Enveric Biosciences, Inc. 10-K

Item 1B. Unresolved Staff Comments Not applicable. 48 Item 1C. Cybersecurity Cybersecurity Risk Management and Strategy We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have established certain policies and procedures for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these policies and procedures into our overall risk management framework to promote a company-wide culture of cybersecurity risk management. Such procedures include physical, procedural and technical safeguards, response methods, regular tests on our systems, and routine review of our processes to identify risks and enhance our practices. We also use technology-based tools to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs. We engage certain external parties, including consultants and computer security firms to enhance our cybersecurity oversight and provide monthly trainings to our employees. We consider the internal risk oversight programs of third-party service providers before engaging them in order to help protect our company from any related vulnerabilities. At this time, we are not aware of any material cybersecurity incidents that have impacted the Company. For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Part 1 Item 1A Risk Factors in this Annual Report. Governance Our board of directors is acutely aware of the critical nature managing risks associates with cybersecurity threats. Our board of directors has delegated authority to the Audit Committee to serve as the cybersecurity oversight body. The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance. Our board of directors also works with the chief financial officer to assess and respond to cybersecurity threats. The chief financial officer meets with the third-party vendors regularly to discuss any issues and updates related to the Company’s information technology environment and reports to the chief executive officer and Audit Committee on a regular basis, with a minimum frequency of once per year.