AUDDIA INC. 10-K

Item 1B. Unresolved Staff Comments None. Item 1C. Cybersecurity Risk Management and Strategy We recognize the importance of securing our data and information systems and have a process for assessing, mitigating, overseeing and managing cybersecurity and related risks. This process is supported by both management and our Board of Directors. The Company’s cybersecurity function is led by a contracted Chief Technology Officer (“Contract CTO”), who provides strategic oversight and reports directly to the Chief Executive Officer. The Contract CTO is responsible for managing the Company’s cybersecurity risk and overseeing the protection of our networks, systems, and data. To execute these responsibilities, the Company utilizes a combination of internal personnel and multiple external technology partners , including two independent IT service firms that support system administration, infrastructure management, and security monitoring. These resources employ industry-standard tools and processes designed to prevent, identify, escalate, investigate, and resolve security incidents in a timely manner. Additionally, with fewer than 20 employees and contractors, the Company’s small size facilitates rapid communication and coordinated response to potential cybersecurity risks. 31 The Company’s aggressive prevention and response protocols consist of the following: · Password management – employees are encouraged to maintain strong passwords and are educated on the risks around passwords; · Network administration – the Company maintains a single, small-scale network which is configured to prevent external penetrations and is secured with limited administrative access and strong passwords; · Firewall – configured to prevent unauthorized external access; · Virtual Private Networks – closely and carefully managed following industry best practices; · Training and communication – the Company monitors various types of threats, routinely educates employees on high risk threats, and communicates any potential identified threats to all employees and related third parties. Our Board of Directors is responsible for overseeing our enterprise risk management activities. The Board of Directors receives an update on the Company’s risk management process and the risk trends related to cybersecurity at least annually. Additionally, on a quarterly basis, the Audit Committee will receive updates from Management on cybersecurity. Any material threat that may arise will be communicated to the Board of Directors and Audit Committee upon identification. While the Company has not, as of the date of this Form 10-K, identified a cybersecurity threat or incident that resulted in a material adverse impact to its business, results of operations or financial condition, there can be no guarantee that the Company will not experience such an incident in the future. Item 2. Properties We own no properties. Our current corporate headquarters is based in a leased office in Boulder, Colorado. Our current lease term expires on April 30, 2027.