Odyssey Health, Inc. 10-K

Item 1B. Unresolved Staff Comments None. 27 Item 1C. Cybersecurity Cybersecurity Risk Management and Strategy Our management recognizes the impact that cybersecurity threats could have on our business operations, our compliance with regulations and our reputation. We have identified cybersecurity as a critical business risk as part of our overall risk management strategy. We have implemented an information security management system in accordance with our risk profile and business that is designed to protect us, our employees, and our stockholders from cybersecurity threats. Our managed security services provider helps us implement additional security controls, as necessary, including malware protection and network security tools. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. For more information, see Item 1A. Risk Factors. Governance Related to Cybersecurity Risks The Board of Directors and Corporate Governance and Nominating Committee oversee the management of risks by our management. The Corporate Governance and Nominating Committee is responsible for reviewing our cybersecurity program and risks, as identified by our management, and the steps our management has taken to protect against threats to our assets, including information systems and data security. The Corporate Governance and Nominating Committee provides updates to the Board on an annual basis. Item 2. Properties As of July 31, 2025, we own no real property and lease minimal office space. Our principal address is located at 2300 West Sahara Avenue, Suite 800 - #4012, Las Vegas, Nevada, 89102. Item 3. Legal Proceedings As of the date of this filing, we are currently not a party to any legal proceedings. Item 4. Mine Safety Disclosures Not applicable. 28 PART II