Company: SHPH
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001493152-25-008300
Chunk: 84

Company: Shuttle Pharmaceuticals Holdings, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 84
---
cluding account recommendations) to a retail customer, shall act in the best interest of the retail customer at the time the recommendation
is made, without placing the financial or other interest of the broker, dealer, or natural person who is an associated person of a broker
or dealer making the recommendation ahead of the interest of the retail customer.” This is a significantly higher standard for
broker-dealers to recommend securities to retail customers than before under FINRA “suitability rules.” FINRA suitability
rules do still apply to institutional investors and require that in recommending an investment to a customer, a broker-dealer must have
reasonable grounds for believing that the investment is suitable for that customer. Prior to recommending securities to their customers,
broker-dealers must make reasonable efforts to obtain information about the customer’s financial status, tax status, investment
objectives and other information, and for retail customers determine the investment is in the customer’s “best interest”
and meet other SEC requirements. As a result, fewer broker-dealers may be willing to make a market in our common stock, reducing a stockholder’s
ability to resell shares of our common stock.

Item
1B. Unresolved Staff Comments

None.

52

Item
1C. Cybersecurity

Risk
Management and Strategy

We
have established policies and processes for assessing, identifying, and managing material risks from cybersecurity threats, and have
integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity
threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects
on the confidentiality, integrity, or availability of our information systems or any information residing therein.

We
have begun to conduct risk assessments at least annually to identify cybersecurity threats. These risk assessments include
identifying reasonably foreseeable potential internal and external risks, the likelihood of occurrence and any potential damage that
could result from such risks, and the sufficiency of existing policies, procedures, systems, controls and other safeguards we have
put in place to manage such risks. Our risk management process also encompasses cybersecurity risks associated with the use of our
major third-party
vendors and service providers.

Following
these risk assessments, we design, implement, and maintain reasonable safeguards to minimize the identified risks; reasonably address
any identified gaps in existing safeguards; update existing safeguards as necessary; and monitor the effectiveness of our safeguards.

We
believe we have allocated adequate resources related to our cybersecurity risk management processes and have designated our President and Chief Operating Officer with the