Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Cybersecurity is an important aspect of our business operations, and we take steps to protect our systems, data, and the information of our clients and stakeholders. We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework. Below is an overview of our cybersecurity risk management and the measures we have in place:

●

Governance and Oversight: Our Board and senior management are actively involved in overseeing our cybersecurity policies and practices and managing those responsible for coordinating and implementing cybersecurity initiatives across the organization.

●

Risk Assessment and Management: We conduct risk assessments to identify potential cybersecurity threats and vulnerabilities. This includes evaluating the likelihood and potential impact of various threats, such as data breaches, malware attacks, and insider threats. Based on these risk assessments, we develop and implement risk management strategies to mitigate identified risks.

●

Information Security Policies and Procedures: We have established information security policies and procedures that govern the use, protection, and handling of sensitive information. These policies cover areas such as access controls, password management, incident response, and employee training.

●

Network and Infrastructure Security: We employ a range of technical measures designed to secure our network and infrastructure, including firewalls, intrusion detection and prevention systems, and vulnerability assessments.

●

Employee Training and Awareness: We provide cybersecurity training to employees to raise awareness of the latest threats and best practices for protecting sensitive information. This includes training on how to recognize phishing attempts, handling secure data, and reporting security incidents.

●

Third-Party Risk Management: We assess the cybersecurity practices of our significant third-party vendors and service providers, including conducting due diligence on vendors before engaging their services and monitoring their compliance with our security requirements.

●

Compliance and Rereporting: We seek to comply with all applicable laws and regulations related to cybersecurity, including data protection and privacy laws.

While we believe that our current cybersecurity measures are adequate, we understand that the cybersecurity landscape is constantly evolving, and we remain vigilant in monitoring and working to adapt our practices to address emerging threats. We seek to maintain the confidentiality, integrity, and availability of our systems and data and to protect the interests of our clients and stakeholders. Since the beginning of the last fiscal year, we have not identified risks from known cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected, or are reasonably likely to material affect, us. To mitigate potential financial consequences of any future cybersecurity incidents, we carry cyber-attack insurance.

Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag]

false

Cybersecurity Risk Management Positions or Committees Responsible [Flag]

true

Cybersecurity Risk Management Expertise of Management Responsible [Text Block]

We conduct risk assessments to identify potential cybersecurity threats and vulnerabilities. This includes evaluating the likelihood and potential impact of various threats, such as data breaches, malware attacks, and insider threats. Based on these risk assessments, we develop and implement risk management strategies to mitigate identified risks.