FatPipe operates in the network and cybersecurity software industry, and the integrity, confidentiality, and availability of our information systems and the networks of our customers are critical to our business. We have processes in place for assessing, identifying, and managing material risks from cybersecurity threats, including risks that could materially adversely affect our business strategy, results of operations, or financial condition. These processes are designed to be integrated with our broader enterprise risk management framework and are administered under the supervision of our Chief Executive Officer and our Chief Financial Officer, with technical leadership provided by our internal information technology and engineering teams.

Our cybersecurity risk management program includes the following elements: (i) risk assessment processes designed to identify and evaluate cybersecurity threats and vulnerabilities; (ii) implementation of administrative, technical, and physical controls intended to safeguard our information systems and the data we process; (iii) ongoing monitoring of network activity and security events; (iv) an incident response program designed to detect, respond to, and recover from cybersecurity incidents; and (v) employee training on data protection and information security practices.

As both a developer and user of cybersecurity technology, we apply our internal cybersecurity capabilities to monitor and protect our own enterprise IT environment, including the systems used to develop and deliver our software solutions. We engage third-party providers from time to time to support our cybersecurity activities, including security testing, vulnerability assessments, and threat monitoring. We also assess cybersecurity risks associated with our use of third-party service providers and the components and software incorporated into our solutions.

To date, we are not aware of any cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. However, we cannot eliminate cybersecurity risk, and despite our efforts, our information systems and the systems we deliver to customers may be subject to attempted breaches, denial-of-service attacks, malware, or other intrusions, any of which could result in business interruption, reputational harm, regulatory exposure, or financial loss.