Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Risk Management and Strategy

Aerkomm Inc. (the “Company”) recognizes the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. The Company has implemented a cybersecurity risk management program that is integrated into its overall enterprise risk management framework. This program is designed to identify, assess, and mitigate cybersecurity risks that could materially affect the Company’s business operations, financial condition, or results of operations.

The Company’s cybersecurity risk management program includes the following key elements:

1.

The Company conducts periodic risk assessments to identify cybersecurity threats and vulnerabilities across its information technology infrastructure, including its in-flight connectivity platforms, proprietary systems, and corporate networks. These assessments inform the Company’s risk mitigation strategies and are updated as the threat landscape evolves.

2.

The Company maintains technical safeguards, including firewalls, intrusion detection systems, encryption protocols, access controls, and endpoint protection measures. These safeguards are regularly reviewed and updated to address emerging threats and changes to the Company’s technology environment.

3.

The Company has established an incident response plan that outlines procedures for detecting, containing, and remediating cybersecurity incidents. The incident response plan is designed to facilitate timely notification to appropriate internal personnel, the Board of Directors, and, where required, regulatory authorities and affected parties.

4.

The Company provides cybersecurity awareness training to its employees on a periodic basis to help personnel identify and respond to potential cybersecurity threats, including phishing, social engineering, and other common attack vectors.

5.

The Company engages third-party service providers in certain aspects of its cybersecurity program, including vulnerability assessments, penetration testing, and monitoring services. The Company also maintains processes to evaluate and oversee the cybersecurity practices of its key third-party vendors and service providers whose systems interact with Company data or networks.

As of the date of this Annual Report on Form 10-K, the Company has not identified any cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, the Company’s business strategy, results of operations, or financial condition. However, despite the Company’s efforts, there can be no assurance that its cybersecurity risk management program will prevent all cybersecurity incidents. The Company continues to invest in and enhance its cybersecurity capabilities in response to the evolving threat environment. For additional information regarding cybersecurity risks facing the Company, see “Item 1A. Risk Factors.”

Governance

The Company’s Board of Directors (the “Board”) maintains oversight of the Company’s cybersecurity risk management program. The Board receives periodic reports from management regarding the Company’s cybersecurity posture, including updates on material cybersecurity risks, the status of ongoing initiatives to strengthen the Company’s cybersecurity defenses, and any significant cybersecurity incidents.

The Board has delegated primary responsibility for the oversight of cybersecurity risk to the Audit Committee. The Audit Committee receives regular briefings from management on cybersecurity matters, including risk assessments, mitigation efforts, and incident reports. The Audit Committee reports to the full Board on cybersecurity matters as appropriate.

At the management level, the Company’s Chief Executive Officer, in coordination with the Company’s information technology leadership, is responsible for the day-to-day management of cybersecurity risks. Management is responsible for implementing and maintaining the Company’s cybersecurity risk management program, including the development of policies and procedures, the allocation of resources, and the coordination of incident response activities. Management personnel responsible for cybersecurity possess relevant experience in information technology and security matters gained through a combination of professional experience, education, and industry certifications.

In the event of a cybersecurity incident determined to be potentially material, the Company’s incident response plan provides for escalation to senior management and the Board or Audit Committee, as appropriate, to ensure timely and informed decision-making regarding disclosure obligations and remediation efforts.

Cybersecurity Risk Management Processes Integrated [Flag]

true

Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block]

the Company has not identified any cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, the Company’s business strategy, results of operations, or financial condition.

Cybersecurity Risk Management Positions or Committees Responsible [Text Block]

Governance

The Company’s Board of Directors (the “Board”) maintains oversight of the Company’s cybersecurity risk management program. The Board receives periodic reports from management regarding the Company’s cybersecurity posture, including updates on material cybersecurity risks, the status of ongoing initiatives to strengthen the Company’s cybersecurity defenses, and any significant cybersecurity incidents.

The Board has delegated primary responsibility for the oversight of cybersecurity risk to the Audit Committee. The Audit Committee receives regular briefings from management on cybersecurity matters, including risk assessments, mitigation efforts, and incident reports. The Audit Committee reports to the full Board on cybersecurity matters as appropriate.

At the management level, the Company’s Chief Executive Officer, in coordination with the Company’s information technology leadership, is responsible for the day-to-day management of cybersecurity risks. Management is responsible for implementing and maintaining the Company’s cybersecurity risk management program, including the development of policies and procedures, the allocation of resources, and the coordination of incident response activities. Management personnel responsible for cybersecurity possess relevant experience in information technology and security matters gained through a combination of professional experience, education, and industry certifications.

In the event of a cybersecurity incident determined to be potentially material, the Company’s incident response plan provides for escalation to senior management and the Board or Audit Committee, as appropriate, to ensure timely and informed decision-making regarding disclosure obligations and remediation efforts.

Cybersecurity Risk Third Party Oversight and Identification Processes [Flag]

true