Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Risk Management and Strategy

We regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities, and review our cybersecurity policies, processes, and practices. To help protect our information systems from cybersecurity threats, we use a suite of security and business continuity tools and employ knowledgeable resources internally to implement and monitor these risks. The tools that we use are designed to help us proactively identify, monitor, investigate and resolve security incidents in a timely manner. Our cybersecurity is managed through the following important categories:

	●	Infrastructure & Hosting: We utilize a layered cybersecurity approach designed to protect our systems, applications, and data. Our applications are hosted on secure cloud infrastructure and are protected by network-level security controls, restricted access configurations, encryption, and firewall protections. Our database environments are not publicly accessible, and we maintain regular automated backups and system updates to support business continuity and data protection.

	●	Network and Perimeter Security: We employ third-party network and perimeter security services to help protect our applications and infrastructure from cybersecurity threats. These services provide traffic filtering, distributed denial-of-service mitigation, web application firewall protection, bot detection, encryption, and secure domain name system management. These controls are designed to help identify and block malicious traffic and common web-based attack vectors before they reach our systems, thereby enhancing the security, availability, and integrity of our applications and data.

24

	●	Access Controls and Authentication: Our CRM has role-based access controls built into the system where users are assigned specific roles that restrict their data and functionality. These roles are based on the minimum amount of access they require as part of their company function. We have a built-in authentication system with automatic timeouts for inactive users.

	●	Encryption and Data Protection: We endeavor to use appropriate encryption methods to protect sensitive data. This includes the encryption of customer data, financial information, and other confidential data. All traffic is encrypted via SSL/TLS certificates and no unencrypted access is permitted.

The above cybersecurity risk management processes are integrated into the Company’s overall enterprise risk management program. Cybersecurity risks are understood to be significant business risks, and as such, are considered an important component of our enterprise-wide risk management approach.

As of the date of this report we are not aware of any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, financial condition, results of operations or cash flows. We acknowledge that cybersecurity threats are continually evolving, and the possibility of future cybersecurity incidents remains. Despite the implementation of our cybersecurity processes, our security measures cannot guarantee that a significant cyberattack will not occur. See “Risk Factors” for additional information about the risks to our business associated with a breach or compromise of our information or operational technology systems.

Cybersecurity Risk Management Processes Integrated [Text Block]

The above cybersecurity risk management processes are integrated into the Company’s overall enterprise risk management program. Cybersecurity risks are understood to be significant business risks, and as such, are considered an important component of our enterprise-wide risk management approach.

Cybersecurity Risk Third Party Oversight and Identification Processes [Flag]

true

Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block]

As of the date of this report we are not aware of any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, financial condition, results of operations or cash flows. We acknowledge that cybersecurity threats are continually evolving, and the possibility of future cybersecurity incidents remains.

Cybersecurity Risk Management Positions or Committees Responsible [Flag]

true