Company: CXAI
Filing Date: 2025-04-08
Form Type: 424B3
Source: 0001829126-25-002456
Chunk: 55

Company: CXApp Inc.
Filing Date: 2025-04-08
Form: 424B3
Chunk 55
---
 Collection and reporting of status information about risks and their mitigation plans, response to changes in risks over time, and management oversight of corrective measures taken in accordance with the mitigation plan. |

Governance

As part of the risk management program, responsibility is assigned to Information Technology (IT) Department, systems owners, department managers, and executive management.

Management’s Role in Managing Risks

The IT Department is responsible for conducting a risk assessment as well as prioritizing, implementing, and maintaining the appropriate risk-reduction measures defined in the risk assessment process.

Risk owners are the individuals who are ultimately accountable for ensuring the risk is managed appropriately. There may be multiple personnel who have direct responsibility for or oversee activities to manage each identified risk and collaborate with the accountable risk owner in his/her risk management efforts. Responsibilities for the continued development, implementation, and maintenance of the risk management program are also assigned internally to IT.

Executive Management is responsible for the sponsorship and support of the risk management plan and processes, participating in the risk management meetings, and reviewing and approving risk assessments and risk mitigation plans. For the fiscal year ended December 31, 2024, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition. For further discussion of the risks associated with cybersecurity incidents, see the Item 1A. Risk Factors - Risks Relating to Cybersecurity Threats section in this Annual Report.

The Company’s Senior Director DevOps and IT is responsible for leading the assessment and management of cybersecurity risks. The current Senior Director DevOps and IT has significant years of experience in information security. The Senior Director DevOps and IT reports to the board of directors, the Audit Committee and management on cybersecurity threats on a regular basis.

Board of Directors Oversight

The Board of Directors plays an active role by meeting periodically to review the status of the organization’s information security program and roadmap for new cybersecurity risk management initiatives.

The board oversees cybersecurity risk management by evaluating whether management has current cybersecurity policies and procedures, regularly assesses, and monitors cybersecurity risks and receives regular reports on the organization’s cybersecurity posture.

<div align='center'>35</div>

Item 2. Properties.

Our executive offices are located at Four Palo Alto Square, Suite 200, 3000 El Camino Real, Palo Alto, CA 94306 and our telephone number is 650-785-7171. Through our subsidiary CXApp US, Inc., we lease additional office space in San Ramon