What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2025-03-24 compared with 2024-03-25 · 55 added, 44 removed, 2 unchanged (98% of the section changed)

Unresolved Staff Comments

Not applicable.

Cybersecurity

board administers its cybersecurity risk oversight function directly through our audit committee.

Our audit committee has primary responsibility

for overseeing our risk assessment and risk management policies (including with respect to cybersecurity matters).

Our audit committee

regularly discusses with management, counsel, and auditors the Company’s major risk exposures.

This includes potential financial

impact on the Company and the steps taken to monitor and control those risks.

Additionally, our board is informed regarding the risks

facing the Company and coordinates with management and our cybersecurity team to ensure our board receives regular risk assessment updates

from management.

retain Techneto, Inc.

d/b/a CyberTeam (“CyberTeam”), a third party vendor that reports directly to our president and chief

operating officer, to be responsible for identifying, assessing and managing the Company’s risks from cybersecurity threats.

has been with the Company since its inception and has over 25 years of experience in cybersecurity.

provides our board and executive leadership team with periodic updates about our cybersecurity program and material risks.

This includes

updates on cybersecurity practices, programs, and the status of projects designed to strengthen internal cybersecurity and data protection.

Management and Strategy

for identifying and assessing cybersecurity risks

management, with the support of CyberTeam, monitors current events and trends related to cybersecurity and assesses any potential impact

on current systems and operations.

Third-party partners who are in possession of our confidential information are generally required

to notify us in the event of a cybersecurity incident within their systems that have, or are reasonably likely to, compromise the security

of such information.

When appropriate, we enlist CyberTeam to perform a risk and security assessment of the cybersecurity protocols and

procedures of critical third-party partners.

for managing cybersecurity risks

tracks risks and incidents related to cybersecurity until the risk is mitigated to an acceptable level or fully remediated.

are identified, CyberTeam oversees mitigation plans with the risk owner which are communicated to necessary teams and remediation steps

for incorporating cybersecurity risks into the overall risk management process

process for identifying, assessing, and managing risks related to cybersecurity generally involves CyberTeam regularly meeting with our

executive leadership team, and when appropriate, our board and/or audit committee to discuss cybersecurity related risks identified and

the potential likelihood and severity of each risk.

we are not aware of any risks from cybersecurity threats, or from previous cybersecurity incidents, that have materially affected or

are reasonably likely to materially affect the Company.

corporate offices are located at 360 Madison Avenue, 25th Floor, New York, NY 10017, which is leased through our parent corporation PAVmed

The lease for this space is for seven years and eight months, starting on February 1, 2023, and may not be terminated prior to expiration

of its stated term, except in limited circumstances due to misconduct by our landlord.

Company has a lease agreement for its CLIA laboratory in California with 21,019 square feet, which has a remaining term expiring December 31, 2024.

also have lease agreements for our Lucid Test Centers in various locations in Arizona, California, Colorado, Florida, Idaho, Illinois,

Nevada, Ohio, Texas and Utah that in the aggregate approximate 15,048 square feet.

At this time, we consider our facility space to be

commensurate with our current operations.

Notwithstanding, we may obtain additional office space in the future, as warranted by our business

Our board administers its cybersecurity

risk oversight function directly through our audit committee.

Our audit committee has primary responsibility for overseeing our risk

assessment and risk management policies (including with respect to cybersecurity matters).

Our audit committee regularly discusses with

management, counsel, and auditors the Company’s major risk exposures.

This includes potential financial impact on the Company and the

steps taken to monitor and control those risks.

Additionally, our board is informed regarding the risks facing the Company and coordinates

with management and our cybersecurity team to ensure our board receives regular risk assessment updates from management.

We retain Techneto, Inc.

CyberTeam (“CyberTeam”), a third party vendor that reports directly to our president and chief operating officer, to be responsible

for identifying, assessing and managing the Company’s risks from cybersecurity threats.

CyberTeam has been with the Company since

the Company’s inception and has over 25 years of experience in cybersecurity.

CyberTeam provides our board

and executive leadership team with periodic updates about our cybersecurity program and material risks.

This includes updates on cybersecurity

practices, programs, and the status of projects designed to strengthen internal cybersecurity and data protection.

Risk Management and Strategy

Processes for identifying and assessing cybersecurity

Senior management, with the support

of CyberTeam, monitors current events and trends related to cybersecurity and assesses any potential impact on current systems and operations.

Third-party partners who are in possession of our confidential information are generally required to notify us in the event of a cybersecurity

incident within their systems that have, or are reasonably likely to, compromise the security of such information.

When appropriate,

we enlist CyberTeam to perform a risk and security assessment of the cybersecurity protocols and procedures of critical third-party partners.

Processes for managing cybersecurity risks

CyberTeam tracks risks and incidents

related to cybersecurity until the risk is mitigated to an acceptable level or fully remediated .

When risks are identified, CyberTeam

oversees mitigation plans with the risk owner which are communicated to necessary teams and remediation steps are taken.

Processes for incorporating cybersecurity risks

into the overall risk management process

Our process for identifying,

assessing, and managing risks related to cybersecurity generally involves CyberTeam regularly meeting with our executive leadership team,

and when appropriate, our board and/or audit committee to discuss cybersecurity related risks identified and the potential likelihood

and severity of each risk.

Currently, we are not aware of

any risks from cybersecurity threats, or from previous cybersecurity incidents, that have materially affected or are reasonably likely

to materially affect the Company.

Our corporate offices are located

at 360 Madison Avenue, 25th Floor, New York, NY 10017, which is leased through our parent corporation PAVmed Inc.

The lease for this

space is for seven years and eight months, starting on February 1, 2023, and may not be terminated prior to expiration of its stated

term, except in limited circumstances due to misconduct by our landlord.

The Company has a lease agreement

for its CLIA laboratory in California with 21,019 square feet, which has a remaining term expiring December 31, 2027.

We also have lease

agreements for our Lucid Test Centers in various locations in Arizona, California, Colorado, Florida, Georgia, Idaho, Michigan, Nevada,

Texas and Utah that in the aggregate approximate 5,764 square feet.

At this time, we consider our facility space to be commensurate with

our current operations.

Notwithstanding, we may obtain additional office space in the future, as warranted by our business operations.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments