FIREFLY NEUROSCIENCE, INC. 10-Q

Item 4. Controls and Procedures Evaluation of Disclosure Controls and Procedures We maintain disclosure controls and procedures that are designed to ensure that information required to be disclosed in our reports under the Exchange Act, is recorded, processed, summarized and reported within the time periods specified in the rules and forms, and that such information is accumulated and communicated to us, including our Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure. In designing and evaluating our disclosure controls and procedures, we recognize that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives, as ours are designed to do, and we apply our judgment in evaluating whether the benefits of the controls and procedures that we adopt outweigh their costs. As required by Rule 13a-15(b) of the Exchange Act, an evaluation as of September 30, 2025, was conducted under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, of the effectiveness of our disclosure controls and procedures (as defined in Rule 13a-15(e) under the Exchange Act). Based on this evaluation, our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures, as of September 30, 2025 were not effective for the reasons stated below. Management ’ s Report on Internal Control over Financial Reporting Management is responsible for establishing and maintaining adequate internal control over financial reporting as such term is defined in Rule 13a-15(f) under the Exchange Act. Internal control over financial reporting is a process designed under the supervision and with the participation of our management including our Chief Executive Officer and Chief Financial Officer to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. Our internal control over financial reporting includes those policies and procedures that (i) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of our assets: (ii) provide reasonable assurance (a) transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting policies (b) our receipts and expenditures are being made only in accordance with authorizations of our management and directors: and (c) regarding the prevention or timely detection of the unauthorized acquisition use or disposition of assets that could have a material effect on our financial statements. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions or that the degree of compliance with the policies or procedures may deteriorate. As of September 30, 2025, our management conducted an evaluation of the effectiveness of our internal control over financial reporting using the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control – Integrated Framework (2013). Based on this evaluation, our management concluded that, as of September 30, 2025, our internal control over financial reporting was not effective for the reasons stated in the following paragraph. During our evaluations of internal controls, we concluded that material weaknesses exist in our internal controls over financial reporting as outlined below. These material weaknesses did not result in any identified misstatements, and there were no changes to previously reported financial results. (i) The Company does not have adequate Information Technology General Controls (“ITGCs”) or related Information Produced by Entity (IPE) Controls resulting in transactional risk and subsequent downstream reporting risks; (ii) The Company does not have a segregation of duties to ensure information is consistently reviewed and approved by someone other than the preparer; This Quarterly Report does not include an attestation report of our registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to attestation by our registered public accounting firm pursuant to the rules of the Securities and Exchange Commission that permit us to provide only managements report in this Quarterly Report. Remediation Plan for the Material Weaknesses Management is committed to the remediation of the material weakness described above which began in Q1 2025 and into the remainder of 2025. Management has implemented and will continue to implement measures designed to ensure that the control deficiencies contributing to the material weaknesses are remediated, such that these controls are designed, implemented, and operating effectively during the remainder of the year with projected remediation date of Q1 2026. Remediation efforts include but are not limited to (a) developing, documenting and enhancing processes surrounding ITGCs, and (b) hiring / contracting additional resources to support the financial reporting process. Management will test and evaluate the implementation of internal controls and revised processes to ascertain whether they are designed and operating effectively to provide reasonable assurance that they will prevent or detect a material error in our financial statements. 27 PART II OTHER INFORMATION