Company: KPEA
Filing Date: 2025-01-14
Form Type: 10-K
Source: 0001493152-25-002124
Chunk: 943

Company: Kun Peng International Ltd.
Filing Date: 2025-01-14
Form: 10-K
Item: Item 1C
Chunk 943
---
The
Company has adopted a cybersecurity policy (the “Cybersecurity Policy”) governing the establishment and application of certain
procedures and safeguards to identify potential cybersecurity risks and, in the event of a cybersecurity breach, the protocol for disclosing
to the Securities and Exchange Commission, including possible remedies. The members of the Board of Directors reviews cybersecurity risk
as part of our overall risk-management program. This ensures that cybersecurity risk management remains a meaningful priority in our
business strategy and operations. Our risk management strategy for cybersecurity generally includes:

  1.
  Identification: We aim to proactively identify the manners
in which our business could be materially impacted by cybersecurity risks including:

  1.
  Cybersecurity Incidents – an unauthorized occurrence
on or conducted through its information system that jeopardizes the confidentiality, integrity, or availability of its information systems
or any information residing therein

  2.
  Cybersecurity Threats – any potential occurrence that
may result in an unauthorized effort to adversely affect the confidentiality, integrity, or availability of its information systems or
any information residing therein.

74

    2.
    Assessment: We periodically assess our risks relating to cybersecurity threats, including risks relating to our reliance on third parties. In so doing, we consider the likelihood and impact that could result from the manifesting of such risks, together with the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks, together with the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks, including evaluating and if available obtaining cyber liability insurance, and aligning such cyber-risk management policies with the Company’s business needs by integrating cyber-risk analysis into significant business decisions.

    3.
    Management: If deemed appropriate, we design and implement reasonable safeguards to address any identified gaps in our existing processes and procedures, including annual cybersecurity awareness training emphasizing the use of strong passwords on all systems and aligning cyber-risk management policies with the Company’s needs by integrating cyber-risk analysis into significant business decisions and ensuring that the Company’s organization structure supports such cybersecurity goals.

    4.
    Evaluation: If a cybersecurity breach occurs, the Board of Directors and/or the Audit Committee will determine whether the incident or threat is “material” (.i.e. is there a substantial likelihood that a reasonable shareholder would consider it important in making an investment decision or if it would have significantly altered the “total mix” of information made available?), assessing among other factors potential or actual financial impacts, reputational damage, and operational