SONO TEK CORP 10-K

ITEM 1B UNRESOLVED STAFF COMMENTS - None. ITEM 1C CYBERSECURITY Sample Disclosure Risk Management and Strategy Securing our business information, intellectual property, customer and employee data and technology systems is essential for the continuity of our business, meeting applicable regulatory requirements and maintaining the trust of our stockholders. Cybersecurity is an important and integrated part of our enterprise risk management function that identifies, monitors and mitigates business, operational and legal risks. To help protect us from a major cybersecurity incident that could have a material impact on operations or our financial results, the Company is in the process of implementing policies, programs and controls, including technology investments that focus on cybersecurity incident prevention, identification and mitigation. The steps we expect to take to reduce our vulnerability to cyberattacks and to mitigate impacts from cybersecurity incidents include, but are not limited to: penetration testing by a third party vendor, agent based security scanning that runs continuously, establishing information security policies and standards, implementing information protection processes and technologies, monitoring our information technology systems for cybersecurity threats and implementing cybersecurity training. In addition, we annually purchase a cybersecurity risk insurance policy that would help defray the costs associated with a covered cybersecurity incident if it occurred. Governance Our Board of Directors is actively engaged in overseeing and reviewing our strategic direction and objectives, taking into account, among other considerations, our risk profile and related exposures, including oversight of risks from cybersecurity threats. As part of this oversight, the Company will update the Board periodically, and at least annually, on our cybersecurity program, including with respect to particular cybersecurity threats, cybersecurity incidents, new developments in our risk profile, the status of projects to strengthen our cybersecurity systems, assessments of our cybersecurity program, and the emerging threat landscape. ITEM 2 DESCRIPTION OF PROPERTIES We own an industrial park located in Milton, New York. The industrial park consists of approximately 50,000 square feet of office and warehouse space. Our offices, product development, manufacturing and assembly facilities are located in the industrial park. We presently utilize 37,000 square feet or 74% of the park for our operations. We believe our facilities will be adequate for the foreseeable future and the ownership of the industrial park provides us opportunity to expand as we grow. Approximately 13,000 square feet of the park is leased or available for lease to unrelated third parties at any given time. ITEM 3 LEGAL PROCEEDINGS – None ITEM 4 MINE SAFETY DISCLOSURES – Not Applicable 20 PART II