VERDE RESOURCES, INC. 10-K/A

ITEM 1B. Unresolved Staff Comments. None. 31 Table of Contents ITEM 1C. Cybersecurity Cybersecurity Risk Management We are in the process of implementing a structured cybersecurity risk management framework designed to assess, identify, and manage material risks from cybersecurity threats. These processes are being integrated into our overall enterprise risk management system to ensure that cybersecurity considerations are embedded within broader risk assessment and mitigation efforts. As part of this framework, we plan to engage qualified third-party consultants and auditors to assist in identifying risks, validating controls, and supporting continuous improvement. We also intend to establish oversight procedures to evaluate and monitor risks associated with our use of third-party service providers . Cybersecurity Risks To date, we have not experienced a cybersecurity incident that has materially affected our business strategy, results of operations, or financial condition. While we recognize that evolving cybersecurity threats could pose risks, we currently believe such risks are not reasonably likely to materially affect our performance. Cybersecurity Governance Our Board of Directors retains overall responsibility for oversight of cybersecurity risks. Once formed, we intend to formally delegated this oversight function to the audit committee, which will receive regular reports from management regarding cybersecurity risk assessments, monitoring activities, and incident response planning. We intend to update the audit committee as frequently as warranted by material developments, but in no event less often than annually. Day-to-day responsibility for managing cybersecurity risks rests with senior management, including the Chief Operating Officer , with support from external cybersecurity advisors. Management is responsible for overseeing the Company’s prevention, detection, and response measures, as well as the development of incident response and recovery plans. Management receives updates from third-party service providers, consultants, and internal staff, and reports these matters to the Board of Directors or the Audit Committee on a scheduled basis.