Medinotec Inc. 10-K

ITEM 1B. UNRESOLVED STAFF COMMENTS This information is not required for smaller reporting companies. ITEM 1C. CYBERSECURITY Cybersecurity Risk Management and Strategy We rely on our information technology to operate our business. As such, we have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident. We have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We engage a third-party consultant to assist us with our cybersecurity risk management framework, including the monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. Cybersecurity Governance Our third-party consultant team is managed by our Chief Executive Officer and Independent Director. In addition, management updates the board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. Our management team is responsible for assessing and managing our material risks from cybersecurity threats. Risks from Cybersecurity threats Although cybersecurity risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we face numerous and evolving cybersecurity threats in our business. For more information about the cybersecurity risks we face, see the risk factor entitled "The Medinotec Group of Companies rely on the proper function, security and availability of our IT systems and data to operate the business, and a breach, cyber-attack or other disruption to these systems or data could materially and adversely affect the business, results of operations, financial condition, cash flows, reputation, or competitive position." in Item 1A. Risk Factors. During the years ended February 29, 2024 and February 28, 2023, we did not, to our knowledge, experience any cybersecurity incidents or breaches that materially impacted or are reasonably likely to materially impact our business, performance or results. 53 Table of Contents