in the event of a breakdown or security breach affecting our information technology systems, it being understood that it is not possible to eliminate all such risks and that the Company will necessarily face a variety of risks with respect to information technology in the conduct of its business. The Audit Committee is additionally responsible for reviewing the cybersecurity disclosures required to be included in our filings with the SEC.


text: Audit Committee reviews a cybersecurity dashboard at its regularly held meetings, which includes certain information about overall security, employee training, and other statistics. Members of our management team often attend these discussions, and the Audit Committee has requested that Mr. Dennis provide updates at two of its meetings annually. The management team and/or Audit Committee, in turn, regularly provide data protection and cybersecurity reports to the full Board of Directors.


text: Although none of the members of the Audit Committee has any work experience, degree, or certifications related to information security or cybersecurity, the Audit Committee works closely with members of our employee team with relevant expertise, and we have engaged third-party service providers to further enhance our cybersecurity efforts.


text: from Material Cybersecurity Threats we have taken steps to prevent and mitigate data security threats, there can be no assurance that our protective measures and those of our third party service providers will prevent or detect security breaches that could have a significant impact on our business, reputation, operating results and financial condition. We maintain cyber liability insurance; however, this insurance may not be sufficient to cover the financial, legal, business or reputational losses that may result from an interruption or breach of our systems. As of the date of this filing, we have not identified any cybersecurity threats that have materially affected or are reasonably anticipated to have a material effect on our business strategy, results of operations or financial condition. Although we have not experienced cybersecurity incidents that are individually, or in the aggregate, material, we have experienced cyberattacks in the past, which we believe have thus far been mitigated by preventative, detective, and responsive measures we have put in place. See the factors described in the "Part I. Item 1.A. Risk Factors " section of this Form 10-K for further detail about the cybersecurity risks we face. Maintaining a robust information security system is an ongoing priority for us and we plan to continue to identify and evaluate new, emerging risks to data protection and cybersecurity both within our Company and through our engagement of third-party service providers.


text: Management and Strategy many of our peer companies, we recognize the significance of cybersecurity threats to our clients and operations. Our business strategy, results of operations, and financial condition have not, to date, been affected by risks from cybersecurity threats. During the reporting period, we have not experienced any material cyber incidents, nor have we experienced a series of immaterial incidents, which would require the ordinary course of our business, we use, store and process data including data of our employees, partners, collaborators, and vendors.

companyName: Cingulate Inc.

ticker: CING


text: To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management program, which is comprised of a wide array of architecture and processes. The cyber risk management program falls under the responsibility of our Chief Financial Officer who, in turn, manages our outsourced experts in IT and cyber security. Under the guidance of our Chief Financial Officer, we task reputable third-party IT experts that utilize a wide variety of software to secure the environment.


text: We have implemented a cybersecurity risk management program that is designed to identify, assess, and mitigate risks from cybersecurity threats to this data and our systems. We deploy a wide range of security tools across the environment including multifactor authentication, data encryption, cloud-based backups, endpoint monitoring, and dark web monitoring. As a result, we have not identified any material cybersecurity risks and are continuously hardening our environment. Additionally, our program includes regular cybersecurity testing for all employees.


text: Our board of directors is responsible for the oversight of cybersecurity risk management. The Chief Financial Officer reports to the board of directors. The Chief Financial Officer provides updates to the board of directors on our cybersecurity risk management program, including any critical cybersecurity risks, ongoing cybersecurity initiatives and strategies, and applicable regulatory requirements and industry standards on a regular basis. The Chief Financial Officer also notifies the board of directors of any cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.


text: The Company depends on the proper functioning, availability and security of its information systems, including financial, data processing, communications and operating systems. Several information systems are software applications provided by third parties. Although risks from cybersecurity threats have to date not materially affected, and we do not believe they are reasonably likely to materially affect, us, our business strategy, results of operations or financial condition, like other companies in our industry, we could, from time to time, experience threats and security incidents related to our and our third-party vendors' information systems, including attempts to gain unauthorized access to our confidential data, and other electronic security breaches. Such cybersecurity attacks can range from individual attempts to gain unauthorized access to our information technology systems to more sophisticated security threats. While we employ a number of measures to prevent, detect and mitigate these threats, there is no guarantee such efforts will be successful in preventing a cybersecurity attack. A cybersecurity attack could compromise the confidential information of our employees, customers and vendors. A successful cybersecurity attack could disrupt and otherwise adversely affect our business operations.

companyName: AmpliTech Group, Inc.

ticker: AMPG


text: Assessment, identification and management of cybersecurity related risks are integrated into our overall risk management process. Cybersecurity related risks are included in the risk universe we evaluate to assess top risks to the Company at least annually. To the extent our processes identify a heightened cybersecurity related risk, risk owners are assigned to develop risk mitigation plans, which are then tracked to completion.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function and has delegated oversight of cybersecurity risk strategy and governance and of other information technology risks to the Audit Committee of the Board of Directors (the "Audit Committee"). The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity. Senior management, including the Company's Chief Executive Officer, Chief Financial Officer and Chief Operating Officer, is responsible for assessing and managing cybersecurity risk, and provides briefings regarding the assessment and management of such risk to the Audit Committee, which then reports, as necessary, to the Board of Directors.


text: Although members of our senior management do not have direct cybersecurity expertise obtained through certifications, their experience managing the Company, which includes consulting and coordinating as necessary with in-house information-technology specialists, enables them to effectively assess and manage material risks from cybersecurity threats.


text: The Company relies on in-house information-technology specialists to assist in managing relevant risks. Any cybersecurity incident would be reported promptly to management and material and potentially material incidents would be assessed by management and the Audit Committee for remediation and future prevention and detection.


text: The Company, at least annually, updates its policies or procedures that could help mitigate cybersecurity risks. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. The Company has incorporated cybersecurity coverage in its insurance policies; however, there is no assurance that the insurance the Company maintains will cover all cybersecurity breaches or that policy limits will be sufficient to cover all related losses.


text: The underlying processes and controls of our cyber risk management protocol incorporate recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity Framework ("CSF"). We have undertaken, on an annual basis, to conduct an assessment of our cyber risk management processes and controls to identify, quantify, and categorize material cyber risks. In addition, we have developed a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the annual assessment process.

companyName: RetinalGenix Technologies Inc.

ticker: RTGN


text: In addition, we maintain policies over areas such as information security, access on/offboarding, and access and account management, to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities. We consult with a third-party specialist with regard to our cyber risk management processes and controls.


text: Our management team is responsible for oversight and administration of our cyber risk management protocol, and for informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents. RetinalGenix' management team has prior experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained from governmental, public, or private sources.


text: As part of its review of the adequacy of our system of internal controls over financial reporting and disclosure controls and procedures, the Board of Directors is specifically responsible for reviewing the adequacy of our computerized information system controls and security related thereof. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services, brief the Board of Directors on cyber vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, and the emerging threat landscape and new cyber risks on at least an annual basis. This includes updates on RetinalGenix's processes to prevent, detect, and mitigate cybersecurity incidents. In addition, cybersecurity risks are reviewed by our Board of Directors at least annually, as part of the Company's corporate risk oversight processes.


text: We face risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. RetinalGenix acknowledges that the risk of cyber incidents is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. To date, we have not had a cybersecurity incident. We proactively seek to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery;


text: however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject us to additional liability and reputational harm. See Item 1A. "Risk Factors" for more information on cybersecurity risks.


text: We have not experienced a material cybersecurity incident that has jeopardized the confidentiality, integrity, or availability of information systems or information residing in such information systems as defined under 17 C.F.R. § 229.106(a). If such an incident were to occur, we would work expeditiously to mitigate our damages as soon as such an incident is detected by implementing our risk management and cybersecurity plan in concert with our established cybersecurity response team. A cybersecurity incident would be reported to the Company's Chairman of the Board and our general counsel, who would determine whether such incident or event was material. If such an incident or event is material, it would be reported to our Board of Directors and Audit Committee.

companyName: Mentor Capital, Inc.

ticker: MNTR


text: Company maintains cybersecurity risk management, disaster readiness, and business continuity plans to anticipate potential threats and mitigate the probability of cybersecurity risks by establishing alerts, preemptive measures, and cybersecurity response protocols. We have set up information technology risk management alert programs that are routinely received and reviewed by management and our information technology professionals. We have implemented protocols and procedures to protect the privacy, safety, and security of our data and information technology. We routinely assess our cybersecurity risk while working in consultation with our information technology professionals. In addition to alerts, our information technology professionals provide risk management monitoring and support along with twenty-four-hour dedicated support for the Company. They possess expertise across multiple industries, including support of Department of Defense contractors in the United States. The Company does not share confidential information with third parties unless required by law. In such instances, the Company utilizes encryption methods to protect confidential information. The Company ensures that such information is given to such third parties in a responsible manner that would not disclose such confidential information to unintended recipients. Due to the nature of the Company's operations, the instance of the Company's receipt of confidential information is minimal, infrequent, and immaterial.


text: Our cybersecurity disaster readiness plan is implemented and managed by our assistant corporate secretary, who reports to the Chairman of the Board of Directors. Management oversees our cybersecurity risk and our disaster recovery and business continuity plan in order to consider, mitigate, and plan for the preemption of cybersecurity risks that may arise. Our assistant corporate secretary was formerly responsible for information technology, risk management, and cybersecurity at an Am Law 100 law firm in San Diego. She authored and implemented the firm's disaster readiness and business continuity protocols and managed the firm's information technology operations prior to her implementation of these similar risk management protocols at the Company in consultation with cybersecurity experts for the purpose of mitigating the Company's risk and ensuring best practices. Our assistant corporation secretary is responsible for reporting risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, to the Chairman of the Board and our general counsel for consideration. The Chairman of the Board determines the necessity of discussing cyber risks. Material incidents would be reported to the Board of Directors and the Audit Committee.


text: Company's business strategy, results of operations, and financial condition have not been materially affected by risks from cybersecurity threats, and we have not experienced any material cybersecurity incidents. Our ability to manage our cybersecurity risks does not allow us to predict our cybersecurity vulnerability to ordinary, novel, or sophisticated cyber-attacks and cyber warfare threats in the future.


text: As a result, we cannot provide future assurances that we will not be materially affected by cybersecurity risks or material cybersecurity incidents in the future. For more information on the risks that the Company faces, including cybersecurity-related risks, see our Item


text: Management and Strategy recognize the critical importance of maintaining the safety and security of our systems and data and have implemented a holistic process for overseeing and managing cybersecurity and related risks. We depend on the accuracy, capacity, and security of our information technology systems and those used by our third-party service providers. To protect the confidentiality, integrity, and availability of our critical systems and information, we have developed and implemented a cybersecurity risk management program that includes a cybersecurity incident response plan. Our cybersecurity risk management program covers our business and was crafted following frameworks established by the National Institute of Standards and Technology. While using these frameworks guides our approach to identifying, assessing, and managing cybersecurity risks relevant to our business, it does not imply compliance with any specific technical standards, specifications or requirements.

companyName: Motorsport Games Inc.

ticker: MSGM


text: The program was integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. In addition, our program emphasizes the maintenance of controls and procedures for the prompt escalation of certain cybersecurity incidents, conducting cybersecurity risk assessments, regularly assessing and deploying technical safeguards, establishing incident response and recovery plans, and providing relevant privacy and cybersecurity information to employees to enhance awareness and response to cybersecurity threats.


text: As of the date of this Report, we are not aware of any risks from cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.


text: The Board of Directors, along with its Audit Committee, oversees the management of cybersecurity risks, and receives quarterly reports from management on the detection and remediation of cybersecurity incidents, as well as on material security risks and vulnerabilities. Through our outsourced managed service provider, we are informed about, and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents through the management of, and participation in the monitoring systems and processes described above. The information about such incidents is reported to the Company's Chief Executive Officer and Chief Financial Officer, who then would report such information to the Company's Board of Directors, in some cases, earlier than the regular quarterly reports depending on the nature and severity of the incident.


text: Company's Cybersecurity System includes administrative, technical, and physical safeguards and is designed to provide an appropriate level of protection to maintain the confidentiality, integrity and availability of the Company's and its customers' information.

companyName: OneMeta Inc.

ticker: ONEI


text: This includes protecting against known and evolving threats to the security of the Company's systems and information, and against unauthorized access, compromise, or loss of data. The Cybersecurity System is managed centrally, so the same security controls, policies and procedures are implemented across the organization. The Company maintains cybersecurity policies including an Acceptable Use Policy that all system users sign to acknowledge that they understand their security responsibilities. All system users receive security awareness key element of the Company's Cybersecurity System is to mature the system to align with the CIS18 Critical Security Controls security framework. The CIS controls are designed based on real-world data about cyber-attacks, to ensure that the measures are effective against current threats. The framework provides a prioritized set of actions, which enables the Company to focus its efforts on the most effective defensive measures first. This prioritization helps in optimizing the use of resources for maximum impact on security. This strategy provides a structured and effective approach to cybersecurity, helping the Company to protect its assets, comply with regulations, manage risks, and improve its overall security posture.


text: Company has established controls and procedures to escalate enterprise-level issues, including cybersecurity matters, to the appropriate management levels within its organization and to its Board of Directors, or members or committees thereof, as appropriate. The Company's Board of Directors is responsible for enterprise risk management, including its approach to managing cybersecurity risk, and has delegated oversight responsibility of information security risks to its Audit Committee. Under the Company's framework, cybersecurity issues are analyzed by subject matter experts for potential financial, operational, and reputational risks, based on, among other factors, the nature of the matter and breadth of impact. Matters determined to present potential material impacts to the Company's financial results, operations, and/or reputation are immediately reported by management to the Company's Board of Directors or its Audit Committee, as appropriate, in accordance with its escalation framework.


text: In addition, the Company has established procedures to ensure that management responsible for overseeing the effectiveness of disclosure controls is informed in a timely manner of known cybersecurity risks and incidents that may materially impact the Company's operations and that timely public disclosure is made as appropriate. The Company's Cybersecurity System is led by the Chief Executive Officer ("CEO") in collaboration with other third-party cybersecurity service providers which in turn assist in monitoring our exposure from significant information technology suppliers, significant software as a service providers and major vendors with access to our information technology systems. Further, team members who support our cybersecurity program have relevant educational and industry experience through various roles involving information technology, security, auditing, compliance, systems and programming. The Company does not maintain cyber insurance coverage at this time. During the last three years, the Company has not experienced a material security breach and, as a result, the Company has not incurred any material expenses from such a breach. Furthermore, during such time, the Company has not been penalized or paid any amount under any information security breach settlement.


text: Sponsor recognizes the importance of managing cybersecurity risks to protect its business operations, clients, and stakeholders. The Sponsor has implemented a comprehensive Cybersecurity Policies and Procedures Plan for the Fund, which outlines our approach to identifying, assessing, and mitigating cybersecurity threats and vulnerabilities in alignment with industry standards and best practices. Risk Assessment and Management: The Fund has established a risk-based cybersecurity framework to manage cybersecurity risks effectively.

companyName: Dynamic Shares Trust


text: This framework includes regular assessments of its information systems, physical and virtual infrastructure, and the data therein, to identify potential cybersecurity threats and vulnerabilities. Our cybersecurity strategy is integrated into the Fund's overall risk management processes, with specific consideration given to the confidentiality, integrity, and availability of our information systems.


text: Service Providers: The Fund engages with various third-party service providers for critical operations and services. The Sponsors conducts rigorous cybersecurity risk assessments of all vendors and business partners with access to our networks or sensitive information. These assessments ensure that third-party cybersecurity policies are robust and align with our cybersecurity standards.


text: To date, there have been no material cybersecurity incidents that have significantly impacted the Fund's business strategy, results of operations, or financial condition. The Sponsor continue to monitor our systems and processes to mitigate potential cybersecurity risks actively.


text: The Sponsor of the Fund has a fundamental role in overseeing the Fund's cybersecurity risk management. The Sponsor receives regular updates on cybersecurity matters from management and third-party service providers, ensuring that cybersecurity risks are managed proactively at the highest level of the organization.


text: Our management team Xinyu Jiang and Weixuan Zhang are responsible for overseeing the development, implementation, and ongoing management of the Fund's Cybersecurity Policies and Procedures including the monitoring of our systems for potential cybersecurity events and the implementation of preventive and mitigative measures.


text: We have an information security program designed to identify, protect, detect and respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our information systems from cybersecurity threats, we utilize various security tools that help prevent, identify, escalate, investigate, resolve, and recover from identified vulnerabilities and security incidents in a reasonably timely manner. These include, but are not limited to, internal reporting and tools for monitoring and detecting cybersecurity threats.

companyName: Vestand Inc.

ticker: VSTD


text: We evaluate the risks associated with technology and cybersecurity threats and monitor our information systems for potential weaknesses. We review and test our information technology system on an as-needed basis and also utilize internal team personnel to evaluate and assess the efficacy of our information technology system and enhance our controls and procedures. The results of these assessments are reported to our Audit Committee and, from time to time, our Board of Directors.


text: There can be no assurances that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with or are effective in protecting our systems and information.


text: As of the date of this report, we are not aware of any cybersecurity incidents, that have had a materially adverse effect on our operations, business, results of operations, or financial condition.


text: Our Board of Directors considers cybersecurity risk as part of its risk oversight function. It has delegated oversight of cybersecurity and other information technology risks to the Audit Committee of the Board of Directors. The Audit Committee oversees the implementation of the cybersecurity risk management program.


text: The Audit Committee receives periodic reports from management on potential cybersecurity risks and threats. The Audit Committee reports to the full Board of Directors regarding its activities, including those related to cybersecurity. The full Board of Directors also receives briefings from management on the cybersecurity risk management program as needed.


text: Management is responsible for assessing and managing our material risks from cybersecurity threats. Management has primary responsibility for our overall cybersecurity risk management program and supervises both the internal cybersecurity personnel and external cybersecurity consultants.


text: The management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants; and alerts and reports produced by security tools deployed in the IT environment. Our cybersecurity incident response plan governs our assessment and response upon the occurrence of a material cybersecurity incident, including the process for informing senior management and our Board of Directors.


text: Company engages a third-party provider to maintain our systems and management participates in the assessment to identify any risks from cybersecurity threats. Our third-party provider monitors our firewall, network, system security and internal and external backups and reports any issues to the Company.

companyName: Nexentis Technologies Inc.

ticker: NXTS


text: Company's Board, together with management, is engaged in our cybersecurity monitoring managed by our third-party provider and it is constantly changing. Any issues are appropriately addressed timely.


text: To date, we have not experienced any cybersecurity incidents that materially affected our business strategy, results of operations or financial condition.


text: Management and Strategy maintain standard procedures to help assess, identify and manage material risk posed by cybersecurity threats and regularly evaluate how we can integrate these procedures into our overall risk management processes. For example, we require that all of our employees who have access to our internal network complete formal cybersecurity training upon hire and on a periodic basis, including training on phishing, malware, and other cybersecurity risks. We also continuously evaluate our information technology systems and our practices that relate to our information technology systems. To date, we have not engaged any assessors, consultants, auditors or other third parties in connection with these efforts but may elect to do so in the future.

companyName: RenovoRx, Inc.

ticker: RNXT


text: To the extent we identify areas in our information systems that need improvement, we seek to timely implement and monitor such improvements.


text: While we believe that we have taken appropriate security measures to protect our data and information technology systems, and have been informed by our third-party vendors that they have as well, there can be no assurance that our efforts will prevent breakdowns or breaches in our systems, or those of our third-party vendors, that could materially adversely affect our business and financial condition. For additional information regarding whether risks from cybersecurity threats are reasonably likely to materially affect us, see Item 1A, "Risk Factors — Security threats to our information technology infrastructure and/or our physical buildings could expose us to liability and damage our reputation and business " in this Report.


text: One of the functions of our Audit Committee is to identify principal risks related to our company and ensure implementation of appropriate systems to manage these risks, including risks from cybersecurity threats.


text: Our Audit Committee works with members of our management to identify and manage these risks, including cybersecurity risks. We currently outsource a qualified Information Technology Administrator who reports to our Chief Executive Officer. This consultant has over 25 years of experience with cybersecurity, information technology development and deployment and information technology risk assessment and management, including information security management. Our Information Technology Administrator regularly monitors our information technology systems and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents in consultation with our Chief Executive Officer. To the extent necessary, our Chief Executive Officer reports such risks to our Board of Directors.


text: The underlying processes and controls of the bioAffinity cyber risk management program incorporate recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology ("NIST") Cybersecurity addition, bioAffinity maintains policies over areas, such as information security, access on/offboarding, and access and account management, to help govern the processes put in place by management designed to protect bioAffinity IT assets, data, and services from threats and vulnerabilities. bioAffinity partners with industry-recognized cybersecurity providers leveraging third-party technology and expertise.

companyName: bioAffinity Technologies, Inc.

ticker: BIAF


text: These cybersecurity partners, including consultants and other third-party service providers, are a key part of bioAffinity's cybersecurity risk management strategy and infrastructure and provide services including maintenance of an IT assets inventory, periodic vulnerability scanning, identity access management controls including restricted access to privileged accounts, network integrity safeguarded by web-based software, including endpoint protection, endpoint detection and response, and remote monitoring management on all devices, industry-standard encryption protocols, critical data backups, infrastructure maintenance, incident response, cybersecurity strategy, and cyber risk advisory, management team, in conjunction with third-party IT and cybersecurity service providers, is responsible for oversight and administration of the cyber risk management program and informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents.


text: Audit Committee of the Board of Directors oversees bioAffinity cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. The cybersecurity stakeholders, including member(s) of management assigned with cybersecurity oversight responsibility and/or third-party consultants providing cyber risk services, brief the Audit Committee on cyber vulnerabilities identified through the risk management process, the effectiveness of the cyber risk management program, and the emerging threat landscape and new cyber risks on at least an annual basis. This includes updates on bioAffinity processes to prevent, detect, and mitigate cybersecurity incidents. In addition, cybersecurity risks are reviewed by our Board of Directors at least annually, as part of the Company's corporate risk oversight processes.


text: faces risks from cybersecurity threats that could have a material adverse effect on its business, financial condition, results of operations, cash flows, or reputation. bioAffinity acknowledges that the risk of cyber incident is prevalent in the current threat landscape and that a future cyber incident may occur in the normal course of its business. However, prior cybersecurity incidents have not had a material adverse effect on our business, financial condition, results of operations, or cash flows. The Company proactively seeks to detect and investigate unauthorized attempts and attacks against our IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to service delivery; however, potential vulnerabilities to known or unknown threats will remain. Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, investors, and additional stakeholders, which could subject the Company to additional liability and reputational harm. In response to such risks, the Company has implemented initiatives such as implementation of the cybersecurity risk assessment process and development of an incident response plan. For more information on cybersecurity risks see Item 1A. "Risk Factors – Our internal information technology systems, or those of our third-party clinical research organizations or other contractors or consultants, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our diagnostic tests' or therapeutic product candidates' development programs, compromise sensitive information related to our business or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business."


text: Company employs internal resources and third-party service providers to manage, operate and administer our day-to-day operations, business and affairs, subject to the direction and supervision of the Board. The Board recognizes the critical importance of maintaining the trust and confidence of our business partners. The Board plays an active role in overseeing management of our risks, and cybersecurity represents an important component of the Company's overall approach to risk management and oversight. The Company and its management are committed to protecting the confidentiality of all non-public information related to the Company's clients, shareholders and their personnel.

companyName: SHF Holdings, Inc.

ticker: SHFS


text: Company relies on its Management and employees to execute its comprehensive cybersecurity program, and has adopted a written information security program, which is designed to address applicable requirements under Regulation S-P and the FTC Safeguards Rule. Consequently, the Company also relies on the processes for assessing, identifying, and managing material risks from cybersecurity threats. The processes include, among other things, maintaining secure digital or physical access to information assets, using manual and automated detection methods for malicious code, due diligence of third-party vendors, and engaging a leading provider of cybersecurity services to assess and manage cybersecurity risk. For third-party service vendors that perform a variety of important functions for our business, we seek to engage reliable, reputable service vendors that maintain cybersecurity programs.


text: All of the Company's officers and employees are subject to its policies and procedures. The Company utilizes both internal and third-party cybersecurity services, including threat detection and response, vulnerability assessment and monitoring, security incident response and recovery and general cybersecurity education and awareness. We engage in periodic assessment and training regarding the policies, standards and practices designed to address cybersecurity threats and incidents. Our cybersecurity risk management is integrated into our overall enterprise risk management and shares common methodologies, reporting channels and governance processes that apply across our enterprise risk management.


text: To date, we have not experienced any cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected the Company and we are not aware of any cybersecurity threats that are reasonably likely to affect the Company, including its business strategy, results of operations or financial condition.


text: Management oversees the Company's cybersecurity risk management process. Management has adopted a charter that provides to periodically review and discuss with the Board the guidelines and policies with respect to risk assessment and risk management of cybersecurity and other risk exposures relevant to the Company's computerized information system controls and security. Management may receive additional training in cybersecurity and data privacy matters to enable its oversight of such risks. Management will report to the Board on the substance of such reviews and discussions and, as necessary, recommend to the Board such actions as the Management deems appropriate.


text: As noted above, the Company relies on our internal Information Systems in connection with the Company's day-to-day operations. The Company relies on the internal processes for assessing, identifying, and managing material risks from cybersecurity threats.


text: Company's Chief Financial Officer, Chief Legal Officer, and Head of IT work collaboratively with other employees of the Company to ensure protection of the Company's Information Systems from cybersecurity threats and to promptly respond to any cybersecurity incidents. These members of the Company's management team monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents and report such threats and incidents to the board when appropriate. They have gained relevant knowledge, skills and experience in information technology and cybersecurity risk management, including overseeing third-party vendors in such areas, over their careers at the Company or other organizations.


text: We are committed to our goal to protect sensitive business-related and personal information, as well as our information systems. Although the size and scope of our operations is limited compared to larger global operations, we are subject to numerous and evolving cybersecurity risks that could adversely and materially affect our business, financial condition and results of operations. In that regard, we have increased our investment in information systems by hiring a Director of Technology in 2024 to replace limited outsourced services previously utilized. We are currently working towards CMMC certification and expect to be ready for a third-party assessment sometime during the 2025 fiscal year.

companyName: VirTra, Inc

ticker: VTSI


text: Management Leadership Team, with oversight from the Board of Directors, plans to implement a comprehensive cybersecurity program, including incident response process, aligned with the National Institute of Standards and Technology (NIST) Cybersecurity Framework and NIST Computer Security Incident Handling Guide (NIST SP 800-61) to assess, identify, address and manage risks from cybersecurity threats that may result in material adverse effects on the confidentiality, integrity and availability of our business and information systems.


text: Director of Technology reports to our Chief Financial Officer and has operational responsibility for our information security programs, protections, and efforts, along with leading efforts for implementing, monitoring, and maintaining cybersecurity and data security strategy, policy, standards, architecture, and practices across our business. We anticipate that our Director of Technology will update the Chief Financial Officer and Chief Executive Officer on these matters and work closely with these Senior Executives to oversee compliance with legal, regulatory, and contractual security requirements with the guidance of outside counsel.


text: We anticipate that our Board, in coordination with the Audit Committee, will oversee the Company's enterprise risks arising from cybersecurity threats and will periodically review the measures we have implemented to identify and mitigate data protection and cybersecurity risks.


text: We do not currently have a Cybersecurity Incident Response Plan ("CSIRP") to provide the organizational and operational structure, processes, and procedures for investigating, containing, documenting and mitigating cybersecurity incidents. We expect to implement a risk-based approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: We also rely on information technology and third-party vendors to support our operations, including our secure processing of personal, confidential, sensitive, proprietary and other types of information. Despite ongoing efforts to continuously improve our and our vendors' ability to protect against cyber incidents, we may not be able to protect all information systems, and such incidents may lead to reputational harm, revenue and customer loss, legal actions, statutory penalties, among other consequences. While we have not experienced any material cybersecurity threats or incidents in recent years, there can be no guarantee that we will not be the subject of future threats or incidents.


text: Company's cyber risk management strategy has consisted of a focus on minimizing our attack surface and leveraging industry standard cyber threat prevention, detection, and remediation tools. The Company assesses cyber security risk as follows:

companyName: BOXABL Inc.


text: We have executed on this strategy with a cloud-first approach, awareness training, and deliberate use of well-established vendors for software and hardware solutions.


text: During February 2024, the Company engaged HUB International as its national insurance broker and risk services consultant. HUB brings industry expertise specifically in regard to cybersecurity. (iii)


text: During February 2024, the Company hired an IT Manager with expertise in cybersecurity and risk mitigation. This hiring coupled with HUB's consultancy positions us to assess and mitigate cybersecurity threats and protect the Company's shareholders. date, no cybersecurity threats have materially affected our business strategy, operations, or financial condition.


text: Our board of directors has oversight of our strategic and business risk management and has delegated cybersecurity risk management oversight to the Audit Committee of our board of directors (Audit Committee). Our Audit Committee is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. Management is responsible for identifying, assessing, and managing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures, maintaining cybersecurity policies and procedures, and providing regular reports to our board of directors, including the Audit Committee. The Company has strengthened its IT team with the hiring of an additional IT Manager.


text: Our customers and suppliers face similar cybersecurity threats, and a cybersecurity incident impacting us or any of these entities could materially adversely affect our operations, performance and results of operations. We maintain a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats.

companyName: Arena Group Holdings, Inc.

ticker: AREN


text: This program addresses cybersecurity risks to the corporate information technology ("IT") environment including systems, hardware, software, data, people, and processes.


text: Audit Committee of the Board of Directors oversees management's processes for identifying and mitigating risks, including cybersecurity risks. Our VP of Information Security regularly briefs senior leadership on our cybersecurity and information security posture including on the prevention, detection, mitigation, and remediation of cybersecurity incidents, and senior leadership will then brief the Audit Committee. In the event of an incident, we intend to follow our incident response playbook, which outlines our planned response from incident detection to mitigation, recovery and notification, including notifying functional areas (e.g. legal), as well as senior leadership and the Board, as appropriate.


text: Our security team is responsible for our overall information security strategy, including policy, security engineering, operations and cyber threat detection and response. Our security team has extensive experience selecting, deploying, and overseeing cybersecurity technologies, initiatives, and processes. Employees outside of our security team also have a role in our cybersecurity defenses, and they are given training which we believe improves our cybersecurity.


text: Third parties also play a role in our cybersecurity risk management strategy. We engage third parties to conduct risk assessments and evaluations of our security controls. Such risk assessment and evaluations identify, quantify, and categorize any cyber risks. In addition, we, along with third party cyber risk management specialists, develops a risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities identified through the assessment and evaluation process. Third party cybersecurity risk management engagement also includes activities such as penetration testing, independent audits or consulting on best practices to address new challenges. We include security and privacy addendums to our contracts where applicable. We have also commenced third party risk management assessments to help manage the risks associated with reliance on vendors, critical service providers, and other third-parties that may lead to a service disruption or an adverse cybersecurity incident.


text: VP of Information Security and cybersecurity stakeholders regularly brief the senior leadership team on cyber vulnerabilities identified through the risk management process, the effectiveness of our cyber risk management program, the emerging threat landscape, and new cyber risks on at least an annual basis. This includes updates on our processes to prevent, detect, and mitigate cybersecurity incidents.


text: Notwithstanding the approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While we maintain cybersecurity insurance, the costs related to cybersecurity threats or disruptions may not be fully insured. We have not identified any risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our operations, business strategy, regulatory compliance, results of operations, or financial condition. The Company proactively seeks to detect and investigate unauthorized attempts and attacks against Company IT assets, data, and services, and to prevent their occurrence and recurrence where practicable through changes or updates to internal processes and tools and changes or updates to Company service delivery; however, potential vulnerabilities to known or unknown threats will still remain. See Item 1A. Risk Factors" for a discussion of cybersecurity risks.


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Winning Catering Group, Inc.

ticker: WNHK


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluate and addresses cybersecurity risks in alignment with our business objectives and operational needs. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: We have a range of security measures that are designed to protect against the unauthorized access to and misappropriation of our information, corruption of data, intentional or unintentional disclosure of confidential information, or disruption of operations. These security measures include controls, security processes and monitoring of our manufacturing systems. We have cloud security tools and governance processes designed to assess, identify and manage material risks from cybersecurity threats. In addition, we maintain an information security training program designed to address phishing and email security, password security, data handling security, cloud security, operational technology security processes, and cyber-incident response and reporting processes.

companyName: NEXTNRG, INC.

ticker: NXXT


text: Company is committed to maintaining the highest standards of cybersecurity to protect our data, intellectual property, and customer information from cyber threats. As part of this commitment, we leverage a sophisticated cybersecurity framework that integrates the robust capabilities of the Microsoft cloud ecosystem with the specialized services of a leading third-party cybersecurity service provider.


text: Microsoft cloud ecosystem, including Microsoft 365, Azure, SharePoint Online, Microsoft Defender, and Microsoft InTune, forms the backbone of our cybersecurity infrastructure. These platforms offer advanced security features such as data encryption in transit and at rest, network security controls, identity and access management, and threat protection capabilities. Microsoft's constant investment in cybersecurity research and development ensures that we benefit from cutting-edge security technologies and practices.


text: In addition to utilizing the Microsoft cloud ecosystem, we have engaged a third-party service provider to enhance our cybersecurity posture further. This provider brings additional layers of security through services including: Software Security Management: Ensuring that applications such as Office 365 and Azure are configured, maintained and following best security practices.


text: Continuous monitoring of our systems for suspicious activities and providing expert consultation to address and mitigate potential threats.


text: Storage and Backup of Source Systems: Implementing robust data storage solutions and backup protocols to ensure data integrity and availability. Policy Management: Developing and enforcing comprehensive security policies that govern all aspects of our cybersecurity efforts. Response Management: Rapid identification and response to security incidents to minimize impact. Microsoft cloud ecosystem.


text: Our approach to cybersecurity is proactive and multifaceted, combining the scalability and reliability of the Microsoft cloud services with the agility and expertise of our third-party cybersecurity partner. Together, these resources form a comprehensive defense mechanism against a wide range of cyber threats, from phishing and malware attacks to sophisticated nation-state sponsored cyber-attacks. We continuously evaluate and adapt our cybersecurity strategy to respond to evolving threats and to align with best practices and regulatory requirements.


text: Our commitment to cybersecurity is integral to our business operations, and we believe our strategic investments in this area significantly mitigate the risk of cybersecurity incidents that could impact our company's reputation, financial position, or operational capabilities.


text: The management of the Company is responsible for overseeing risk for the Company and has delegated to the VP, Engineering & Technology ("VPE&T") the responsibility for overseeing the cybersecurity risk management strategy for the Company. Management receives regular updates on our cybersecurity risk management process from the VPE&T. The VPE&T reviews our comprehensive cybersecurity framework, including reviewing our cybersecurity reporting protocol that provides for the notification, escalation and communication of significant cybersecurity events to the management team. Company's cybersecurity program is overseen by our VPE&T, who is responsible for global information technology, including cybersecurity.


text: Our VPE&T, is primarily responsible for assessing and managing material risks from cybersecurity threats, including monitoring the measures used for prevention, detection, mitigation and remediation of cybersecurity incidents. The information security organization is comprised of internal IBIO employees and external security suppliers who provide security monitoring and response.


text: We have developed and implemented cybersecurity risk management processes intended to protect the confidentiality, integrity, and availability of our critical systems and information. While everyone at our company plays a part in managing cybersecurity risks, primary cybersecurity oversight responsibility is shared by our Board of Directors and senior management.

companyName: Jet.AI Inc.

ticker: JTAI


text: Risk Assessment Processes: We conduct regular risk assessments to proactively identify potential cybersecurity threats and vulnerabilities. These assessments involve thorough evaluations of our IT infrastructure, data systems, and processes to pinpoint areas of weakness;


text: Proactive Security Measures: In addition to risk assessments, we employ proactive security measures to enhance our cyber defenses. These measures include the continuous monitoring of network activity, the implementation of access controls and encryption protocols, and the deployment of intrusion detection systems to swiftly detect and respond to any suspicious activities.


text: Framework for Identifying and Mitigating Threats: We follow a structured framework for identifying and mitigating cybersecurity threats, which outlines procedures for threat detection, incident response, and risk mitigation.


text: Employee Training and Awareness Programs: We provide training to our management and employees designed to equip employees with the knowledge and skills necessary to identify and respond to cybersecurity risks, tailored based on the persons' roles within our organization.


text: We use external consultants or other third-party experts and service providers, where considered appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls.; and the use of external consultants or other third-party experts and service providers, where considered appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls.


text: Over the past fiscal year, we have not identified risks from known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, operating results, or financial condition. We will continue to monitor and assess our cybersecurity risk management program as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity incident in the future, such incident may have a material adverse effect on our reputation, as well as our operations, business strategy, operating results, and financial condition.


text: Our Board of Directors oversees our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. Our management reports to our Board of Directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with lesser impact potential.


text: One of the key functions of our Board of Directors is informed oversight of our various processes for managing risk. An overall review of risk is inherent in our Board of Directors ongoing consideration of our long-term strategies, transactions and other matters presented to and discussed by the Board of Directors. This includes a discussion of the likelihood and potential magnitude of various risks, including cybersecurity risks, and any actions management has taken to limit, monitor or control those risks.


text: Due to the nature of our business we face a variety of potential cybersecurity risks that are ever evolving and include unauthorized access to our systems and data, disruption of our online game services, theft of intellectual property, and third-party risks as a result of our use of various third party service providers and cloud service providers. The Company's risks related to our end user data is borne by our platform partners as we do not maintain any sensitive information of our players within our infrastructure. There have been no cybersecurity threat events identified during the year ended December 31, 2023, which have resulted in a material incident, or are reasonably likely to result in a material impact on our business strategy, results of operations or financial condition. For more information regarding risks relating to intellectual property and cybersecurity related attacks, see

companyName: Snail, Inc.

ticker: SNAL


text: We are a shell company with no business operations. As a result, we do not consider that we face significant cybersecurity risk. Nevertheless, we employ various procedures designed to identify, protect, detect and respond to and manage reasonably foreseeable cybersecurity risks and threats given our limited operations. These include, but are not limited to, internal reporting and monitoring and detection tools.

companyName: Yale Transaction Finders, Inc.

ticker: YTFD


text: We also periodically assess risks from cybersecurity and technology threats and monitor our information systems for potential vulnerabilities, including those that could arise from internal sources and external sources such as third-party service providers we do business with.


text: We may in the future determine to engage an assessor(s), consultant(s), auditor(s) or other third party(s) to supplement our processes.


text: To date, we have not experienced any cybersecurity attacks. However, any such attack could adversely affect our business. Further, a penetration of our systems or a third-party's systems or other misappropriation or misuse of personal information could subject us to business, regulatory, litigation and reputation risk, which could have a negative effect on our business, financial condition and results of operations.


text: Board as a whole oversees our cybersecurity risk and receives reports from our management team on various potential cybersecurity matters, including areas of emerging risks, incidents and industry trends, and other areas of importance.


text: We have developed and implemented a cybersecurity risk management program that is designed to protect the confidentiality, integrity, and availability of the Company's data and systems. Our cybersecurity risk management program includes a cybersecurity incident response plan.

companyName: Beeline Holdings, Inc.

ticker: BLNE


text: Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.


text: A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;


text: A security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls; awareness training of our employees, incident response personnel, and senior management; cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.


text: Additionally, the Company assesses and manages cybersecurity threats associated with its third-party service providers' information technology systems that could compromise the Company's information security or data. Identified cybersecurity threats are communicated to management for review, response and mitigation as appropriate.


text: As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For additional information, see Part I, Item 1A: Risk Factors— Risks Relating to our Business: We are susceptible to cybersecurity breaches and cyber-related fraud.


text: Board of Directors considers cybersecurity risk within the Board's risk oversight function. The Board of Directors has charged management with the responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system controls and security. The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management program.


text: Implementation and maintenance of our IT systems has been outsourced to a third-party contractor: Tyler Melton Technologies, LLC ("TMT"), which has over ten years of experience in support of cybersecurity for business enterprises. Supervision of the services provided by TMT for the Company is the responsibility of our Corporate Controller, who is charged with the role of assessing and managing our material risks from cybersecurity threats. Our Corporate Controller reviews the efficacy of our cybersecurity program from time to time as circumstances make it appropriate and annually in connection with the annual audit of the Company's financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls, including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment of the Company's internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company's internal controls. Copies of the Corporate Controller's report are also given to the CEO/CFO and made available to members of the Board of Directors. Copies of the auditor's report are delivered to the members of the Board of Directors, which reviews and is responsible to cause a remediation of any material inadequacies in the controls environment.


text: Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding the Company's cybersecurity program.


text: We operate in the electric vehicle manufacturing sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. Both our executive management team and our board of directors are involved in the assessment, identification, and management of such risks, including prevention, mitigation, detection, and remediation of cybersecurity incidents.

companyName: StableX Technologies, Inc.

ticker: SBLX


text: Our executive management team is responsible for day-to-day assessment, identification and management of material risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. The individual currently serving in this role is our Executive Chairman. The executive management team monitors current events in order to remain aware of current cybersecurity threats and is informed of cybersecurity incidents as they arise by our frontline personnel.


text: We engage a third-party consultant to review our cybersecurity defense measures, inform our executive management team of emerging cybersecurity threats, and assist our executive management team in responding to any potential cybersecurity incidents. The executive management team is also responsible for overseeing and identifying risks from cybersecurity threats associated with our use of any third-party service providers.


text: Our board of directors is responsible for oversight of risks from cybersecurity threats in conjunction with our executive management team. Our board of directors receives updates from our management team with respect to risks from cybersecurity threats and are notified of any new significant cybersecurity threats or incidents as they arise. Additionally, our board of directors considers risks from cybersecurity threats as part of its overall assessment of risk management, including its general oversight of the Company's business strategy, risk management policies, and financials.


text: To date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our business strategy, results of operations or financial condition, and we are not aware of any cybersecurity incidents that are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. For further information regarding the risks associated with cybersecurity incidents, see "Risk Factors—Failure in our information technology and storage systems could significantly disrupt the operation of our business" in Item 1A of this


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.

companyName: Iveda Solutions, Inc.

ticker: IVDA


text: We do not presently have any general processes for assessing, identifying, and managing material risks from cybersecurity threats. As we expand our business operations, we plan to develop processes that will allow for the identification and assessment of cybersecurity risk that will be integrated into an overall risk management system, which will be managed by senior management and overseen by the Board of Directors. As part of this development, we plan to identify and address cybersecurity risks related to our business, privacy and compliance issues through a multi-faceted approach that is expected to include third party assessments, internal information technology (IT) audit, IT security, governance, risk and compliance reviews. In connection with these planned approaches, and to defend, detect and respond to cybersecurity incidents, we, among other things, will consider: conducting proactive privacy and cybersecurity reviews of systems and applications, audits of applicable data policies, performing penetration testing using external third-party tools and techniques to test security controls, conducting employee training, monitoring emerging laws and regulations related to data protection and information security, and implementing appropriate changes.


text: As part of the above planned processes, we may engage external auditors and consultants with expertise in cybersecurity to assess our internal cybersecurity programs and compliance with applicable practices and standards.


text: We plan to design our risk management program to also assesses third party risks, and we plan to perform third-party risk management to identify and mitigate risks from third parties, such as vendors, suppliers, and other business partners associated with our use of third-party service providers. In addition to new vendor onboarding, we plan to perform risk management during third-party cybersecurity compromise incidents to identify and mitigate risks to us from third-party incidents.


text: We expect that cybersecurity will become an important part of our risk management processes and an area of focus for our Board of Directors and management. We expect that our Board of Directors will be responsible for the oversight of risks from cybersecurity threats. We expect our senior management will provide our Board of Directors updates on a quarterly basis regarding matters of cybersecurity. This is expected to include existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. We expect that our Board members will also engage in periodic conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.


text: Currently, our Chief Financial Officer is expected to lead our cybersecurity risk assessment and management processes and oversees their implementation and maintenance. Our Chief Financial Officer will be tasked with staying informed about, and monitoring the prevention, mitigation, detection and remediation of cybersecurity incidents through his management of, and participation in, the cybersecurity risk management and strategy processes we plan to develop and as described above, including the operation of an incident response plan, and report to the Board of Directors on any appropriate items.


text: We are committed to protecting the confidentiality, integrity, and availability of its information systems and the data they contain from cybersecurity threats. We acknowledge that cybersecurity is a dynamic and evolving area of risk that requires ongoing assessment, management, and oversight. As we grow in size and revenue, we intend to work with third party companies to assess, identify, manage, and mitigate material cybersecurity threats, as well as to respond to and recover from cybersecurity incidents, all as necessary.

companyName: AVAX ONE TECHNOLOGY LTD.

ticker: AVX


text: We recognize the importance of maintaining our technology and data systems. Our cybersecurity policies, standards, processes, and practices are integrated across our operational departments.


text: Risk Management and Strategy one of the elements of our overall risk management program, we focus on the following key areas: Technical Safeguards: We have commenced to implement technical safeguards, including by not limited to firewalls, anti-malware functionality and access controls.


text: We have identified and, as appropriate and when we have the budget to do so, will utilize outside consultants, including contractors and other third parties, to among other things, conduct regular testing of our networks and systems to identify vulnerabilities through penetration testing, while also measuring and advising on potential improvements to our incident prevention, response, and documentation have not encountered cybersecurity threats or experienced previously cybersecurity incidents that have materially affected or that we believe are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.


text: Board is aware of the critical nature of managing risks associated with cybersecurity threats. Management works with our Board to establish oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the significance of these threats to our operational integrity and stakeholder confidence. The Board has delegated to our Audit Committee the primary responsibility for oversight of cybersecurity risks.


text: Executive Team plays a primary role in informing the Audit Committee on cybersecurity risks. These individuals monitor activity and potential risks related to the day-to-day operations of the business, including reviewing results of the work of our outside consultants. They will provide briefings to the Audit Committee on a periodic basis regarding cybersecurity matters, including but not limited to the following: Current cybersecurity landscape and emerging threats; of ongoing cybersecurity initiatives and strategies; reporting, if any, and learning from any cybersecurity events; mitigation efforts and insurance, and with regulatory requirements and industry standard.


text: Management and Strategy recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

companyName: Hapi Metaverse Inc.


text: Material Risks & Integrated Overall Risk Management have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Our management team continuously evaluate and addresses cybersecurity risks in alignment with our business objectives and operational needs. from Cybersecurity Threats have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.


text: Companies such as ours face a variety of risks, including financial reporting, legal, credit, liquidity, operational, health, safety and cybersecurity risks. The Board believes an effective risk management system will (1) identify the material risks that we face in a timely manner, (2)

companyName: FLEXIBLE SOLUTIONS INTERNATIONAL INC

ticker: FSI


text: communicate necessary information with respect to material risks to senior executives and, as appropriate, to our directors (3) implement or oversee implementation of appropriate and responsive risk management and mitigation strategies consistent with our risk profile, and (4) integrate risk management into our decision-making.


text: Board oversees risk management after receiving briefings from advisors and also based on its own analysis and conclusions regarding the adequacy of our risk management processes. The Board continuously evaluates and manages material risks including geopolitical and enterprise risks, financial risks, environmental risks, health and safety risks and cybersecurity risks.


text: Murray, our Operations Manager, is responsible for assessing and managing cybersecurity risks. Mr. Murray is experienced in assessing and managing cybersecurity risks due to his direct oversight of our internet and digital communications contractors.


text: To date we have not experienced any cybersecurity threats and any risks from cybersecurity threats have not materially affected, and are not reasonably likely to materially affect, our business strategy, results of operations, or financial condition.


text: Risk Management and Strategy recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.

companyName: Bimergen Energy Corp

ticker: BESS


text: We do not presently have any general processes for assessing, identifying, and managing material risks from cybersecurity threats. As we expand our business operations, we plan to develop processes that will allow for the identification and assessment of cybersecurity risk that will be integrated into an overall risk management system, which will be managed by senior management and overseen by the Board of Directors. As part of this development, we plan to identify and address cybersecurity risks related to our business, privacy and compliance issues through a multi-faceted approach that is expected to include third party assessments, internal information technology (IT) audit, IT security, governance, risk and compliance reviews. In connection with these planned approaches, and to defend, detect and respond to cybersecurity incidents, we, among other things, will consider: conducting proactive privacy and cybersecurity reviews of systems and applications, audits of applicable data policies, performing penetration testing using external third-party tools and techniques to test security controls, conducting employee training, monitoring emerging laws and regulations related to data protection and information security, and implementing appropriate changes.


text: As part of the above planned processes, we may engage external auditors and consultants with expertise in cybersecurity to assess our internal cybersecurity programs and compliance with applicable practices and standards.


text: We plan to design our risk management program to also assesses third party risks, and we plan to perform third-party risk management to identify and mitigate risks from third parties, such as vendors, suppliers, and other business partners associated with our use of third-party service providers. In addition to new vendor onboarding, we plan to perform risk management during third-party cybersecurity compromise incidents to identify and mitigate risks to us from third-party incidents.


text: We expect that cybersecurity will become an important part of our risk management processes and an area of focus for our Board of Directors and management. We expect that our Board of Directors will be responsible for the oversight of risks from cybersecurity threats. We expect our senior management will provide our Board of Directors updates on a quarterly basis regarding matters of cybersecurity. This is expected to include existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives. We expect that our Board members will also engage in periodic conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.


text: Currently, our Chief Executive Officer is expected to lead our cybersecurity risk assessment and management processes and oversees their implementation and maintenance. Our Chief Executive Officer will be tasked with staying informed about, and monitoring the prevention, mitigation, detection and remediation of cybersecurity incidents through his management of, and participation in, the cybersecurity risk management and strategy processes we plan to develop and as described above, including the operation of an incident response plan, and report to the Board of Directors on any appropriate items.


text: Organizations in our industry are frequently confronted with a broad range of cybersecurity threats, ranging from uncoordinated, individual attempts to gain unauthorized access to an organization's information technology ("IT") environment to sophisticated and targeted cyberattacks sponsored by foreign governments and criminal enterprises. Although we employ comprehensive measures to prevent, detect, address, and mitigate these threats, a cybersecurity incident could potentially result in the misappropriation, destruction, corruption, or unavailability of critical data, personal identifiable information, and other confidential or proprietary data (our own or that of third parties) and the disruption of business operations. The potential consequences of a material cybersecurity incident include remediation and restoration costs, reputational damage, litigation with third parties, and diminution in the value of our investment in research and development, which in turn could adversely affect our competitiveness and results of operations. Accordingly, cybersecurity is an important part of our Enterprise Risk Management ("ERM") program, and the Company seeks to address cybersecurity risks through a comprehensive, cross-functional approach.

companyName: SKYX Platforms Corp.

ticker: SKYX


text: Company's cybersecurity policies, standards, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats and responding to cybersecurity incidents are integrated into the Company's risk management program and are based on recognized frameworks established by the National Institute of Standards and Technology. The Company has established controls and procedures, including an Incident Response Plan, that provide for the identification, analysis, notification, escalation, communication, and remediation of data security incidents at appropriate levels so that so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner. In particular, the Company's Incident Response Plan (i) is designed to identify and detect information security threats through various mechanisms, such as through security controls and third-party disclosures, and (ii) sets forth a process to (a) analyze any such threats detected within the Company's IT environment or within a third-party's IT environment, (b)


text: contain cybersecurity threats under various circumstances, and (c) better ensure the Company can recover from cybersecurity incidents to a normal state of business operations. The Company has established and maintains other incident response and recovery plans that address the Company's response to a cybersecurity incident.


text: As part of its cybersecurity program, the Company deploys measures to deter, prevent, detect, respond to and mitigate cybersecurity threats, including firewalls, anti-malware, intrusion prevention and detection systems, identity and access controls, software patching protocols, and physical security measures. The Company periodically assesses and tests the Company's policies, standards, processes, and practices that are designed to address cybersecurity threats and incidents, including by assessing current threat intelligence, conducting tabletop exercises, and vulnerability and security testing,. The Company has a process to report material results of such testing and assessments to the board, and periodically adjusts the Company's cybersecurity program based on these exercises. The Company engages third parties to conduct part of such testing The Company identifies and oversees cybersecurity risks presented by third parties and their systems from a risk-based perspective The Company also conducts cybersecurity training for employees (including mandatory training programs for system users).


text: Many of the Company's IT systems operate with a hosted architecture or by third-party service providers, and if these third-party IT environments fail to operate properly, our systems could stop functioning for a period of time, which could put our users at risk. Accordingly, our ability to keep our business operating is highly dependent on the proper and efficient operation of IT service providers, and our vendor management process is an important part of our risk mitigation strategy. In particular, we obtain reports from our vendors handling sensitive data as to their efficacy and efficiency in managing cybersecurity issues and follow-up with them on any potential or actual issues.


text: Notwithstanding, if there is a catastrophic event, such as an adverse weather condition, natural disaster, terrorist attack, security breach, or other extraordinary event, the Company, and our service providers, may be unable to provide our products or services for the duration of the event and/or a time thereafter.


text: Considering the pervasive and increasing threat from cyberattacks, the board and the audit committee, with input from management, assess the Company's cybersecurity threats and the measures implemented by the Company to mitigate and prevent cyberattacks. The audit committee consults with management regarding ongoing cybersecurity initiatives, and requests management to report to the audit committee or the full board regularly on their assessment of the Company's cybersecurity program and risks. Both the audit committee and the full board will receive regular reports from its senior management on cybersecurity risks, timely reports regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed. Our board has risk management experience. We hire consultant and third parties to conduct our threat assessments and supplement the monitoring of such threats addition, the Company's information security and/cybersecurity program is managed by our Chief Technology Officer ("CTO") a, whose team is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes. The CTO provides periodic reports to our audit committee as well as our Co-Chief Executive Officers and Chief Financial Officer and other members of our senior management as appropriate. We have also established cross-functional teams to collaborate and communicate on cybersecurity-related issues. The reports to management include updates on the Company's cyber risks and threats, the status of projects to strengthen our information security systems, assessments of the information security program, and the emerging threat landscape. Our CTO, Mr. Eliran Ben-Zikri served in the one of the most elite computer units of the Israeli Defense Force and has over 10 years of experience in the cloud technology, previously holding senior positions in leading Israeli technology companies, including of the date of this report, the Company is not aware of risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.