Dror Ortho-Design, Inc. 10-K

Item 1B. Unresolved Staff Comments. None. Item 1C. Cybersecurity. We operate in the medical devices sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. Both our executive management team and our board of directors are involved in the assessment, identification, and management of such risks, including prevention, mitigation, detection, and remediation of cybersecurity incidents. Our executive management team is responsible for day-to-day assessment, identification and management of material risks from cybersecurity threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. The individuals currently serving in these roles are our Chief Executive Officer and Chief Technology Officer. The executive management team monitors current events in order to remain aware of current cybersecurity threats and is informed of cybersecurity incidents as they arise by our frontline personnel. The executive management team is also responsible for overseeing and identifying risks from cybersecurity threats associated with our use of any third-party service providers. Our board of directors is responsible for oversight of risks from cybersecurity threats in conjunction with our executive management team. Our board of directors receives updates from our management team with respect to risks from cybersecurity threats and are notified of any new significant cybersecurity threats or incidents as they arise. Additionally, our board of directors considers risks from cybersecurity threats as part of its overall assessment of risk management, including its general oversight of the Company’s business strategy, risk management policies, and financials. To date, no cybersecurity incident (or aggregation of incidents) or cybersecurity threat has materially affected our business strategy, results of operations or financial condition, and we are not aware of any cybersecurity incidents that are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. For further information regarding the risks associated with cybersecurity incidents, see “Risk Factors—Security breaches, data breaches, cyber-attacks, other cybersecurity incidents or the failure to comply with privacy, security and data protection laws could materially impact our operations, patient care could suffer, we could be liable for damages, and our business, operations and reputation could be harmed” in Item 1A of this Annual Report on Form 10 K.