Company: SWAGW
Filing Date: 2025-04-14
Form Type: 10-K
Source: 0001213900-25-031596
Chunk: 530

Company: Stran & Company, Inc.
Filing Date: 2025-04-14
Form: 10-K
Item: Item 1C
Chunk 530
---
 of current practices to further ensure cybersecurity.

Overseeing Third-Party Risk

Because we are aware of the risks associated with
third-party service providers, we implement processes to oversee and manage these risks. We conduct thorough security assessments of all
third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards. The monitoring
includes regular assessments by our Chief Information Officer. This approach is designed to mitigate risks related to data breaches or
other security incidents originating from third parties.

39

Risks from Cybersecurity Threats

We have not encountered cybersecurity challenges
that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations,
or financial condition.

Governance

Board of Directors Oversight

Our board of directors oversees the management
of risks associated with cybersecurity threats.

Management’s Role Managing Risk

The Company’s Chief Information Officer
is primarily responsible for assessing, monitoring and managing our cybersecurity risks. The Chief Information Officer must ensure that
all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks.
The Chief Information Officer provides briefings on cybersecurity threats and related risks to the Chief Executive Officer on a regular
basis. Our Chief Information Officer has had responsibility over cybersecurity, data privacy and classification, incident response, disaster
recovery, and business continuity in a number of positions in the field of information technology. The Chief Information Officer oversees
and tests our compliance with standards, remediates known risks, and leads our employee training program.

Monitoring Cybersecurity Incidents

The Chief Information Officer is continually informed
about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. The Chief Information
Officer implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard
security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the Chief
Information Officer will implement an incident response plan. This plan includes immediate actions to mitigate the impact and long-term
strategies for remediation and prevention of future incidents.

Reporting to Board of Directors

Significant cybersecurity matters, and strategic
risk management decisions, will be escalated to the board of directors.

 ITEM 2. PROPERTIES. 

We are headquartered in Quincy, Massachusetts,
where we occupy approximately 10,000 square feet of office space pursuant to a lease agreement, as amended, that will terminate on May
31, 2025. Our management team, client service team, marketing, operations, and sales team are all primarily