UAS Drone Corp. 10-K Cybersecurity GRC - 2024-03-15

Page last updated on July 16, 2024

UAS Drone Corp. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-15 08:00:25 EDT.

Filings

10-K filed on 2024-03-15

UAS Drone Corp. filed a 10-K at 2024-03-15 08:00:25 EDT
Accession Number: 0001213900-24-022826

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. “Cybersecurity” for more information. A decline in the price of our common stock could affect our ability to raise working capital and adversely impact our ability to continue operations. A prolonged decline in the price of our common stock could result in a reduction in the liquidity of our common stock and a reduction in our ability to raise capital. A decline in the price of our common stock could be especially detrimental to our liquidity and our operations. Such reductions may force us to reallocate funds from other planned uses and may have a significant negative effect on our business plan and operations, including our ability to develop new services and continue our current operations. If our common stock price declines, we can offer no assurance that we will be able to raise additional capital or generate funds from operations sufficient to meet our obligations. If we are unable to raise sufficient capital in the future, we may not be able to have the resources to continue our normal operations. The requirements of being a public company may strain our resources and distract management. As a public company, we are subject to the reporting requirements of the Securities and Exchange Act of 1934, as amended (the “Exchange Act”) and the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”). These requirements are extensive. The Exchange Act requires that we file annual, quarterly and current reports with respect to our business and financial condition. The Sarbanes-Oxley Act requires that we maintain effective disclosure controls and procedures and internal controls over financial reporting. We may incur significant costs associated with our public company reporting requirements and costs associated with applicable corporate governance requirements. We expect all of these applicable rules and regulations to significantly increase our legal and financial compliance costs and to make some activities more time consuming and costly. This may divert management’s attention from other business concerns, which could have a material adverse effect on our business, financial condition and results of operations. We also expect that these applicable rules and regulations may make it more difficult and more expensive for us to obtain director and officer liability insurance and we may be required to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. As a result, it may be more difficult for us to attract and retain qualified individuals to serve on our board of directors or as executive officers. We are currently evaluating and monitoring developments with respect to these rules, and we cannot predict or estimate the amount of additional costs we may incur or the timing of such costs. Future changes in financial accounting standards or practices may cause adverse unexpected financial reporting fluctuations and affect reported results of operations. A change in accounting standards or practices can have a significant effect on our reported results and may even affect our reporting of transactions completed before the change is effective. New accounting pronouncements and varying interpretations of accounting pronouncements have occurred and may occur in the future. Changes to existing rules or the questioning of current practices may adversely affect our reported financial results or the way we conduct business. 19 Item 1B. Unresolved Staff Comments. Not applicable to smaller reporting companies. Item 1C. Cybersecurity. Our Board and management recognize the critical importance of maintaining the trust and confidence of our customers, clients, business pa rtners and employees. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. Our cybersecurity risk management efforts include: ● risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment; ● a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; and ● a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents. Cybersecurity Governance Our board of directors considers cybersecurity risks as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management efforts. Management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. Our CEO and CFO are responsible for assessing and managing our material risks from cybersecurity threats, our overall cybersecurity risk management efforts, and supervise both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our CEO and CFO supervise efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which include ensuring routine briefings from internal security personnel, obtaining threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and providing Company personnel with alerts and reports produced by security tools deployed in the IT environment. 20
Item 1C. Cybersecurity. Our Board and management recognize the critical importance of maintaining the trust and confidence of our customers, clients, business pa rtners and employees. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. Our cybersecurity risk management efforts include: ● risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment; ● a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents; and ● a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents. Cybersecurity Governance Our board of directors considers cybersecurity risks as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management efforts. Management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. Our CEO and CFO are responsible for assessing and managing our material risks from cybersecurity threats, our overall cybersecurity risk management efforts, and supervise both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our CEO and CFO supervise efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which include ensuring routine briefings from internal security personnel, obtaining threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and providing Company personnel with alerts and reports produced by security tools deployed in the IT environment. 20

Company Information