FDCTECH, INC. 10-K Cybersecurity GRC - 2025-03-31

Page last updated on March 31, 2025

FDCTECH, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-03-31 17:16:22 EDT.

Filings

10-K filed on 2025-03-31

FDCTECH, INC. filed a 10-K at 2025-03-31 17:16:22 EDT
Accession Number: 0001641172-25-001853

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY The Company is committed to protecting the personal data shared by its clients and partners. The Company employs a combination of industry-standard security technologies, procedures, and organizational measures to safeguard personal data from unauthorized access, use, or disclosure. Employees receive extensive training to ensure the privacy and confidentiality of client information. The Company’s Board of Directors possesses a foundational understanding of cybersecurity matters, reflecting the company’s ongoing commitment to safeguarding its financial technology infrastructure. While board members may not currently hold formal cybersecurity certifications such as CISSP or CISM, several directors have prior experience in managing technology-driven businesses where data security and regulatory compliance were integral to operations. The Board remains actively engaged in cybersecurity oversight through regular updates from senior management, including the Chief Technology Officer and other executives responsible for information security. These updates typically cover threat assessments, system vulnerabilities, incident response protocols, and regulatory developments. This communication ensures that the Board is informed of emerging risks and can provide appropriate strategic guidance in alignment with the Company’s overall risk management framework. In its privacy policy, the Company outlines its data-sharing practices, stating that personal data is not sold or rented to third parties without permission. The company may disclose personal data in response to legal requirements or to establish or exercise its legal rights. Additionally, the Company may collect and share personal data to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats. As a developer of regulatory-grade financial technology, the Company ensures that its cybersecurity measures align with relevant regulations and standards. The company’s subsidiaries, such as Alchemy Markets Ltd. and Alchemy Prime Limited, are regulated by financial authorities like the Malta Financial Services Authority (MFSA) and the UK’s Financial Conduct Authority (FCA), respectively. Compliance with these regulatory bodies necessitates adherence to stringent cybersecurity protocols to protect client data and maintain the integrity of financial operations. While the Company implements robust cybersecurity measures, it acknowledges the inherent risks associated with cyber threats. Potential risks include unauthorized access, cyberattacks, and data breaches, which could lead to financial loss, reputational damage, and regulatory penalties. The company continuously assesses and enhances its cybersecurity framework to mitigate these risks and protect stakeholders’ interests. In summary, the Company prioritizes cybersecurity through comprehensive measures, regulatory compliance, and ongoing risk management to safeguard its operations and client data.

Company Information