What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2026-04-15 compared with 2025-03-31 · 102 added, 7 removed, 2 unchanged (98% of the section changed)

1 unchanged sentence

CYBERSECURITY

We have no business operations.

Since our IPO, our sole business activity has been identifying and evaluating suitable acquisition transaction candidates.

we have not adopted any cybersecurity risk management program or formal processes for assessing cybersecurity risk, which may make us

susceptible to heightened cybersecurity risk.

Our board of directors is generally responsible for the oversight of risks from cybersecurity

threats, if there is any.

We have not encountered any cybersecurity incidents since our IPO.

management and strategy

recognizes the critical importance of developing, implementing, and maintaining cybersecurity measures designed to safeguard our information

systems and protect the confidentiality, integrity , and availability of our critical data.

Material Risks & Integrated Overall Risk Management

cybersecurity team, led by our IT consultants, identify and assesses risks from cybersecurity threats by monitoring and evaluating our

threat environment and the Company’s risk profile using various methods including, for example, through third-party threat assessments

and third-party conducted red/blue team testing and tabletop incident response exercises and by subscribing to reports and services that

identify cybersecurity threats, analyzing reports of threats and actors, conducting scans of the threat environment, evaluating our and

our industry’s risk profile, evaluating threats reported to us, conducting threat assessments for internal and external threats

and conducting vulnerability assessments.

Our IT consultants provide regular updates to the Company, and all cyber security risks and

measures are further monitored by Ben Hwang, Chief Executive Officer.

on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies

designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example:

maintaining an incident response plan, a vulnerability management policy, disaster recovery and business continuity plans and a vendor

risk management program;

conducting employee training, systems monitoring and penetration testing;

implementing security standards, network

security controls, access controls and physical security;

encrypting and segregating data;

though asset management, tracking and disposal;

and maintaining cybersecurity insurance.

have strategically integrated cybersecurity risk management into our broader risk management framework to promote a culture of cybersecurity

risk management.

This integration is designed to make cybersecurity considerations an integral part of our decision-making processes.

Our risk management team works closely with our IT department and cybersecurity team to evaluate and address cybersecurity risks connected

with our business objectives and operational needs.

Third-Parties on Risk Management

the complexity and evolving nature of cybersecurity threats, Profusa engages with a range of external experts, including cybersecurity

assessors, consultants, and auditors in evaluating and testing our risk management systems.

These partnerships enable us to leverage

specialized knowledge and insights.

Our collaboration with these third parties includes periodic audits, threat assessments, and consultation

on security enhancements.

Third-Party Risk

we are aware of the potentially material risks from cybersecurity threats associated with third-party service providers, Profusa implements

processes to oversee and manage these risks.

Depending on the nature of the services provided and the identity of the service provider,

we may conduct security assessments of the provider before engagement and may monitor their compliance with our cybersecurity policies

after engagement.

The monitoring includes periodic assessments by our Chief Information Security Officer and on an ongoing basis by our

security specialists.

This approach is designed to mitigate risks related to data breaches or other security incidents originating from

third parties.

from Cybersecurity Threats

have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially

However, we face ongoing risks from cybersecurity threats that may materially affect the Company in the future .

information, see Part I.

Risk Factors in this Annual Report, including the discussion under the heading “Cybersecurity

risks and cyber incidents could result in the compromise of confidential data or critical data systems and give rise to potential harm

to customers, remediation and other expenses, expose us to liability under HIPAA, consumer protection laws, or other common law theories,

subject us to litigation and federal and state governmental inquiries, damage our reputation, and otherwise be disruptive to our business

and operations .”.

Board of Directors is aware of the critical nature of managing risks associated with cybersecurity threats.

Our Board has established

oversight mechanisms designed to ensure effective governance in managing material risks associated with cybersecurity threats because

we recognize the significance of these threats to our operational integrity and stakeholder confidence.

of Directors Oversight

Audit Committee is central to the Board’s oversight of cybersecurity risks and bears the primary responsibility for this domain.

The Audit Committee is composed of Board members with diverse expertise, including, risk management, technology, and finance.

Committee reports to the Board of Directors periodically regarding cybersecurity topics presented to the Audit Committee, and all materials

made available to the Audit Committee are available to rest of the Board of Directors.

Role Managing Risk

Chief Executive Officer and Chief Financial Officer play a pivotal role in informing the Audit Committee on cybersecurity risks.

provide cybersecurity briefings to the Audit Committee on a regular basis, at least once per year.

These briefings encompass a broad

range of topics, including as applicable:

the current cybersecurity landscape and emerging threats, the status of ongoing cybersecurity

initiatives and strategies, incident reports and learnings from any cybersecurity events, and compliance with regulatory requirements

and industry practices.

addition to our scheduled meetings, the Audit Committee, our Chief Executive Officer and Chief Financial Officer maintain an ongoing

dialogue regarding emerging or potential cybersecurity risks.

Together, they receive updates from one another, as appropriate, on any

significant developments in the cybersecurity domain, ensuring the Board’s oversight is proactive and responsive.

The Audit Committee

actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives.

This involvement

ensures that cybersecurity considerations are integrated into the broader strategic objectives of Profusa.

The Audit Committee conducts

an annual review of the company’s cybersecurity posture and the effectiveness of its risk management strategies.

This review helps

in identifying areas for improvement and ensuring the alignment of cybersecurity efforts with the overall risk management framework.

Personnel in Cybersecurity

responsibility for assessing, monitoring and managing our risks from cybersecurity threats rests with our Chief Executive Officer.

Chief Executive Officer has overall responsibility for the Company’s IT department and operations, including oversight over the

cybersecurity team to ensure efforts to contain and remediate security incidents are sufficient and effective.

Cybersecurity Incidents

Chief Executive Officer is responsible for staying apprised of the latest developments in cybersecurity, including potential threats

and innovative risk management techniques.

The CISO implements and oversees processes for the monitoring of our information systems.

This includes the deployment of security measures and system audits to identify potential vulnerabilities.

In the event of a cybersecurity

incident, the Chief Executive Officer is equipped with a well-defined incident response plan.

This plan includes immediate actions designed

to mitigate the impact and long-term strategies for remediation and prevention of future incidents.

to Board of Directors

Chief Executive Officer regularly informs our executive management team of material cybersecurity risks and incidents.

This is how executive

management is kept abreast of our cybersecurity posture and potentially material cybersecurity risks facing Profusa.

Furthermore, significant

cybersecurity matters, and strategic risk management decisions are escalated by any of our executive officers to the Audit Committee,

so that the Audit Committee can oversee and provide guidance on critical cybersecurity issues .

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments