Company: CXAI
Filing Date: 2025-04-08
Form Type: 424B3
Source: 0001829126-25-002456
Chunk: 54

Company: CXApp Inc.
Filing Date: 2025-04-08
Form: 424B3
Chunk 54
---
 expect further developments with SVB to have a material impact on our cash and cash
equivalents balance, expected results of operations, or financial performance for the foreseeable future. However, if further
failures in financial institutions occur where we hold deposits, we could experience additional risk. Any such loss or limitation on
our cash and cash equivalents would adversely affect our business.

Item 1.B. Unresolved Staff Comments.

As a smaller reporting company, we are not required to provide this information.

Item 1.C. Cybersecurity Disclosures

Risk Management and Strategy

CXApp’s information security program is implemented based on ISO 27001 and SOC 2 frameworks.

Risk Management Program As part of the information security program, CXApp has a risk management program that engages in the process of identifying, evaluating, and treating risks around the organization’s information. It addresses uncertainties around information assets to ensure the desired business outcomes are achieved. CXApp performs annual Risk Assessments (RAs) to determine security risks in corporate operations, products, and services, and initiates appropriate remediation. CXApp’s information security program is aligned with business objectives that establish rules governing how to identify risks, assign risk ownership, how the risks impact the confidentiality, integrity and availability of the information and the method of treatment for identified risks. A formal risk assessment methodology is approved by management. The risk management framework includes guidelines for identifying and estimating the cost of protective measures to eliminate or reduce the security risks to an acceptable level. All operations, products, services, information assets and information systems that are owned and operated by CXApp are assessed for risks that result from threats to the integrity, availability, and confidentiality of CXApp’s data. 34 The risk management program focuses on the following five types of activities:

| ● | Identification of Strategic Objectives: The alignment of strategic objectives and risk management to avoid siloed risk management approach. This is the key step in performing risk assessments. |

| ● | Identification of Risks: A continuous effort to identify which risks are likely to affect the CXApp’s strategic objectives and consequently security functions and business continuity of CXApp and documenting their characteristics. |

| ● | Analysis of Risks: An estimation of the probability (likelihood), impact, and prioritization of risks relative to each other. |

| ● | Mitigation Planning: Decisions and actions that will reduce the impact of risks as well as limit the probability of their occurrence or improve the response to a risk occurrence. |

| ● | Tracking and Controlling Risks: