Company: JXG
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001213900-25-043744
Chunk: 202

Company: JX Luxventure Group Inc.
Filing Date: 2025-05-15
Form: 20-F
Item: Item 16K
Chunk 202
---
 board committee
solely focused on cybersecurity, our board of directors has oversight responsibility for risks and incidents relating to cybersecurity
threats, including compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other
risks. Senior management regularly discusses cyber risks and trends and, should they arise, any material incidents with our board of directors.
We consult with outside counsel as appropriate, including on materiality analysis and disclosure matters, and in the event of an incident
our board of directors will make the final materiality determinations and disclosure and other compliance decisions. Our external IT provider
maintains a dedicated cybersecurity auditing team that independently tests our cybersecurity controls.

Overall, our approach to cybersecurity risk management
includes the following key elements:

  Open-Source Software Approval Process: All OSS intended for use in our products or platform must be reviewed and approved by a designated compliance team. This process includes evaluating the O...  
 ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
  License Compliance Tracking: We maintain a centralized inventory of all OSS components used in our systems, including their versions, licenses, and associated obligations. Developers are requir...  
  Code Review and Scanning Policy: All code, including OSS, must undergo automated scanning using tools to detect unlicensed or non-compliant OSS components before integration. Regular code revie...  
  Developer Training and Guidelines: Employees and contractors receive mandatory training on OSS licensing and compliance. Clear guidelines prohibit the use of high-risk licenses without explicit...  
  Third-Party Contribution Policy: Developers are prohibited from contributing to external OSS projects on behalf of the company without prior approval. Any contributions must align with our lice...  

These policies help ensure
that our use of open-source software is compliant, minimizing legal and operational risks while maintaining the integrity of our platform
and products.

Our business strategy,
operating results and financial condition have not been materially affected by risks from cybersecurity threats, including as a result
of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially affected in the future
by such risks or any future material incidents.

As of the date of this
Annual Report, we havenotexperienced any material cybersecurity incidents or identified any material cybersecurity threats that have
affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.

Governance

Our board of directors
is responsible for overseeing our cybersecurity risk management. Our