What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2025-03-14 compared with 2024-03-22 · 75 added, 69 removed, 146 unchanged (50% of the section changed)

37 unchanged sentences

(“NIST”) Framework

Cybersecurity Assessment Tool

to help management identify its risks and determine the Company’s cybersecurity posture.

implementation

Cybersecurity

(“Cybersecurity

Company’s cybersecurity posture.

implementation

of rigorous procedures

and controls, augmented

training initiatives for both management and staff, the institution cultivates a safe cybersecurity environment.

This approach

methodologies

defense-in-depth

cybersecurity controls and fostering a resilient operational

fortifying the institutions cybersecurity controls and fostering

a resilient operational framework.

Assessment and Response to Cybersecurity Threats

2 unchanged sentences

technology service providers

(“TSPs”) to ensure

(“TSPs”) to ensure that

they can identify,

mitigate, and

cyber-attacks involving destructive

malware and invasive

ransomware, malware, DDoS

attacks, etc.

This commitment aligns

with the Company’s risk

appetite, Incident Response Policy,

and Business Continuity

Plan, which incorporates business continuity planning and testing activities to enhance response and recovery capabilities.

realizes that it

risks from cyber-attacks

involving destructive malware,

including liquidity,

and respond to cyber-attacks involving destructive

malware and invasive attacks such

as phishing, ransomware, malware,

Continuity Plan,

which incorporates

business continuity

testing activities

to enhance response

capabilities.

The Company realizes that it faces a variety of risks from cyber-attacks involving destructive malware, including

capital, operational,

23 unchanged sentences

effectiveness and

adequacy of controls

periodically tested

and the results

controls periodically

senior management

40 unchanged sentences

cybersecurity

residual cybersecurity

risk, program

sophistication level,

and high-risk

threats identified

cybersecurity risk assessment.

committees and

review reports submitted

RMCD detailing the

Company’s inherent and

cybersecurity risk, program sophistication level, and high-risk

threats identified in the cybersecurity risk assessment.

effectiveness,

cybersecurity controls and procedures.

The Board receives regular reports

The Board receives regular

on cybersecurity risk assessment

8 unchanged sentences

Cybersecurity

violations, management's responses, and recommendat

ions for program enhancements.

Assessment, discussion

of significant

program matters

risk assessment,

risk management

monitoring of

service provider

compliance, results

controls testing,

security breaches

or violations,

responses, and recommendations for program enhancements.

Engagement with Third Party Vendors

information,"

Information" under

the Company’s definition,

third-party consultants without

procedures that

demonstrate compliance

Company's third-party

protecting the

information concerning

an individual

which, because

other identifier,

individual) in

combination with

following data

social security

identification

financial account(s) at

the Company including

but not limited

to an individual’s deposit

and loan accounts.

publicly available

information that

made available

to the public

from federal, state,

government records

unless attached in any way to the previously mentioned

documentation.

The engagement

of third-party

involves potential

strategic, reputational,

considerations.

specifically as

to compliance

requirements of the

Gramm Leach Bliley

regulation and applicable

Laws and Regulations.

developed general guidelines for

the identification, risk assessment, monitoring

and management of

associated to the engagement of third-party providers

officers, finance

internal auditors,

identify potential

engagement as

identify performance

criteria, internal

controls, reporting

any contractual

that should be implemented for the ongoing assessment and

control of risks that derive from the third-party

Compliance with Regulatory Standards

15 unchanged sentences

comprehensive

regarding the status of

the cybersecurity Program.

will encompass internal assessments, utilization

cybersecurity Assessment Tool,

and discussion of other significant program matters.

As of the reporting period, there is

no knowledge or indication that customer sensitive information was compromised as

cybersecurity

Cybersecurity Assessment, and discussion of other significant

program matters.

As of the end of

the reporting period set

forth in this Annual

Report on Form 10-K,

there is no knowledge

or indication

third-parties’

vulnerabilities.

communications.

continues to monitor developments and vendor communications.

USCB Financial Holdings, Inc.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments