What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2025-04-09 compared with 2024-03-28 · 31 added, 19 removed, 13 unchanged (79% of the section changed)

UNRESOLVED STAFF COMMENTS

Not applicable.

CYBERSECURITY

management and strategy

recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to protect our information systems

and protect the confidentiality, integrity, and availability of our data.

We have established policies and procedures to assess, identify,

and manage material risk from cybersecurity threats.

We assess risks from cybersecurity threats against our information systems that

may result in adverse effects on our information systems or any information residing therein.

We conduct periodic and ad-hoc assessments

to identify cybersecurity threats.

these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to mitigate identified

risks and reasonably address any identified gaps in existing safeguards.

Our IT specialist reports to our Chief Executive Officer (CEO)

to manage the risk assessment and mitigation process.

We monitor and test our safeguards and train our employees on the implementation

of such safeguards, in collaboration with human resources, IT, and management.

We aim to promote a company-wide culture of cybersecurity

risk management.

recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information

systems and protect the confidentiality, integrity, and availability of our data.

Material Risks & Integrated Overall Risk Management

have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture

of cybersecurity risk management.

This integration ensures that cybersecurity considerations are an integral part of our decision-making

processes at every level.

Our management team continuously evaluates and addresses cybersecurity risks in alignment with our business

objectives and operational needs.

Third-Party Risk

we are aware of the risks associated with third-party service providers, we have implemented stringent processes to oversee and manage

We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring

to ensure compliance with our cybersecurity standards.

The monitoring includes annual assessments of the system and organization controls

(SOC) reports of our providers and implementing complementary controls.

This approach is designed to mitigate risks related to data breaches

or other security incidents originating from third parties.

from Cybersecurity Threats

1 unchanged sentence

year ended December 31, 2024.

We will continue to monitor and assess our cybersecurity risk management program as well as invest in and

seek to improve such systems and processes as appropriate.

If we were to experience a material cybersecurity incident in the future,

such an incident may have a material effect, including on our operations, business strategy, operating results, or financial condition.

For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto, see the section

titled “ Risk Factors ” in Part I, Item 1A of this Annual Report on Form 10-K.

board of directors is responsible for monitoring and assessing strategic risk exposure.

1 unchanged sentence

risk oversight function directly as a whole, as well as through the Audit Committee.

Our executive management team inform our audit committee

on cybersecurity risks on a regular basis, at least once per year.

Our executive management team informs our Audit

Committee on cybersecurity risks on a regular basis, at least once per year.

Audit Committee is primarily responsible for assisting our board of directors in fulfilling its ultimate oversight responsibilities relating

to risk assessment and management, including relating to cybersecurity and other information technology risks.

The Audit Committee oversees

management’s implementation of our cybersecurity risk management program, including processes and policies for determining risk

tolerance, and reviews management’s strategies for adequately mitigating and managing identified risks, including risks relating

to cybersecurity threats.

cybersecurity coordinator is responsible for assessing and managing our material risks from cybersecurity threats, in close collaboration

3 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments