Company: TPET
Filing Date: 2025-01-17
Form Type: 10-K
Source: 0001493152-25-002760
Chunk: 305

Company: Trio Petroleum Corp.
Filing Date: 2025-01-17
Form: 10-K
Item: Item 1
Chunk 305
---
 escalation of cybersecurity incidents and support
                                            appropriate public disclosure and reporting of incidents as required in a timely manner.
                                            Our cybersecurity efforts will include the use of risk-based administrative, technical, and physical
                                            controls. Trio is in the process of implementing an extensive set of policies, procedures, systems and tools
                                            designed to help safeguard our systems and data, including firewalls, intrusion detection
                                            systems, access controls including multi-factor authentication, vulnerability scanning, penetration
                                            testing, independent third-party control audits, an internal bug bounty program, and other
                                            systems and processes.

●Incident
                                            Response Planning: We intend to maintain a breach reporting and resolution plan that includes defined
                                            processes, roles, communications, responsibilities and procedures for responding to cybersecurity
                                            incidents and other events that impact our operations. Our incident response plans will be tested
                                            and evaluated on a regular basis.

●Education
                                            and Awareness: We plan to establish a security and privacy awareness program that runs throughout
                                            the year and includes training for all company personnel to enhance employee awareness of
                                            how to detect and respond to cybersecurity threats as well as more targeted training for
                                            company personnel that have increased responsibility for mitigating certain potential cybersecurity
                                            risks.

30

We
plan to review and update our policies, procedures, processes and practices to address changes in the threat landscape and as a
result of lessons learned from suspected, actual or simulated incidents. We also plan to review industry
best practices to assist in evaluating responses to new challenges and risks. These evaluations include testing both the design and
operational effectiveness of security controls.

Cybersecurity
Risks

While
we plan to dedicate significant efforts and resources to our cybersecurity program, we may be unable to successfully identify
threats, prevent attacks, satisfactorily resolve cybersecurity incidents, or implement adequate mitigating controls. Any breach of
our network security and information systems or other cybersecurity-related incidents that results in, or may result in, the loss,
theft or unauthorized disclosure of data, or any delay in determining the full extent of a potential breach, could have a material
adverse impact on our business, results of operations, and financial condition, including harm to our reputation and brand, reduced
demand for our solutions, time-consuming and expensive litigation, fines, penalties, and other damages. To date and except as
otherwise may be noted in this Annual Report, we are not aware of any cybersecurity threats, nor have we had any cybersecurity incidents.

ITEM
2. PROPERTIES