Company: ATHE
Filing Date: 2025-08-29
Form Type: 20-F
Source: 0001213900-25-082027
Chunk: 125

Company: ALTERITY THERAPEUTICS LTD
Filing Date: 2025-08-29
Form: 20-F
Item: Item 16K
Chunk 125
---
ITEM 16K. CYBERSECURITY

Cybersecurity Risk Management and Strategy

Cybersecurity risk management is an integral part
of our risk management framework. Our approach aligns with industry standards, including the National Institute of Standards and Technology
(NIST) Cybersecurity Framework (CSF), to effectively manage cybersecurity threats and incidents, including those related to third-party
applications and services.

Our framework includes:

  Assessing the severity of cybersecurity threats  

  Identifying the sources of cybersecurity threats  

  Implementing countermeasures and mitigation strategies  

  Reporting material cybersecurity threats and incidents to  

Processes for Assessing, Identifying, and Managing
Material Risks from Cybersecurity Threats

  (i)      Integration into Overall Risk Management:  

Cybersecurity risk management is
integrated
into our broader risk management system. Regular risk assessments and business impact analyses are conducted to identify critical
systems, applications, and data, as well as potential disruptions and their consequences. The Information Security Officer (ISO)
conducts these assessments, which inform the development of contingency plans including redundancy, backup and recovery, alternate
site operations, and data restoration.

  (ii)      Engagement & Oversight of Third Parties:  

Weengagethird-party assessors, consultants, auditors,
and experts to strengthen our cybersecurity processes. For example, we utilize third-party services for continuous vulnerability scanning,
perimeter testing, Dynamic Application Security Testing (DAST), and penetration testing to identify and address potential security weaknesses
in our systems. Additionally, we engage expert architects to help design and maintain secure cloud infrastructures.

Our third-party engagement and oversight process
includes conducting thorough due diligence, performing vendor risk assessments, and maintaining continuous monitoring to ensure that service
providers adhere to our security standards and comply with contractual obligations.

Material Effects of Cybersecurity Threats

In the past year, we didnotencounter any cybersecurity
threats that materially affected or are likely to materially affect our business strategy, results of operations, or financial condition.
Nonetheless, we continuously enhance our cybersecurity posture to mitigate potential material impacts. Our risk management program outlines
procedures for regular log reviews, incident detection, and remediation to ensure ongoing protection of our information systems.

Cybersecurity Governance

Board of Directors’ Oversight

Our Board of Directors plays a critical role in
overseeing cybersecurity risks as part of its broader risk oversight responsibilities. The Information Security Officer (ISO) provides
the board with updates on cybersecurity risks and incidents. Significant cybersecurity incidents are reported to the