What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2025-03-28 compared with 2024-03-28 · 35 added, 40 removed, 9 unchanged (89% of the section changed)

1 unchanged sentence

CYBERSECURITY.

Provectus Biopharmaceuticals understands the importance of managing risks

from cybersecurity threats and maintains a comprehensive cybersecurity program developed with reference to the National Institute of Standards

and Technology (“NIST”) cybersecurity framework.

Our cybersecurity program includes administrative, organizational, technical,

and physical safeguards reasonably designed to protect the confidentiality, integrity, and availability of our data.

We devote significant

resources to network, operations, and product security, data encryption, business continuity/disaster recovery, vulnerability management,

event monitoring and incident response, and other measures to protect our systems and data from unauthorized external access or internal

Our use of information systems

for accessing, transmitting, and storing data is a vital aspect of our business operations.

Information systems can be vulnerable to a

range of cybersecurity threats that could potentially have a material impact on our business, results of operations, and financial condition.

Cybersecurity is a key category

within our risk management efforts, and our cybersecurity risk management is intended to assist in assessing, identifying, and managing

material risks from cybersecurity threats to the Company’s information systems.

Our cybersecurity risk management and strategy are

based upon utilizing systems that are cloud-based which require multifactor authentication to access.

Due to our small size, we partner

with a third-party service provider which utilizes multiple security operations centers.

The security operations centers maintain, monitor,

mitigate, and alert on threats against the cloud systems that we utilize.

If a risk is identified, the security operations center has

the ability to shut down access to any user in the Company.

The Audit Committee of our Board

of Directors is responsible for oversight of the Company’s cybersecurity risk management.

Management’s role is to assist the

Audit Committee in identifying and considering material cybersecurity risks, ensure implementation of management- and employee-level cybersecurity

practices and training, and provide the Audit Committee with unrestricted access to Company personnel and documents regarding any cybersecurity

attacks or vulnerabilities.

We also require our employees

to participate in cybersecurity training and awareness programs.

The Company’s employees are expected to help safeguard the Company’s

information systems and to assist in the discovery and reporting of cybersecurity incidents.

These programs are intended to decrease cybersecurity

risks associated with human error and foster a culture of cybersecurity consciousness.

To date, the risks from cybersecurity

threats, including because of any previous immaterial cybersecurity incidents, have not materially affected nor are reasonably likely

to materially affect our business strategy, results of operations, or financial condition.

While our insurance covers certain cybersecurity-related

matters, the costs related to cybersecurity threats or disruptions may not be fully insured.

Cybersecurity

Risk Management and Strategy

Biopharmaceuticals understands the importance of managing risks from cybersecurity threats and maintains a comprehensive cybersecurity

program developed with reference to the National Institute of Standards and Technology (“NIST”) cybersecurity framework.

Our cybersecurity program includes administrative, organizational, technical, and physical safeguards reasonably designed to protect

the confidentiality, integrity, and availability of our data.

We devote significant resources to network, operations, and product security,

data encryption, business continuity/disaster recovery, vulnerability management, event monitoring and incident response, and other measures

to protect our systems and data from unauthorized external access or internal misuse.

use of information systems for accessing, transmitting, and storing data is a vital aspect of our business operations.

Information systems

can be vulnerable to a range of cybersecurity threats that could potentially have a material impact on our business, results of operations,

and financial condition.

Cybersecurity

is a key category within our risk management efforts, and our cybersecurity risk management is intended to assist in assessing, identifying,

and managing material risks from cybersecurity threats to the Company’s information systems.

Our cybersecurity risk management

and strategy are based upon utilizing systems that are cloud-based which require multifactor authentication to access.

Due to our small

size, we partner with a third-party service provider which utilizes multiple security operations centers.

The security operations centers

maintain, monitor, mitigate, and alert on threats against the cloud systems that we utilize.

If a risk is identified, the security operations

center has the ability to shut down access to any user in the Company.

Audit Committee of our Board of Directors is responsible for oversight of the Company’s cybersecurity risk management.

role is to assist the Audit Committee in identifying and considering material cybersecurity risks, ensure implementation of management-

and employee-level cybersecurity practices and training, and provide the Audit Committee with unrestricted access to Company personnel

and documents regarding any cybersecurity attacks or vulnerabilities.

also require our employees to participate in cybersecurity training and awareness programs.

The Company’s employees are expected

to help safeguard the Company’s information systems and to assist in the discovery and reporting of cybersecurity incidents.

programs are intended to decrease cybersecurity risks associated with human error and foster a culture of cybersecurity consciousness.

date, the risks from cybersecurity threats, including because of any previous immaterial cybersecurity incidents, have not materially

affected nor are reasonably likely to materially affect our business strategy, results of operations, or financial condition.

insurance covers certain cyber-security-related matters, the costs related to cybersecurity threats or disruptions may not be fully insured.

June 18, 2022, the Company moved into 2,700 square feet of leased corporate office space in Knoxville, Tennessee through an operating

6 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments