Company: MYSEW
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001013762-25-004290
Chunk: 40

Company: Myseum, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 40
---
have notice of and consented to this provision. As this provision applies to Securities Act claims, there may be uncertainty whether
a court would enforce such a provision.

These choice of forum provisions may limit a
stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with the Company or its directors,
officers or other employees, which may discourage such lawsuits against the Company and its directors, officers and other employees.
Alternatively, if a court were to find our choice of forum provisions contained in either our Amended and Restated Articles of Incorporation
or Amended and Restated Bylaws to be inapplicable or unenforceable in an action, the Company may incur additional costs associated with
resolving such action in other jurisdictions, which could harm its business, results of operations, and financial condition.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 1C. CYBERSECURITY

Our cybersecurity team, led by our Chief Technology
Officer, Peter Shelus, uses a multi-pronged approach to assessing, identifying, and managing material risks from cybersecurity threats.
This approach includes identifying and assessing risks through: (1) an enterprise risk management program, which is periodically refreshed
and includes an identification of our top risks, including cybersecurity risks; (2) formalized security and privacy reviews designed
to identify risks from many new features, software, and vendors; (3) a vulnerability management program designed to identify hardware
and software vulnerabilities; (4) an internal “red team” program, which simulates cyber threats, intended to allow us to
fix vulnerabilities before threat actors identify them; (5) a threat intelligence program designed to model and research our adversaries;
and (6) a privacy and security incident response program designed to investigate, respond to, and remediate known incidents. These processes
vary in scope and maturity across the business and are processes we work to continually improve.

24

Our risk management approach is supplemented
by external and internal enterprise risk management audits, which are designed to test the effectiveness of our security controls. We
conduct penetration testing on a periodic basis, and have established an external bug bounty program to allow security researchers to
help identify vulnerabilities and weaknesses in our controls and configurations in our systems. We also maintain a vendor risk management
program designed to identify and mitigate potential risks associated with third-party suppliers and business partners. This program includes
pre-engagement diligence, use of contractual cybersecurity and notification provisions, and ongoing monitoring of