Company: LASE
Filing Date: 2025-11-13
Form Type: DEFR14A
Source: 0001493152-25-022340
Chunk: 16

Company: Laser Photonics Corp
Filing Date: 2025-11-13
Form: DEFR14A
Chunk 16
---
 Governance Committee identifies and evaluates nominees for our Board of Directors, including nominees recommended by shareholders, based on numerous factors it considers appropriate, including but not limited to industry experience, strength of character, mature judgment, career specialization, relevant technical skills, diversity, and the extent to which the nominee would fill a present need on our Board of Directors.

Cyber Risk Management and Strategy

Under the oversight of the Board of Directors and Audit Committee, we have implemented and maintain a risk management program that includes processes for the systematic identification, assessment, management, and treatment of cybersecurity risks. Our cybersecurity oversight and operational processes are integrated into our overall risk management processes, and cybersecurity is one of our designated risk categories. We use the National Institute of Standards and Technology Cybersecurity Framework to guide our approach, ensuring a structured and comprehensive strategy for managing cybersecurity risks. We implement a risk-based approach to the management of cyber threats, supported by cybersecurity technologies, including automated tools, designed to monitor, identify, and address cybersecurity risks. In support of this approach, our IT security team implements processes to assess, identify, and manage security risks to the company, including in the areas of security and compliance, application security, infrastructure security and data privacy. This process includes regular compliance and critical system access reviews. In addition, we conduct application security assessments, vulnerability management, penetration testing, security audits and ongoing risk assessments as part of our risk management process. We also maintain an incident response plan to guide our processes in the event of an incident. We also have a process to require corporate employees to undertake cybersecurity training and compliance programs annually.

We utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing.

Further, we have processes in place to evaluate potential risks from cybersecurity threats associated with our use of third-party service providers that will have access to Company data, including a review process for such providers’ cybersecurity practices, risk assessments, contractual requirement and system monitoring.

We continue to evaluate and enhance our systems, controls, and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.

Risk Management Oversight and Governance

Our Board of Directors has oversight of our cybersecurity program and has delegated the quarterly assessments and management of cybersecurity risks to the Audit Committee.

Our IT Manager and our IT Administrator oversee our information security program and lead our information security team. Our IT Manager has primary responsibility for assessing and managing our cybersecurity threat management program, informed by over ten years of experience leading cross-functional organizations in the development and