Company: TPET
Filing Date: 2025-01-17
Form Type: 10-K
Source: 0001493152-25-002760
Chunk: 449

Company: Trio Petroleum Corp.
Filing Date: 2025-01-17
Form: 10-K
Item: Item 1B
Chunk 449
---
None.

ITEM
1C. CYBERSECURITY.

Cybersecurity
attacks impact businesses and organizations of all sizes and sectors on a global basis. At Trio, we recognize the importance of developing,
implementing and maintaining a cybersecurity risk management program. We are currently implementing resources to protect our systems and data, from cybersecurity threats. We are dependent on internal and external information technology systems and infrastructure
to securely process, transmit, and store critical information. We are currently in the process of engaging an outsourced security firm for overseeing our cybersecurity.
We seek to reduce cybersecurity risks through a variety of cybersecurity risk management activities that are designed to identify, assess,
manage and mitigate cybersecurity threats.

Risk
Management Strategy

The
Company’s cybersecurity risk management program is focused on the following key areas:

●Governance:
                                            The cybersecurity risk management program is led by our outsourced security team. At present our Board of
                                            Directors does not oversee the cybersecurity risk management program, however, the Audit
                                            Committee of our Board of Directors is in the process of implementing procedures to obtain
                                            regular updates on our cybersecurity program, including recent developments, key initiatives
                                            to strengthen our systems, applicable industry standards, vulnerability assessments, third-party
                                            and independent reviews, and other information security considerations.

●Approach:
                                            We intend to use a cross-functional approach to identifying, preventing, assessing, and mitigating
                                            cybersecurity threats and incidents, while also implementing controls and procedures that
                                            are designed to provide for the prompt escalation of cybersecurity incidents and support
                                            appropriate public disclosure and reporting of incidents as required in a timely manner.
                                            Our cybersecurity efforts will include the use of risk-based administrative, technical, and physical
                                            controls. Trio is in the process of implementing an extensive set of policies, procedures, systems and tools
                                            designed to help safeguard our systems and data, including firewalls, intrusion detection
                                            systems, access controls including multi-factor authentication, vulnerability scanning, penetration
                                            testing, independent third-party control audits, an internal bug bounty program, and other
                                            systems and processes.

●Incident
                                            Response Planning: We intend to maintain a breach reporting and resolution plan that includes defined
                                            processes, roles, communications, responsibilities and procedures for responding to cybersecurity
                                            incidents and other events that impact our operations. Our incident response plans will be tested
                                            and evaluated on a regular basis.

●Education
                                            and Awareness: We plan to establish a security and privacy awareness program that runs throughout
                                            the year and includes training for