Company: NTWK
Filing Date: 2025-09-29
Form Type: 10-K
Source: 0001493152-25-015950
Chunk: 365

Company: NETSOL TECHNOLOGIES INC
Filing Date: 2025-09-29
Form: 10-K
Item: Item 1B
Chunk 365
---
None

9

ITEM
1C – CYBERSECURITY

Cybersecurity
Risk Management and Strategy

We
face various cyber risks, including, but not limited to, risks related to unauthorized access, misuse, customer data theft, computer
viruses, system disruptions, ransomware, malicious software and other intrusions. We utilize a multilayered, proactive approach to identify,
evaluate, mitigate and prevent potential cyber and information security threats through our cybersecurity risk management program 24/7.
Our cybersecurity risk management program is designed to identify, assess, prioritize and mitigate risks across the organization to enhance
our resilience and support the achievement of our strategic objectives. This integrated approach helps ensure that cyber risks are not
viewed in isolation, but are assessed, prioritized and managed in alignment with the Company’s operational, financial and strategic
risks, assisting the Company in more effectively managing interdependencies among risks and enhancing risk mitigation strategies.

We
devote resources to protecting the security of our computer systems, software, networks and other technology assets. Our efforts are
designed to adapt to the evolution of information security risks and appropriate best practices and include physical, administrative
and technical safeguards. Our cybersecurity risk management program is designed to help coordinate the Company’s identification
of response to and recovery from cybersecurity incidents across all consolidated entities. This includes rapid identification, assessment,
investigation and remediation of incidents, as well as complying with applicable legal obligations, communicated promptly and effectively.

Our
internal audit team assesses regularly the effectiveness of our internal controls relating to cybersecurity and updates as necessary.
Our management team also engages, at times when needed, certain outside advisors and consultants to assist in the identification, oversight,
evaluation and management of cybersecurity risks, as well as to advise on specific topics. As part of our overall risk mitigation strategy,
the Company also maintains cyber insurance coverage; however, such insurance may not be sufficient in type or amount to cover us against
claims related to security breaches, cyberattacks and other related breaches.

We
have various processes and procedures in place to evaluate cybersecurity threats associated with third parties. We have not identified
any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, performance,
results of our operations, or financial condition.

Cybersecurity
Governance and Oversight

The
Company’s cybersecurity risk management program is supervised by our Senior Manager of Information Security (SMIS), who reports
directly to the Company’s Chief Operating Officer (“COO”) in Pakistan. The SMIS