Company: BWAY
Filing Date: 2025-04-22
Form Type: 20-F
Source: 0001171843-25-002347
Chunk: 192

Company: Brainsway Ltd.
Filing Date: 2025-04-22
Form: 20-F
Item: Item 16A
Chunk 192
---
) and various measures
which limit the ability of different sectors within our organization to access certain types of information.

  151  

In the event of a cybersecurity incident or threat,
our Information Technology (IT) personnel and/or other personnel alert our Quality Assurance (QA) team and/or appropriate members of our
Research and Development (R& D) team such as our Head of Software Development. Our QA manager previously served as a Medical Devices
lead auditor for the Israel Standards Institute and has over 20 years of overall QA and project management experience including with respect
to managing QA systems, regulatory affairs, supporting engineering and production processes, and involvement in corrective and preventive
actions (CAPA).

Our Head of Software Development previously served
as a conditional access engineer (a key function in cybersecurity compliance) and a technical program manager for large cyber-focused
programs, and periodically attends cybersecurity workshops.

These departments/individuals and/or their teams
are responsible for the day-to-day assessment and management of risks arising from cybersecurity threats, including the prevention, mitigation,
detection, and remediation of cybersecurity incidents.

In the event of a material incident or threat, our
CEO is notified as well. The CEO would then be expected to report the threat to the audit committee of the Board of Directors, which is
responsible for oversight of strategic, financial and other major risks to the Company, which could include those posed by cybersecurity
threats. This would include reviewing any cybersecurity measures taken by the IT team and any reports of cybersecurity incidents or threats.
The audit committee could also be notified of this type of threat to the extent deemed appropriate by our internal auditor, which conducts
various risk assessments on our company and issues periodic reports where appropriate.

We maintain business continuity, contingency, and
recovery plans which may be used in the event of a cybersecurity incident.

We leverage the advice of third-party auditors and
consultants as needed to help us assess and identify risks from cybersecurity threats and to help manage our risk assessment program.
We rely on, and plan to increase our collaboration with, a leading provider of cybersecurity services having operations in the U. S., Israel
and the Philippines for various projects and initiatives relating to our company and technology (including with respect to the integration
of certain cloud-based capabilities within our proprietary Deep TMS device). This provider offers a wide variety of CISO training, compliance,
strategy, governance and other resources and tools which we believe will help us address any future cybersecurity threats that may arise
in our dynamic and evolving field