Item 1B. Unresolved Staff Comments
ITEM
1B. UNRESOLVED STAFF COMMENTS.
Not
applicable.
ITEM
1C. CYBERSECURITY.
Risk
management and strategy
Due
to the size of our company, we have not yet developed robust policies and processes for assessing, identifying, and managing material
risk from cybersecurity threats. We have implemented access controls with respect to our systems, which we monitor regularly and audit
annually. We currently rely heavily on products and services provided by third-party suppliers to operate certain critical business systems,
including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions. We rely
on third party providers and outsourced IT services to monitor and address cybersecurity related risks, including installing software
for threat protection and malware. Such third party providers are tasked with notifying management of any material risks or cybersecurity
concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or
appropriate. Based on the results of our risk assessments, if deemed necessary or appropriate, we take steps to re-design, implement,
and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly
monitor the effectiveness of our safeguards.
We
intend to work with outside counsel and third party service providers in the near term to further develop our expertise, processes and
procedures with respect to cybersecurity protection and our response plan.
To
date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing.
For additional information regarding risks from cybersecurity threats, please refer to Item 1A, “Risk Factors,” in this Report.
Governance
Our
management team is primarily responsible for assessing and managing our strategic risk exposures, including material risks from cybersecurity
threats, with assistance from third-party service providers. Management oversees our cybersecurity process on a day-to-day basis, including
those described in “Risk Management and Strategy” above. Our Board of Directors does not have a standing risk management
committee, but rather administers this oversight function directly through the Board of Directors as a whole, as well as through standing
committees of the Board of Directors that will address risks inherent in their respective areas of oversight.
ITEM
2. PROPERTIES.
We
lease approximately 350 square feet of space at 3900 Paseo del Sol, Santa Fe, New Mexico 87507, for a monthly rent expense of approximately
$550. The lease expires on December 31, 2024, and is cancelable at any time upon 45 days written notice. We believe that our facilities
are suitable for our current needs.
ITEM
3. LEGAL PROCEEDINGS.
We
are not currently a party to any legal proceedings. However, we may become subject to legal proceedings and claims that arise in the
ordinary course of our business.
ITEM
4. MINE SAFETY DISCLOSURES.
Not
Applicable.
25
PART
II