Company: JXG
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001213900-25-043744
Chunk: 201

Company: JX Luxventure Group Inc.
Filing Date: 2025-05-15
Form: 20-F
Item: Item 16K
Chunk 201
---
ITEM 16K. Cybersecurity

Risk
Management and Strategy

We have
established policies and processes for assessing, identifying, and managing material risks from cybersecurity threats, and plan to integrate

We also implemented a
set of procedures to ensure effective management of the cybersecurity risks associated with the use of third-party service providers,
including conducting cybersecurity assessments and tracking the capabilities and qualifications of
third-party
security service providers
through assessment process. vulnerabilities.

We recognize the importance
of assessing, identifying, and managing material risks associated with cybersecurity threats. These risks include, among other things,
operational risks; intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy or security laws
and other litigation and legal risk; and reputational risks.

To address the increasing
risks of cyber-attacks, we implemented a robust and scalable cybersecurity strategy to protect our infrastructure, customer data, and
reputation, while leveraging third-party cloud services. We utilize advanced security features provided by our cloud partners, including
encryption, intrusion detection, and continuous monitoring, to safeguard sensitive information and prevent unauthorized access. Our cybersecurity
team enforces strict access controls, such as multi-factor authentication (MFA) and role-based permissions, while conducting regular vulnerability
scans, penetration testing, and audits to identify and remediate potential weaknesses. Comprehensive employee training programs promote
awareness of phishing and other threats, reducing human error risks. We maintain a well-defined incident response plan to swiftly contain,
investigate, and resolve any security incidents, ensuring minimal disruption to our platform and services. By aligning with our cloud
providers’ compliance standards we meet regulatory requirements and protect customer trust.

We assess the impact of cybersecurity threats
on our business, including our strategic direction, operational performance, and financial stability, using insights from any past cybersecurity
incidents in the shipping industry of which we are aware.

We have implemented risk-based processes for assessing,
identifying, and managing material risks from cybersecurity threats. These processes include access controls to organizational systems,
data encryption, and cybersecurity training and security awareness campaigns, and are designed to systematically evaluate potential vulnerabilities
and cybersecurity threats and minimize their potential impact on our organization’s operations, assets, and stakeholders. Accordingly,
we also implement processes to oversee and identify material cybersecurity risks associated with our utilization of third-party service
providers on whom we have a material dependency, such as conducting due diligence assessments to evaluate their cybersecurity measures,
data protection practices, and compliance with relevant regulatory requirements.

As we do not have a dedicated