Company: XTKG
Filing Date: 2025-04-25
Form Type: 20-F
Source: 0001213900-25-035626
Chunk: 211

Company: X3 Holdings Co., Ltd.
Filing Date: 2025-04-25
Form: 20-F
Item: Item 16K
Chunk 211
---
ITEM 16K. CYBERSECURITY

Cybersecurity Risk Management and Strategy

We have developed and implemented
a cybersecurity risk management program intended to protect the confidentiality, integrity and availability of our critical systems and
information.

Our cybersecurity risk management
aligns with and shares common methodologies and reporting channels with our broader risk management.

Key features of our cybersecurity
risk management program include, but are not limited to, the following:

  risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT Systems environment;  

  a security team principally responsible for managing ( 1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;  

  processes for monitoring for vulnerabilities of our technology which includes code review (as necessary), testing and analysis of software across the software lifecycle;  

  the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;  

  physical and technical security measures, including encryption, authentication, and access controls;  

  cybersecurity awareness training and internal cybersecurity resources for our employees;  

  a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and  

We havenot identifiedrisks
from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including
our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized,
are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.
See “ Item 3. Key Information - D. Risk Factors - Risks Related to Our Business and Industry - Unauthorized disclosure,
destruction or modification of data, through cybersecurity breaches, computer viruses or otherwise or disruption of our services could
expose us to liability, protracted and costly litigation and damage our reputation.”

Cybersecurity Governance

Our Board considers cybersecurity
risk as part of its risk oversight function and undertakes overall risk management, including oversight of cybersecurity and other information
technology risks.

Our Board receives quarterly
reports from management on our cybersecurity risks. In addition, management updatesour Board, as necessary, regarding any significant
cybersecurity incidents. Our Board also receives briefings from management on our cyber risk management program.

Our management has primary
responsibility for our overall cybersecurity risk management program and supervises our internal cybersecurity personnel.
Our management
and the security team, including our