Lightwave Logic, Inc. 10-K

Item 1B. Unresolved Staff Comments. None. Item 1C. Cybersecurity. Cybersecurity Risk Management and Strategy. We rely on various software applications, information technology systems, computing infrastructure, and cloud service providers to effectively conduct business operations. Several of these systems are managed or utilize a third party administrator, implementing their own cybersecurity measures to safeguard our data. We have not experienced a cybersecurity incident that resulted in a material adverse impact to our business or operations; however, there can be no guarantee that we will not experience such an incident in the future. For a description of the risks from cybersecurity threats that may materially affect our Company and how they may do so, please see “Risk Factors” included in Part I, Item 1A of this Annual Report on Form 10-K, including “Our data and information systems and network infrastructure may be subject to hacking or other cyber security threats. If our security measures are breached and an unauthorized party obtains access to our proprietary business information, our information systems may be perceived as being unsecure, which could harm our business and reputation, and our proprietary business information could be misappropriated which could have an adverse effect on our business and results of operations.” Cybersecurity Governance. Our Vice President of Human Resources and Administration oversees our cybersecurity strategy, supported by an internal IT Manager and a third-party administrator. This structure ensures that cybersecurity remains a priority at the highest management levels while leveraging specialized expertise. We maintain a comprehensive cyber risk management program that is designed to meet industry-standard best practices and processes to assess, identify, and manage material risks associated with cybersecurity threats to our information technology systems. Our cybersecurity framework is designed to proactively address potential vulnerabilities and mitigate risks. The IT Manager oversees our information security policies and procedures, and coordinates with the third party administrator to ensure compliance with our security standards and management of third party risks. The Vice President of Human Resources and Administration provides regular updates to the audit committee of the Board of Directors, which is responsible for oversight of cybersecurity, as well as to the full board. Our information security policies and procedures are subject to regular reviews to adapt to evolving threats and to ensure ongoing compliance with regulatory requirements. By maintaining a robust cybersecurity posture, we protect our assets, safeguard sensitive information, and ensure the continuity of our operations.