Company: NCEL
Filing Date: 2025-05-16
Form Type: 20-F
Source: 0001213900-25-044868
Chunk: 340

Company: NewcelX Ltd.
Filing Date: 2025-05-16
Form: 20-F
Item: Item 16K
Chunk 340
---
ITEM 16K. CYBERSECURITY

Our board of directors recognizes
the critical importance of maintaining the trust and confidence of our customers, clients, business partners and employees. The audit
committee is involved in oversight of our IT general controls and cybersecurity. Our IT general controls cybersecurity policies, standards,
processes and practices are fully
integrated
into our risk management program. In general, we seek to address IT general controls cybersecurity
risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability
of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding
to cybersecurity incidents when they occur. In that regard, we have a comprehensive IT policy that outlines our security risk
measures. In addition, we have partnered with a professional IT service provider who specializes in security, endpoint protection,
and monitoring. We also operate the “ Microsoft Office 365 E3” plan.

Risk Management and Strategy

As part of the critical elements
of our overall risk management approach, our cybersecurity program is focused on the following key areas:

  Governance: As discussed in more detail under the heading “ Governance,” the audit committee oversees our cybersecurity risk management and interacts with the Company’s Sarbanes-Oxley Act, or S...  

  Collaborative Approach: The Company has implemented a comprehensive, cross-functional approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implemen...  

  Technical Safeguards: The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion preventi...  

  Recovery Planning: The Company has established and maintains comprehensive recovery plans that fully address the Company’s response to a cybersecurity incident, and such plans are tested and ev...  

  Education and Awareness: The Company provides regular, mandatory training for personnel regarding cybersecurity threats as a means to equip the Company’s personnel with effective tools to addre...  

We engage in the periodic
assessment and testing of our policies, standards, processes and practices that are designed to address cybersecurity threats and incidents.
These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing,
and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. We are engaged with a subcontractor
that monitors the IT system and cybersecurity, as part of their routine job functions. We regularly engagethird partiesto perform assessments
on our cybersecurity measures, including information security maturity