text: Our Board of Directors oversees management's processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives. The full Board retains oversight of cybersecurity because of its importance. In the event of an incident, we intend to follow our detailed incident response playbook, which outlines the steps to be followed from incident detection to mitigation, recovery, and notification, including notifying functional areas (e.g., legal), as well as senior leadership and the Board, as appropriate. We have implemented a governance structure and processes to assess, identify, manage, and report cybersecurity risk.


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. Based on our small size and limited number of employees and consultants, we rely extensively on information technology systems managed by third party major service providers to securely process, store and transmit our data to conduct business. Our employees and consultants utilize end point security tools, such as firewalls and anti-virus protection, to protect our data. To date, we have not engaged any assessors, consultants, auditors or other third parties in connection with our risk management system or processes.

companyName: Birchtech Corp.

ticker: BCHT

secItem: Item 1C


text: In connection with our use of third-party services providers, we have certain processes in place to oversee and identify cybersecurity risks from threats and incidents. We are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition. However, there could be cybersecurity threats or incidents in the future that may adversely affect our business. For more information, please refer to Part I, Item 1A. "Risk Factors" in this Annual Report on Form 10-K.


text: Our overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: the use of antivirus software, virtual private networks, email security, as well as other software to prevent and detect data intrusions.


text: the deployment of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure to vulnerabilities.


text: the review of the security procedures used by third parties that may host or otherwise have access to the Company's data. if necessary, the use of third-party security experts if and when an incident is detected.


text: Our Vice President of Operations oversees risks of cybersecurity threats and will report, as necessary, to the Board of Directors, including promptly reporting any cybersecurity incidents that may pose a significant risk to us. To date, our Vice President of Operations has not had to report any cybersecurity incidents to the Board. Our Vice President of Operations has over 25 years of experience in the industry and has overseen the day-to-day operations of the Company for over 10 years. Among other things, he has been responsible for day-to-day access management, network security and data protection solutions. Our Board of Directors has oversight of management to eliminate cybersecurity risks.


text: We have certain processes for assessing, identifying, and managing cybersecurity risks, which are built into our overall information technology function and are designed to help protect our information assets and operations from internal and external cyber threats, protect information from unauthorized access or attack, as well as secure our network and systems. Such processes include physical, procedural, and technical safeguards, tests on our systems, and routine review of our policies and procedures to identify risks and improve our practices. We engage certain external parties, including an information technology consultant, to enhance our cybersecurity oversight.

companyName: Gofba, Inc.


text: Our Board of Directors provides direct oversight over cybersecurity risk and provides periodic updates to management regarding such oversight. The Board of Directors receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding significant new cybersecurity threats or incidents.


text: Our informational technology consultant leads the operational oversight of company-wide cybersecurity strategy, policy, standards, and processes and works across relevant departments to assess and help prepare us and our employees to address cybersecurity risks. Our informational technology consultant has over 25 years of experience working with companies in the information technology field.


text: We are working with our information technology consultant to help improve our overall cybersecurity and plan to take any necessary steps to protect our information assets and operations from internal and external cyber threats in the event any such steps are recommended.


text: We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations, or financial condition.


text: The Company's cybersecurity environment is led by its Chief Executive Officer and sole director, who in addition to cybersecurity matters, oversees the Company's IT infrastructure and is responsible for monitoring and managing the security of the Company's corporate network and enterprise systems, including technical controls, and safety protocols and responding to security threats. The Company establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems.

companyName: Onar Holding Corp

ticker: ONAR


text: As of and for the year ended December 31, 2023, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.


text: We utilize a Cloud-only architecture which enables us to reduce risk by leveraging the scalability, high availability, and advanced security features of cloud platforms, thereby minimizing the potential for system downtime and data breaches while ensuring seamless disaster recovery options.

companyName: iCoreConnect Inc.


text: All 3rd party vendors' security policies are reviewed and updated as part of our annual Security Risk Assessment. Access to sensitive data is strictly regulated and provided on a need to know basis. Access is granted for the express purpose of assisting our customers with technical and training issues related to the use of our SaaS products; or for the purpose of research, design and development of product related features and bugfixes.


text: Risk management in software development involves identifying, assessing, and mitigating risks that could impact the project's success. This strategy begins with a thorough risk identification process, where potential issues such as technical challenges, project scope changes, and resource constraints are recognized early. Each risk is then assessed for its probability of occurrence and potential impact on the project. Based on this assessment, risk mitigation strategies are developed and implemented. These strategies might include adopting flexible project management methodologies like Agile, investing in training for team members, implementing robust testing and quality assurance processes, and maintaining open communication channels with all stakeholders. Additionally, regular risk reviews are conducted throughout the project lifecycle to ensure that new risks are identified and managed promptly.


text: The Company's' Cybersecurity Policies are updated annually and reviewed by Independent 3rd Party Vendors to certify compliance. The Company requires Cybersecurity Awareness training for all new hires and a minimum of an annual review of such policies for all employees. The Company created and deployed an extensive Learning Management System that tracks employee adherence to Cyber Security Awareness, HIPAA and other related content. The Company's' Cybersecurity Incident Response Policy provides specific steps for any employee that detects an attack to take to help stop the propagation of the threat and report the incident to their Superiors, the IT Team and the Security Manager.


text: While there are significant threats of all types in the modern connected world, studies show that phishing attacks and social engineering through email and other electronic means are of high concern. With the vast majority (some say as high as 95%) of such attacks originating via email, employee education on how to identify and handle suspicious email and other forms of communication is critical in protecting the data and infrastructure.


text: To date, we have not experienced any cybersecurity incidents that have materially affected our business strategy, results of operations or financial condition.


text: The Board is responsible for general risk oversight. The Board reviews and evaluates management's evaluation and mitigation of cyber risks as part of its oversight of the Company's Risk Management program. Management periodically reviews cyber risks, incidents, and risk mitigation plans and activities with the Board.


text: We engaged an outside consulting firm to conduct a review of our information systems environment and make recommendations to improve security where appropriate. Management shared the report's findings with the Board and periodically updates the Board regarding our progress on implementing the report's recommendations.


text: Our cybersecurity policies, standards, processes, and practices are based on applicable laws and regulations and informed by industry standards and industry-recognized practices. Our strategy to assess, identify, and manage material cybersecurity risks is focused on preserving the confidentiality, security, and availability of our information systems and data. We implement security measures and processes to identify, prevent, and mitigate cybersecurity threats and to effectively respond to cybersecurity incidents when they occur. Our cyber risk management includes: (1) enterprise risk management to identify top cybersecurity risks; (2) vulnerability management to identify software vulnerabilities and risks related to compute infrastructure; (3) vendor risk management to identify risks related to third parties and business partners; (4) privacy risk management to identify privacy risks in our product and platforms and ensure regulatory compliance; and (5) security incident response to investigate, respond to, and mitigate cyber threats. As needed, we will engage third parties to identify risks in our underlying software and infrastructure, to provide threat intelligence, and to assist in triaging, identifying, and responding to cyber threats.

companyName: Apple iSports Group, Inc.

ticker: AAPI


text: In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.


text: Our Board of Directors maintains oversight of risks from cybersecurity threats. Our Chief Executive Officer is assigned oversight of cyber-security risks. Our Chief Executive Officer is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents.


text: We have implemented and maintain a cybersecurity program in alignment with NIST standards and industry best practices. This cybersecurity program is designed to identify, assess, and manage material risks from cybersecurity threats to (i) our information systems and data, which include critical computer networks, third-party hosted services, communications systems, hardware, and software, and (ii) critical data, including our intellectual property, confidential information that is proprietary, strategic, or competitive in nature, and our customers' data. Core policies within the program include an information security policy, business continuity and disaster recovery policy, incident response policy, cyber supply chain risk management policy, and software development lifecycle policy.

companyName: Everything Blockchain, Inc.

ticker: EBZT


text: The Company relies on third-party service providers for a variety of products and services to run its information systems. Our Company's Chief Information Officer and Chief Information Security Officer are provided to us by a third-party service provider. This dependence exposes us, along with others who use these service providers, to the impact of a cyber-attack on their service providers. It is possible for a cyber-attack at a third-party service provider to have a significant financial, operational, or reputational impact to the Company. To reduce the effective impact to the Company of a cyber-attack on a third-party service provider, we continuously monitor the risks associated with our service providers through review of these providers' cybersecurity programs annually and when material changes to their programs occur.


text: Our Board of Directors has a Risk Committee to assist it in fulfilling its oversight responsibility with respect to the management of cybersecurity risks related to our products and services as well as our information technology and network systems. The responsibilities of the Risk Committee include overseeing our implementation and maintenance of cybersecurity measures, data governance, and compliance with applicable information security laws. The Risk Committee receives reports from management concerning our significant cybersecurity threats and risk and the processes we have implemented to address them. In addition, our Audit Committee has oversight responsibility over our internal financial controls and our risk management program, including disclosure controls related to cybersecurity. Senior management is responsible for the day-to-day operations of protecting the Company's information systems and periodically provides cybersecurity briefings to the entire board of directors. This includes a full brief and update to the Board of Directors from the Chief Information Officer and Chief Information Security Officer on the state of the Company's cybersecurity program on at least an annual basis.


text: Cybersecurity risk management is part of the Company's overall risk management. Our cybersecurity risk management is designed to provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers. We rely on the cybersecurity protections of many of our third party service providers. Our primary third party service providers, utilize two (2) factor authorization as well as login and password protections with email verifications.

companyName: Minerva Gold Inc.

ticker: MINR


text: Our Board has overall oversight responsibility for our risk management, including our cybersecurity risk management. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored. We have not experienced any cybersecurity incidents in fiscal year 2024.


text: Despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.


text: Due to the size of our company, we have not yet developed robust policies and processes for assessing, identifying, and managing material risk from cybersecurity threats. We have implemented access controls with respect to our systems, which we monitor regularly and audit annually. We currently rely heavily on products and services provided by third-party suppliers to operate certain critical business systems, including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions. We rely on third party providers and outsourced IT services to monitor and address cybersecurity related risks, including installing software for threat protection and malware. Such third-party providers are tasked with notifying management of any material risks or cybersecurity concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or appropriate. Based on the results of our risk assessments, if deemed necessary or appropriate, we take steps to re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards.

companyName: Avenir Wellness Solutions, Inc.


text: We intend to work with outside counsel and third-party service providers in the near term to further develop our expertise, processes and procedures with respect to cybersecurity protection and our response plan.


text: To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this Report.


text: Our management team is primarily responsible for assessing and managing our strategic risk exposures, including material risks from cybersecurity threats, with assistance from third-party service providers. Management oversees our cybersecurity process on a day-to-day basis, including those described in "Risk Management and Strategy" above.


text: Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats. Members of management provide periodic briefings to the audit committee of our board of directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. In furtherance thereof, the committee is responsible for monitoring and assessing strategic risk exposure. Our audit committee provides regular updates to the board of directors on such reports.


text: We rely on our information technology to operate our business. As such, we have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.

companyName: Authentic Holdings, Inc.

ticker: AHRO


text: We have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We engage a third-party consultant to assist us with our cybersecurity risk management framework, including the monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. Our third-party consultant team is managed by our Chief Executive Officer who reports to the board of directors.


text: As of December 31, 2023, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.


text: The Company understands the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Cybersecurity processes to assess, identify and manage risks from cybersecurity threats have been incorporated as a part of the Company's overall risk assessment process. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.

companyName: GlobalTech Corp

ticker: GLTK


text: We have processes in place to identify, assess and monitor material risks from cybersecurity threats, including the material risks of the Company. These processes are part of our overall enterprise risk management process and have been embedded in our operating procedures, internal controls and information systems. On a regular basis we implement into our operations these cybersecurity processes, technologies, and controls to assess, identify, and manage material risks. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, IT security, governance, risk and compliance reviews. Incidents are evaluated to determine materiality as well as operational and business impact, and reviewed for privacy impact.


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the headings " We are exposed to cyber-attacks and other cybersecurity threats that may lead to compromised or inaccessible telecommunications, digital and financial services, and/or leaks or unauthorized processing of confidential information, and perceptions of such threats may cause customers to lose confidence in our services ", included as part of our risk factor disclosures at Item 1A of this Annual Report on Form 10-K.


text: Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management.


text: Our Chief Executive Officer and President, Dana Green, is responsible for the oversight of risks from cybersecurity threats. The Board will receive information and updates periodically with respect to the effectiveness of our cybersecurity and information security framework, data privacy and risk management, which includes that of the Company. The Board will also be provided updates on any material incidents relating to information systems security and cybersecurity incidents.


text: As of and for the year ended December 30, 2023, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.


text: We use, store and process data for and about our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2024.

companyName: Accredited Solutions, Inc.

ticker: ASII


text: Under the oversight of the Board of Directors (since we do not currently have an Audit Committee), we intend to implement and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes would be integrated into our overall risk management processes. We intend to implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify and address cybersecurity risks. In support of this approach, it is expected that we would have a third-party security consultant implement processes to assess, identify and manage security risks to our company, including in the pillar areas of security and compliance, application security, infrastructure security and data privacy. This process, once implemented, would include regular compliance and critical system access reviews. In addition, we intend to conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office, and Google enterprise to provide protection against cybersecurity threats.


text: Further, we intend to put processes in place that would evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that would have access to our data, including a review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: Part of our intended program would be ongoing evaluation and enhancement of our systems, controls and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition.


text: Our board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer and Chief Financial Officer, are actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM"). Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: Hempacco Co., Inc.

ticker: HPCO


text: In addition, we regularly review cybersecurity trends and, partially as a result of our prior cybersecurity exposure, have moved some of our internal servers to off-site locations.


text: As one of the critical elements of our overall ERM approach, our cybersecurity efforts are focused on the following key areas: Governance: Management oversees cybersecurity risk mitigation and reports to the board of directors any cybersecurity incidents.


text: Collaborative Approach: We have implemented a cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Technical Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: Third parties also play a role in our cybersecurity. We engage third-party service providers to conduct evaluations of our security controls, independent audits or consulting on best practices to address new challenges.


text: While we have experienced cybersecurity threats in the past in the normal course of business and expect to continue to experience such threats from time to time, to date, none have had a material adverse effect on our business, financial condition, results of operations or cash flows. Even with the approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: Due to the size of the Company, we have not yet developed robust policies and processes for assessing, identifying, and managing material risk from cybersecurity threats. We and our subsidiaries currently rely heavily on products and services provided by third-party suppliers to operate certain critical business systems, including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions. We rely on third party providers and outsourced IT services to monitor and address cybersecurity related risks, including installing software for threat protection and malware. Such third party providers are tasked with notifying management of any material risks or cybersecurity concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or appropriate.

companyName: SinglePoint Inc.

ticker: SING


text: We intend to work with outside counsel and third party service providers in the near term to further develop our expertise, processes and procedures with respect to cybersecurity protection and our response plan.


text: To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, "Risk Factors," in this Report. We maintain a cyber liability insurance policy. However, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations.


text: Our management team is primarily responsible for assessing and managing our strategic risk exposures, including material risks from cybersecurity threats, with assistance from third-party service providers. Management oversees our cybersecurity process on a day-to-day basis, including those described under the heading "Cybersecurity Risk Management and Strategy" above.


text: Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats. Members of management provide periodic briefings to [the audit committee of ]our board of directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. In furtherance thereof, the committee is responsible for monitoring and assessing strategic risk exposure. Our audit committee provides regular updates to the board of directors on such reports.


text: We do not have any processes for assessing, identifying, and managing material risks from cybersecurity threats.

companyName: Agentix Corp.

ticker: AGTX


text: Risks from Cybersecurity Threats To date, we have not yet experienced any cybersecurity threats or incidents that have materially affected or are reasonably likely to materially affect our business, financial condition or results of operations.


text: Our board of directors (the "Board") is acutely aware of the critical nature of managing risks associated with cybersecurity threats given the significance of these threats to our operational integrity and stakeholder confidence.


text: The Board has oversight of cybersecurity risks and bears the primary responsibility for this domain. The members of our Board do not have experience in enterprise risk management, compliance, corporate governance, technology, or finance to equipping them to oversee cybersecurity risks effectively.


text: At present the Company has minimal risk related to Cybersecurity as no operational business is conducted on the internet or available through the internet.

companyName: ADVANCED OXYGEN TECHNOLOGIES INC

ticker: AOXY


text: Cybersecurity risk management will be an integral part of our overall enterprise risk management efforts once the Company has determined how and what security measures will need to be deployed. No enterprise risk can be eliminated entirely. We will seek to mitigate as much risk as possible and manage the remaining financial risk internally.


text: Our Board of Directors has primary responsibility for evaluating cybersecurity risk management, overseeing our major cybersecurity risk exposures and the steps management has taken to monitor and control these exposures, including policies and procedures for assessing and managing risk, as well as oversight of compliance related to legal and regulatory exposure.


text: The "to be newly formed" management positions responsible for assessing and managing cybersecurity risks will be a Director of Cybersecurity and a Chief Information Officer ("CIO"), who will report directly to our CFO. Presently our CFO is undertaking the actions of both the Director of Cybersecurity and CIO. The CIO will be responsible for ensuring that we have a cybersecurity risk management program in place that is fully aligned with business requirements and strategy.


text: In 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.

companyName: Incordex Corp.


text: We regularly review our cybersecurity defenses to assess our vulnerability to cybersecurity attacks from viruses, malware and more sophisticated and targeted cyber-related attacks such as hackers looking to demand ransomware or access our systems to obtain information and data, as well as our vulnerability to cybersecurity failures resulting from human error and technological errors. We rely upon internal IT personnel working in conjunction with specialized outside security consultants on a day-to-day basis to conduct reviews and upgrade our systems when determined to be necessary.

companyName: MedWellAI, Inc.

ticker: MWAI


text: Our overall strategy in combatting cybersecurity risks includes a variety of measures, including: the use of antivirus software, virtual private networks, email security, as well as other software and system-wide measures such as multi-factor authorization to prevent and detect data intrusions;


text: deployment of updates and patches as they become available from our software suppliers and consultants and maintaining the current versions of major software to reduce the exposure to vulnerabilities; the use of third-party services to conduct mandatory online training for all employees regarding identifying and avoiding cyber-security risks;


text: the review of the security procedures used by third parties that may host or otherwise have access to our systems;


text: the deployment of third-party cyber-security experts to perform penetration testing on our internal and external networks and systems in an effort to identify potential vulnerabilities; and consideration of the cybersecurity risks posed by interacting with current and potential third-party service providers, suppliers and customers.


text: We are not aware of any existent weakness in our systems or malware embedded in our systems that would materially affect, or are reasonably likely to materially affect, our operations.


text: The Board, as a whole, has oversight responsibility for our strategic and operational risks. The Board is responsible for oversight of our efforts to eliminate cybersecurity risks. The Board meets regularly with our Chief Executive Officer and Chief Financial Officer.


text: We rely upon internally and externally managed information technology systems and networks for the collection and storage of sensitive data and business information. We approach cybersecurity risks with a comprehensive risk management and governance strategy designed to assess, identify, and manage cybersecurity risks to our business.

companyName: Hawkeye Systems, Inc.

ticker: HWKE


text: Our cybersecurity program is designed to detect cybersecurity threats and vulnerabilities, protect our information systems from such threats, and ensure the confidentiality, integrity, and availability of systems and information used, owned or managed by us. Our focus is on protecting sensitive information, such as personal information of our customers and employees, and confidential business information that could be leveraged by a competitor or a malicious actor.


text: Our cybersecurity program has several components, including the adoption of information security protocols, standards, and guidelines consistent with best industry practices; engaging third-party service providers to conduct security assessments and penetration testing; and performing periodic internal audits of our cybersecurity protocols. We employ a risk-based process designed to manage cybersecurity risks presented by third-party vendors that may have access to our sensitive information and/or information technology ("IT") systems. This process may consider the nature of the services provided, the sensitivity and quantity of information processed, the criticality of any potentially impacted IT systems, and/or the strength of the vendor's cybersecurity practices.


text: We monitor potential cybersecurity risks through tracking. These key risks are characterized by various factors such as the likelihood of us experiencing a particular type of cybersecurity incident, the speed at which each type of cybersecurity incident could impact the Company, and management's assessment of the Company's ability to respond quickly and efficiently.


text: An incident response plan aligned with best practices guidelines governs our response to cybersecurity incidents. The incident response plan outlines how we can detect, analyze, contain, eradicate, recover, and perform post-incident activities in the event of a cybersecurity incident. It also contains an internal, risk-based escalation framework designed to ensure that all relevant individuals are promptly informed of any cybersecurity incident and dictates procedures for determining whether a cybersecurity incident is material without unreasonable delay.


text: Material Effects from Risks of Cybersecurity Threats While we may experience minor data and cybersecurity incidents from time to time, to our knowledge, the risks posed by cybersecurity threats have not materially affected and are not reasonably likely to materially affect our business strategy, results of operations or financial condition. However, there can be no assurance that we will not be materially affected by such risks in the future. A successful cybersecurity attack may expose us to misuse of information or systems, the compromising of confidential information, manipulation or destruction of data, production downtimes, and operations disruptions.


text: Role of Management One of the key functions of our executive officers, in connection with our IT team, is informed oversight of our risk management process, which includes risks from cybersecurity threats. Our executive ooficers monitor and assess strategic risk exposure, and manage the material risks we face.


text: Our executive officers who have experience in IT, work with our board of directors to manage our cybersecurity policies and processes. Together, they stay informed and manage how we identify, address, prevent and resolve cybersecurity issues and related matters. They also track how we prevent, identify, lessen, and address cybersecurity issues. This is done through regular checks of our systems, tests to identify security weaknesses, and maintaining an incident response plan. In addition to such regular system checks, our executive officers, together with the board of directors, regularly discuss active, emerging and potential cybersecurity risks. They keep each other informed about significant changes affecting cybersecurity, and they periodically update management with these changes, as well as our cybersecurity risks, so that management can administer its oversight function as a part of its broader oversight and risk management.


text: Risk Management and Security The Company's Cybersecurity Policy outlines our guidelines and provisions for preserving the security of our data and technology infrastructure. The more the Company relies on technology to collect, store and manage information, the more vulnerable to severe security breaches the Company becomes. Human errors, hacker attacks and system malfunctions could cause significant financial damage and may jeopardize the Company's reputation. For this reason, the Company has implemented extensive security measures, has prepared instructions in order to mitigate security risks, and has outlined both provisions in this policy.

companyName: XERIANT, INC.

ticker: XERI


text: Our Board of Directors oversees our risk management, including our information and cybersecurity policies and risk assessments. Our management reports to our Board of Directors on information security as necessary, regarding any significant cybersecurity incidents.


text: Our board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer and Chief Financial Officer, are actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM"). Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: AnTix Holdings, Inc.

ticker: IMTH


text: As one of the critical elements of our overall ERM approach, our cybersecurity efforts are focused on the following key areas: Governance: Management oversees cybersecurity risk mitigation and reports to the board of directors any cybersecurity incidents.


text: Collaborative Approach: We have implemented a cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Technical Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, Third parties also play a role in our cybersecurity. We engage third-party service providers to conduct evaluations of our security controls, independent audits or consulting on best practices to address new challenges.


text: While we have experienced cybersecurity threats in the past in the normal course of business and expect to continue to experience such threats from time to time, to date, none have had a material adverse effect on our business, financial condition, results of operations or cash flows. Even with the approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: Risks related to Cybersecurity Incidents We face significant risks related to cybersecurity threats, which could adversely affect our business, financial condition, and results of operations. Cybersecurity incidents, including but not limited to unauthorized access, data breaches, and other malicious activities, could result in the loss or theft of sensitive information, disruption of our operations, and damage to our reputation. While we have implemented measures to protect our information systems, there can be no assurance that these measures will effectively prevent all cybersecurity incidents.

companyName: LEAFBUYER TECHNOLOGIES, INC.

ticker: LBUY


text: Data Breaches: A breach of our information systems could lead to unauthorized access to customer or employee data, resulting in reputational harm and legal liabilities. Operational Disruption: Cybersecurity incidents could disrupt our operations, leading to delays in production, delivery, or fulfillment of customer orders.


text: Intellectual Property Theft: Unauthorized access to our proprietary information could result in intellectual property theft, impacting our competitive position in the market.


text: Cybersecurity incidents may subject us to regulatory investigations, legal claims, and penalties, affecting our compliance with applicable laws and regulations.


text: Third-Party Relationships: Our reliance on third-party vendors and service providers exposes us to additional cybersecurity risks, and a security breach affecting these entities could impact our operations.


text: Although, to date, cybersecurity incidents have not materially impacted our business strategy, results of operations, or financial condition, there can be no assurances that they will not do so in the future. Refer to "Item 1A. Risk factors" in this Annual Report for additional information about cybersecurity-related risks.


text: Risk Management and Strategy Assessing, Identifying, and Managing Material Cyber Threats We have in place certain infrastructure, systems, policies, and procedures that are designed to proactively and reactively address circumstances that arise when unexpected events such as a cybersecurity incident occur. These include processes for assessing, identifying, and managing material risks from cybersecurity threats. We consult with external parties, such as cybersecurity firms and risk management and governance experts, on risk management and strategy. We use a team of outside vendors and government services specializing in IT and cybersecurity that provide expertise, tools, and methodologies to identify and assess vulnerabilities and potential threats. Automated tools and AI-based user behavior analytics also support identification and management of cyber threats. Response to a broad category of threats is immediate and automatic. Security personnel and members of our management are alerted when cyber threats or anomalies are detected. Persistent threats or issues that, in the opinion of management, are material are immediately brought to the attention of our board of directors.


text: In the event of a detected cyber incident by 24/7 monitoring software or employee notification, our IT and cybersecurity provider performs a detailed assessment of the incident, identifies the source of the problem, and resolves the issue as appropriate. If they are unable to resolve the issue, the problem is escalated to our cybersecurity monitoring and detection software provider for resolution. Events which are not routinely resolved by our IT and cybersecurity provider are brought to the attention of the board.


text: In order to mitigate risks of cybersecurity incidents, critical business and operational data are backed up at night and stored offsite for security purposes and to restore data in the event of a breach. Additionally, we provide cybersecurity awareness training of our employees, incident response personnel, and senior management.


text: Our executive management team is primarily responsible for assessing and managing our material risks from cybersecurity threats. Management supervises both our internal cybersecurity and IT related personnel, as well as our retained external cybersecurity consultants and vendors. Additionally, they supervise efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefing from internal or external security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants or vendors engaged by us; and alerts and reports produced by security tools deployed in our IT environment.


text: Our board of directors provides oversight and oversees management's processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives. Two of our management have received training on cyber risk governance for public companies, regularly brief our board of directors on our cybersecurity and information security posture as well as cybersecurity incidents deemed to have a moderate or higher business impact, even if viewed as immaterial to us. As cyber threats evolve and become more sophisticated, we believe that the board's involvement in cybersecurity governance ensures that we are adequately focused on resources and protecting the Company's assets and reputation.


text: Cybersecurity risk management is part of the Company's overall risk management. Our cybersecurity risk management is designed to provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers. We rely on the cybersecurity protections of many of our third party service providers. Our primary third party service providers, utilize two (2) factor authorization as well as login and password protections with email verifications.

companyName: Guru App Factory Corp

ticker: GAFC


text: Our Board has overall oversight responsibility for our risk management, including our cybersecurity risk management. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored. We have not experienced any cybersecurity incidents in fiscal year 2024.


text: Despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.


companyName: Oyocar Group Inc.

ticker: OYCG


text: We have developed and maintain a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats. This involves ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations. Our management team oversee and identify material risks from cybersecurity threats associated with our use of such entities.

companyName: Astra Energy, Inc.

ticker: ASRE


text: As of the date of this Report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this Report.


text: The Company has implemented comprehensive procedures and infrastructure to protect our network from cybersecurity attacks. However, since such threats are ongoing and continue to evolve, we regularly consider the effectiveness of our cybersecurity framework. Our Director of IT, reporting to our Chief Financial Officer, has primary management responsibility over day-to-day oversight and evaluation of cybersecurity systems and processes, including monitoring for potential cyber threats. The Director of IT meets with the Chief Financial Officer and senior management, and when appropriate, the Board of Directors, to provide updates when there are changes to our risk management, systems, processes, or efforts. The Company conducts regular training for employees to mitigate cyber risks such as exposure to phishing and social engineering attacks. In the event of a network security incident, senior management and our Audit Committee are notified immediately. The Audit Committee takes the lead on behalf of the Board of Directors. The full Board of Directors is informed regularly of the status of any and all cyber incidents. We have a comprehensive incident response plan which is carried out by our IT department under the oversight of senior management and our Audit Committee and includes engagement of third party cybersecurity experts and our cyber insurance carrier and legal teams, as needed.

companyName: GEE Group Inc.

ticker: JOB


text: As of the September 30, 2024, we have not identified any material weaknesses in our cybersecurity controls. Our ability to protect our business from cybersecurity risks is subject to uncertainty, and there can be no assurance that our cybersecurity measures will prevent all potential attacks.


text: In the ordinary course of our business, the Company is subject to cybersecurity threats and risk which it manages as an important component of its overall enterprise risk management and mitigation strategy. We use, store and process data for our customers, employees, partners and suppliers. We have not yet implemented a formal cybersecurity risk management program designed to identify, assess and mitigate risks from cybersecurity threats to this data, our systems and business operations. We intend to implement a cybersecurity risk management program before the end of 2024.

companyName: T-REX Acquisition Corp.

ticker: TRXA


text: Cyber Risk Management and Strategy Under the oversight of our Audit Committee, we intend to implement and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes would be integrated into our overall risk management processes. We intend to implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify and address cybersecurity risks. In support of this approach, it is expected that we would have a third-party security consultant implement processes to assess, identify and manage security risks to our company, including in the pillar areas of security and compliance, application security, infrastructure security and data privacy. This process, once implemented, would include regular compliance and critical system access reviews. In addition, we intend to conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process.


text: We expect to utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing. We intend to utilize well-known cloud-based technologies and service providers, such as Amazon AWS, Microsoft Office, and Google enterprise to provide protection against cybersecurity threats.


text: Further, we intend to put processes in place that would evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that would have access to our data, including a review process for such providers' cybersecurity practices, risk assessments, contractual requirement and system monitoring.


text: Part of our intended program would be ongoing evaluation and enhancement of our systems, controls and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.


text: Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition.


text: As of the date of this Annual Report, we believe that we have limited risks associated with a breach in cybersecurity. Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents (of which we are not aware of any), have not materially affected or are not reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition. Risk management and strategy.

companyName: TOKEN COMMUNITIES LTD.

ticker: TKCM


text: We have not established specific processes for assessing, identifying, and managing material risks from cybersecurity threats or engaged third parties to assess such risks. However, if exposed to such a risk, we would assess any potential unauthorized attempts to access our information systems that may result in adverse effects on the confidentiality, integrity, or availability of those systems.


text: While we lack a formal risk assessment policy or analysis and no process has been integrated into our management system, a risk assessment would likely include identification of any reasonably foreseeable internal and external risks, any likelihood and potential damage that could result from such risks, and whether existing safeguards are sufficient to manage such risks. If appropriate and necessary, we would implement reasonable safeguards to minimize identified risks and address any identified gaps in existing systems.


text: Primary responsibility for assessing any cybersecurity risks rests with our chief executive officer, who would report any threat to our board of directors.


text: To date, we have not encountered cybersecurity threats or challenges that have materially impaired our operations, business strategy or financial condition.


text: In 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced undetected cybersecurity incidents.

companyName: KHEOBA CORP.

ticker: KHOB


text: In the ordinary course of business, the Company is subject to cybersecurity risks, which the Company manages as a component of its overall risk management strategy. The Company's management recognizes the impact that cybersecurity threats could have on our business operations, our compliance with regulations and our reputation. The Company has created a cybersecurity monitoring and reporting framework which is uses to respond to any potential cybersecurity risks. As part of this framework, the Company utilizes a third party vendor to provide network security and assist with protection against cybersecurity risks through network assessments, monitoring, and related activities. The Company's management continues to assess material risks from cybersecurity threats, its compliance policies, and its reporting framework in order to limit the risk posed by cybersecurity incidents.

companyName: Kingfish Holding Corp


text: The Board of Directors conducts informed oversight of the Company's risk management process, including risks from cybersecurity threats. The Board of Directors is responsible for monitoring and assessing strategic risk exposure. The Company's management is responsible for identifying any potential cybersecurity risks to the Board of Directors and monitoring compliance practices at the operational level.


text: While the Company believes it has adequate processes and technology in place to detect and respond to cybersecurity threats, the Company is continually at risk given an ever-changing cybersecurity landscape. Accordingly, the Company can provide no assurances that a future cyber-attack would not impact the Company's business in a material manner. At the effective date of this Annual Report, however, the Company is not aware of any current or past cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.


text: Our board of directors and senior management recognize the critical importance of maintaining the trust and confidence of our clients, business partners and employees. Our management, led by our Chief Executive Officer, is actively involved in oversight of our risk management efforts, and cybersecurity represents an important component of the Company's overall approach to enterprise risk management ("ERM"). Our cybersecurity processes and practices are fully integrated into the Company's ERM efforts. In general, we seek to address cybersecurity risks through a cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

companyName: AMJ Global Technology


text: As one of the critical elements of our overall ERM approach, our cybersecurity efforts are focused on the following key areas: Governance: Management oversees cybersecurity risk mitigation and reports to the board of directors any cybersecurity incidents.


text: Collaborative Approach: We have implemented a cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.


text: Technical Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-virus and anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.


text: We have not engaged third-party service providers to conduct evaluations of our security controls, independent audits or consulting on best practices to address new challenges.


text: While we have not experienced any cybersecurity threats in the past in the normal course of business, in the future, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.


text: Lightbridge utilizes third-party vendors to manage its Information Technology (IT) systems via a Managed Service Provider (MSP) for general administration of the IT process including providing a Virtual Chief Information Officer (vCIO).

companyName: LIGHTBRIDGE Corp

ticker: LTBR


text: vCIO services include: (a) operational review, strategic planning, technology road-mapping; (b) development of a custom IT policy/handbook; and (c) reporting in accordance with the service level agreement and support commitment adherence data to Lightbridge via MSP's Service Delivery Team.


text: Providing operational oversight of IT functions Identify and help plan for improvements to Lightbridge's overall infrastructure Assist with the management of technology vendors Act as a point of contact in emergency/systems down situations and liaison between Lightbridge and Dataprise resources Perform trend analysis and document recommendations to Lightbridge as needed.


text: Lightbridge also utilizes third-party vendors to manage its cybersecurity needs via a Managed Services Security Provider (MSSP). MSSP services include: Managed Security Services Email Phishing Simulations End User Security Awareness Training Dark Web Credential Monitoring Vulnerability Scanning Next-Generation Anti-Virus ("NGAV")


text: We and our MSP/MSSP also utilize processes designed to reduce cybersecurity risk from a third-party vendor and technology. For example, we may conduct upfront diligence of the third-party's cybersecurity, employ contracts that address cybersecurity risk, and monitor vendors compliance with their representations regarding cybersecurity. The MSSP utilizes a Security Information and Event Management (SIEM) system to monitor the IT Infrastructure. The SIEM and other third-party security tools/applications provide reports that include but are not limited to endpoint protection, employee security scores, phishing reports, Dark Web scanning and vulnerability scanning.


text: The vCIO reports to our CFO. This vCIO is informed about and monitors prevention, detection, mitigation, and remediation efforts through regular communication and reporting from other professionals in the industry, many of whom hold cybersecurity certifications, and through the use of technological tools and software and results from third-party audits.


text: The vCIO issues quarterly reports and reports to the CFO, as appropriate, to provide updates on the Company's cyber risks and threats, the status of projects to strengthen our information security systems, assessments of the information security program, and the emerging threat landscape.


text: The Company requires its employees and applicable contractors to take a yearly cyber training courses and its employees and applicable contractors are also required to sign confidentiality agreements for purposes including ensuring cybersecurity. We and our MSP/MSSP have established an incident response plan to assist with responding to cybersecurity incidents. The incident response plan includes our approach to identification, escalation, and restoration from incidents, such as engaging or informing third-party experts, law enforcement, and members of the Board of Directors, as appropriate.


text: The Board of Directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. The Board has established robust oversight mechanisms to promote effective governance in managing risks associated with cybersecurity threats because Lightbridge recognizes the significance of these threats to our operational integrity and stakeholder confidence. Furthermore, significant cybersecurity matters such as significant cybersecurity incidents, and strategic risk management decisions are designed to be escalated to the Board of Directors, so that they have appropriate oversight and can provide guidance.


text: The Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this domain. The Audit Committee is composed of board members with diverse expertise including risk management, technology, and finance that helps equip them to oversee cybersecurity risks effectively. The Audit Committee conducts an annual review of the company's cybersecurity posture and the effectiveness of its risk management strategies. This review helps in identifying areas for improvement and aligning cybersecurity efforts with the overall risk management framework. The CFO reports to the Audit Committee regarding cybersecurity risks and provides a comprehensive briefing to the Audit Committee on a regular basis as needed, with a minimum frequency of once per year. The CFO also maintains an ongoing dialogue with the Audit Committee regarding emerging or potential cybersecurity risks and cybersecurity incidents. The Audit Committee evaluates the materiality of cybersecurity incidents to determine if they require disclosure, such as an 8-K filing. This includes assessing the potential impact of cybersecurity risks or incidents on the company's financial position, operations, and reputation.


text: Risks from Cybersecurity Threats As of the date of this report, while we are not aware of any material risks from cybersecurity threats, including cybersecurity incident, that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition, there can be no guarantee that there will not be a future cybersecurity incident that will have a material impact. In the event of a cybersecurity incident, our insurance coverage may be inadequate to compensate us for any related losses we incur and, in some cases, our insurance coverage may not cover the cybersecurity incident at all. Additional information on cybersecurity risks we face can be found in Part I, Item 1A. Risk Factors – "We are exposed to risks related to cybersecurity and protection of confidential information" of this Annual Report on Form 10-K.


text: We periodically assess risks from cybersecurity threats, and monitor our information systems for potential vulnerabilities. However, to date, given the small size of our company and the nature of our operations, our reliance on information systems has been limited to the use of standard off-the-shelf software (such as Microsoft Office) and the use by our employees of standard personal computers. Accordingly, management has not implemented any formal process for assessing, identifying, and managing risks from cybersecurity threats.

companyName: CREATIVE MEDICAL TECHNOLOGY HOLDINGS, INC.

ticker: CELZ


text: Risks from cybersecurity threats have, to date, not materially affected us, our business strategy, results of operations or financial condition. We discuss how cybersecurity incidents could materially affect us in our risk factor disclosures in Item 1A of this Annual Report on Form 10-K.


text: As discussed above, given the nature of our current operations and our experience to date, we do not currently perceive cybersecurity as a particularly significant risk to our business. Accordingly, we have not tasked our Board of Directors with any additional cybersecurity oversight duties, or designated any committee of the Board of Directors to specifically oversee cybersecurity risks to our business.


text: The Company understands the importance of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. Cybersecurity processes to assess, identify and manage risks from cybersecurity threats have been incorporated as a part of the Company's overall risk assessment process. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.

companyName: GlobalTech Corp

ticker: GLTK


text: We have processes in place to identify, assess and monitor material risks from cybersecurity threats, including the material risks of the Company. These processes are part of our overall enterprise risk management process and have been embedded in our operating procedures, internal controls and information systems. On a regular basis we implement into our operations these cybersecurity processes, technologies, and controls to assess, identify, and manage material risks. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, IT security, governance, risk and compliance reviews. Incidents are evaluated to determine materiality as well as operational and business impact, and reviewed for privacy impact.


text: Our subsidiary operations in Worldcall Public are additionally subject to cyber security audits by Regulator (Pakistan Telecommunication Authority). The last audit for network security (Including Cyber Security) was conducted in 2023 with a clean report on compliance.


text: The Company's software development work is monitored by a dedicated Governance structure which is also responsible for cyber security of software operations. The Company is also processing compliance to standards applicable to specific industry requirements (SOC 2).


text: Due to nature of our business related to telecom, broadband, software development and cable services, respective operations have implemented internal policies that cover network security, IT infrastructure and software, physical access controls, data security, privacy policy required for operations.


text: We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the headings " We are exposed to cyber-attacks and other cybersecurity threats that may lead to compromised or inaccessible telecommunications, digital and financial services, and/or leaks or unauthorized processing of confidential information, and perceptions of such threats may cause customers to lose confidence in our services ", included as part of our risk factor disclosures at Item 1A of this Annual Report on Form 10-K.


text: Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management.


text: Our Chief Executive Officer and president, Dana Green, is responsible for the oversight of risks from cybersecurity threats. The Board will receive information and updates periodically with respect to the effectiveness of our cybersecurity and information security framework, data privacy and risk management, which includes that of the Company. The Board will also be provided updates on any material incidents relating to information systems security and cybersecurity incidents.


text: As of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.


text: Since 2018 the Company has been primarily focused on pursuing FDA Pre-Market Approval (PMA) for its CelluSTAT products to enable it to access the Class III surgical markets and has de-emphasized its commercial operations. We have fewer than 10 employees and consultants and currently use third-party vendors and service providers for certain product development and regulatory approval activities. Most of the information generated and collected by the Company is stored and maintained by these third-party vendors and service providers. Each of these providers has demonstrated its own cybersecurity protocols which our management believes to be adequate for protecting the Company's digital files in their possession. Our CEO (who is also one of the Company's directors) and VP of Finance are responsible for assessing and managing cybersecurity risks. Neither of them have cybersecurity expertise. Due to the current small size and limited commercial operations of the Company, we have no formal cybersecurity policies and processes in place, however, the Board and management believe cybersecurity represents an important component of the Company's overall approach to risk management and oversight.

companyName: United Health Products, Inc.

ticker: UEEC


text: Cybersecurity threats have not materially affected, and are not reasonably likely to affect, the Company, including its business strategy, results of operations or financial condition while we are strategically focused on pursuing FDA PMA approval and have minimal commercial operations. The Company is not aware of any material security breach to date. Accordingly, the Company has not incurred any expenses over the last two years relating to information security breaches. The occurrence of cyber-incidents, or a deficiency in our cybersecurity or in those of any of our third-party service providers could negatively impact our business by causing a disruption to our operations, a compromise or corruption of our confidential information and systems, or damage to our business relationships or reputation, all of which could negatively impact our business and results of operations. There can be no assurance that the Company's third-party vendors' and service providers' cybersecurity risk management processes, including their policies, controls or procedures, will be effective in protecting the Company's systems and information.


text: Cybersecurity is an area of increasing concern to management and our investors. There are two main areas involving personal data that we pay particular attention to: 1) Patient data of women enrolled in our clinical trials or commercially by overseas partners and 2) Company employee information, By design, our device and software (LuViva) are not connected to the internet. Patient results cannot be saved to the device and must first be downloaded to a flash drive and then transferred to another computer or cloud-based system to be saved. The design of our product limits our exposure to the compliance requirements of NIST 800 - 171.

companyName: GUIDED THERAPEUTICS INC

ticker: GTHP


text: Regarding employee information, our Company generally keeps all employee personally identifiable information with our payroll service provider. Each year the provider furnishes us with their SOC report which includes their cybersecurity policies and procedures.


text: The board of directors, as a whole, has oversight responsibility for our strategic and operational risks, while we engage consultants who are responsible for day-to-day assessment and management of cybersecurity risks and who report regularly to the board of directors. We have previously experienced cybersecurity incidents, from time to time. These incidents have not materially affected our business strategy, results of operations or financial condition. We are not currently aware of any cybersecurity incidents that would have a material effect on our business strategy, results of operations or financial condition. Nevertheless, there is always a risk that a phishing attempt, ransomware or other attack by a bad actor could have a material adverse effect on our financial position or results of operations. Based on information currently available, management does not believe that there is a reasonably likely risk of these issues, nevertheless the possibility of one occurring cannot be completely ruled out.


text: Cybersecurity incident" means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through our information systems that jeopardizes the confidentiality, integrity, or availability of our information systems or any information residing therein.

ticker: CBDW


text: Cybersecurity threat" means any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.


text: Information systems" means electronic information resources, owned or used by us, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of our information to maintain or support our operations.


text: We monitor our websites and online accounts frequently to manage risks associated with cyber-security risks. Our website is monitored by a third party to check if the website or email server is secure. Our webmaster informs us of any issues that may arise in the cyber sector. We are prepared to inform all parties necessary if any breach of cyber-security were to happen. We have never had this problem and so we have never had to inform consultants, auditors, or other third parties.


text: We have never had a breach of cyber-security at any point in our past. The risk to us of cybersecurity threats is in data storage of customer questions and emails. A breach of customers data could negatively materially affect our public trust and could result in loss of customers and revenue.


text: Our board of directors has no specific processes for monitoring cybersecurity within the Company. There is no subcommittee specifically for monitoring cybersecurity in the Company.


text: Our management monitors our websites and online accounts frequently to manage risks associated with cyber-security risks. Our management has more than 20 years of experience working in the technology industry, which enables it to identify cybersecurity risks associated with the Company. Our management communicates with our board on matters of cybersecurity but, has not had to inform them of any breaches thus far.


text: We have developed and maintain a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats, including by engaging a third-party cybersecurity service provider, which communicates directly with our management and compliance personnel. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations.

companyName: BioCorRx Inc.

ticker: BICX


text: Our cybersecurity risk management methodology includes: risk assessments designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;


text: individuals, including employees and external third-party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;


text: the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;


text: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and a third-party risk management process for service providers, suppliers, and vendors.


text: We have no t identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.


text: Our Board oversees management's implementation of our cybersecurity risk management methodology. Our Board receives periodic updates from our Chief Executive Officer and more frequently as needed, regarding the overall state of our cybersecurity preparedness, information on the current threat landscape, and material risks from cybersecurity threats and cybersecurity incidents. The Board and our management team are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents, including through the receipt of notifications from third-party service providers.


text: Our management team is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for developing and maintaining our overall cybersecurity risk methodology and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.]


text: We maintain an information security and cybersecurity program, as well as a cybersecurity governance framework, which are designed to protect our information systems against operational risks related to cybersecurity.

companyName: VOLITIONRX LTD

ticker: VNRX


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats which include, among other things, operational risks, intellectual property theft, fraud or extortion, harm to employees or customers, violation of privacy or security laws and related litigation and legal risk, and reputational risks.


text: We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information, and detect and contain any cybersecurity incidents that impact us. The program is integrated into our overall risk management systems and processes, and includes a cybersecurity risk assessment process that routinely evaluates potential impacts of cybersecurity risks on our business, including our operations, financial stability, and reputation. These assessments inform our cybersecurity risk mitigation strategies. The results are regularly shared with management and the Audit Committee of our board of directors as part of the committee's involvement in managing and overseeing cybersecurity risks.


text: Our cybersecurity risk management program also includes processes to triage, assess the severity of, escalate, contain, investigate, and remediate an incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. If a cybersecurity incident is determined to be a potentially material cybersecurity incident, our disclosure controls and procedures define the steps to determine materiality and disclose such a material cybersecurity incident.


text: While we do not believe that our business strategy, results of operations or financial condition have been materially adversely affected by any cybersecurity incidents, cybersecurity threats are pervasive and, similar to other global financial institutions, we, as well as our employees, customers, regulators, service providers, and other third parties have experienced a significant increase in information security and cybersecurity risk in recent years and will likely continue to be the target of cyber attacks. We continue to assess the risks and changes in the cyber environment, invest in enhancements to our cybersecurity capabilities, and engage in industry and government forums to promote advancements in our cybersecurity capabilities, as well as the broader financial services cybersecurity ecosystem. For more information on risks to us from cybersecurity threats, see the section entitled " Risk Factors —Failure in our information technology, storage systems or our clinical laboratory equipment could significantly disrupt our operations and our research and development efforts " included within this Report.


text: Our board of directors is actively involved in overseeing risks from cybersecurity threats. At least once a year, the board of directors discusses our programs and policies related to cybersecurity and risk initiatives and considers them closely both from a risk management perspective and as part of our business strategy. Additionally, our board has delegated to our Audit Committee the authority to oversee and review the adequacy of our cybersecurity, information and technology security, and data privacy programs, procedures, and policies. Our Audit Committee is comprised entirely of independent directors who regularly evaluate cybersecurity risks.


text: The Audit Committee regularly receives updates from management with respect to the Company's efforts to manage data protection, cybersecurity, and information and technology risks, and assesses the results of reviews from internal audits. Materials presented to our Audit Committee include updates on our data security posture, results from internal audit and third-party assessments, our incident response plan, and certain cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to such risks. The committee also regularly engages with our Group IT Manager on technology risk-related topics.


text: Our processes also allow for our board of directors and the Audit Committee to be informed of key cybersecurity risks outside the regular reporting schedule. While the Audit Committee conducts meetings regularly, the committee is authorized to meet with management or individual directors at any time it deems appropriate to discuss matters relevant to the committee. The Company's policy is for the board and the Audit Committee to receive prompt and timely information regarding any cybersecurity risk (including any incident) that meets reporting thresholds, as well as ongoing updates regarding any such risk, in accordance with our data breach reporting procedure and GDPR.


text: We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. Based on our small size and limited number of employees and consultants, we rely extensively on information technology systems managed by third party major service providers to securely process, store and transmit our data to conduct business. Our employees and consultants utilize end point security tools, such as firewalls and anti-virus protection, to protect our data. To date, we have not engaged any assessors, consultants, auditors or other third parties in connection with our risk management system or processes, and believe that, given our size, our current approach to manage cybersecurity risks is adequate.

companyName: Birchtech Corp.

ticker: BCHT


text: In connection with our use of third-party services providers, we have certain processes in place to oversee and identify cybersecurity risks from threats and incidents. We are not aware of having experienced any material cybersecurity incidents. We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition. However, there could be cybersecurity threats or incidents in the future that may adversely affect our business. For more information, please refer to Part I, Item 1A. "Risk Factors" in this Annual Report on Form 10-K.


text: Our overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including: the use of antivirus software, virtual private networks, email security, as well as other software to prevent and detect data intrusions.


text: the deployment of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure to vulnerabilities.


text: the review of the security procedures used by third parties that may host or otherwise have access to the Company's data. if necessary, the use of third-party security experts if and when an incident is detected.


text: Our Executive Vice President of Operations oversees risks of cybersecurity threats and will report, as necessary, to the Board of Directors, including promptly reporting any cybersecurity incidents that may pose a significant risk to us. To date, our Executive Vice President of Operations has not had to report any cybersecurity incidents to the Board. Our Executive Vice President of Operations has over 25 years of experience in the industry and has overseen the day-to-day operations of the Company for over 10 years. Among other things, he has been responsible for day-to-day access management, network security and data protection solutions. Our Board of Directors has oversight of management to eliminate cybersecurity risks.


text: We maintain a proactive cybersecurity program that is aligned with our business and is dedicated to managing information technologies ("IT") risks to our Company. We have established policies, standards, processes, and practices for assessing, identifying and managing material risks from cybersecurity threats. These measures are integrated into our overall risk management program and governance structure, demonstrating our commitment to cybersecurity in a manner consistent with our business activities.

companyName: BT Brands, Inc.

ticker: BTBD


text: We employ an array of controls, technologies, and other processes designed to identify, protect against, detect, respond to, and mitigate cybersecurity risks. These measures are aligned with the frameworks established by the National Institute of Standards and Technology (NIST). Our IT activities are primarily outsourced for monitoring and maintenance to third parties and are subject to independent controls over IT. These controls include but are not limited to, internal reporting, monitoring and detection tools, threat intelligence, and general and role-based training. We consistently evaluate and enhance the effectiveness of our cybersecurity program, ensuring continuous evolution and improvement.


text: Overseeing the assessment and management of our exposure to various risks, including cybersecurity, is a key oversight responsibility for the Board of Directors. These risks are identified, measured, monitored, and managed across key risk categories, which include the consideration of cybersecurity risks. Our chief financial officer (CFO) facilitates the Company's oversight, which includes an assessment of our risk environment at least once per year. The review incorporates risk assessment and evaluation. The Audit Committee assists the Board with its oversight of cybersecurity risk. Our CFO reviews the oversight program with the Audit Committee, including reviewing existing risks and significant emerging risks across the Company's key risk categories. In reviewing specific threats and risks with the Board, senior management may incorporate reports from consultants and other third-party advisors.


text: To date, we have not experienced a cybersecurity threat or incident; therefore, there has been no cybersecurity impact on our results of operations or financial condition. However, unauthorized access to our information and systems and other disruptions to our business operations could occur in the future.


text: We have certain processes for assessing, identifying, and managing cybersecurity risks, which are built into our overall information technology function and are designed to help protect our information assets and operations from internal and external cyber threats, protect information from unauthorized access or attack, as well as secure our network and systems. Such processes include physical, procedural, and technical safeguards, tests on our systems, and routine review of our policies and procedures to identify risks and improve our practices. We engage certain external parties, including a third party company, Mission Cloud, to enhance our cybersecurity oversight.

companyName: Freeze Tag, Inc.

ticker: FRZT


text: Our Board of Directors provides direct oversight over cybersecurity risk and provides periodic updates to management regarding such oversight. The Board of Directors receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding significant new cybersecurity threats or incidents.


text: Mission Cloud assists us in the operational oversight of company-wide cybersecurity strategy, policy, standards, and processes related to our Amazon Web Services infrastructure, and we leverage that information to assess and help prepare us and our employees to address cybersecurity risks.


text: We are working to continue to improve our overall cybersecurity approach and plan to take any necessary steps to protect our information assets and operations from internal and external cyber threats in the event any such steps are recommended by Mission Cloud or other 3 rd parties that we may engage to assist.


text: We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations, or financial condition.