Company: FLDDW
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0001013762-25-004107
Chunk: 528

Company: Fold Holdings, Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1C
Chunk 528
---
Item
1C. CYBERSECURITY.

Cybersecurity Risk Management and Strategy

We have developed and implemented cybersecurity risk management processes
intended to protect the confidentiality, integrity, and availability of our critical systems and information. While everyone at our company
plays a part in managing cybersecurity risks, primary cybersecurity oversight responsibility is shared by our board of directors, our
audit and compliance committee (“Audit Committee”), and senior management. Our cybersecurity risk management program is integrated
into our overall enterprise risk management program.

Our cybersecurity risk management program includes:

●physical,
                                            technological, and administrative controls intended to support our cybersecurity and data
                                            governance framework, including protections designed to protect the confidentiality, integrity,
                                            and availability of our key information systems and customer, employee, partner, and other
                                            third-party information stored on those systems, such as access controls, encryption, data
                                            handling requirements, and other cybersecurity safeguards, and internal policies that govern
                                            our cybersecurity risk management and data protection practices;

●a
                                            defined procedure for timely incident detection, containment, response, and remediation,
                                            including a written security incident response plan that includes procedures for responding
                                            to cybersecurity incidents;

●cybersecurity
                                            risk assessment processes designed to help identify material cybersecurity risks to our critical
                                            systems, information, products, services, and broader enterprise IT environment;

●a
                                            security team responsible for managing our cybersecurity risk assessment processes and security
                                            controls;

●the
                                            use of external consultants or other third-party experts and service providers, where considered
                                            appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls;

●annual
                                            cybersecurity and privacy training of employees, including incident response personnel and
                                            senior management, and specialized training for certain teams depending on their role and/or
                                            access to certain types of information, such as consumer information; and

●a third-party risk management process that includes internal vetting of certain third-party vendors and service providers with whom we may share data.

67

Over the past fiscal year, we have not identified material risks from
known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations,
business strategy, operating results, or financial condition. We will continue to monitor and assess our cybersecurity risk management
program as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity
incident in the future, such incident may have a material effect, including on our operations, business strategy