Company: OXBRW
Filing Date: 2025-03-26
Form Type: 10-K
Source: 0001641172-25-000736
Chunk: 577

Company: OXBRIDGE RE HOLDINGS Ltd
Filing Date: 2025-03-26
Form: 10-K
Item: Item 1C
Chunk 577
---
Governance

Cybersecurity
                                                 is an integral part of the Board’s risk analysis and discussions with management.  Our board of directors administers the
                                                 Company’s cybersecurity risk oversight function directly as a whole, as well as through the audit committee. At least
                                                 annually, the full Board
                                                 is updated on the Company’s cybersecurity risks and risk mitigation strategy by the audit committee. The audit committee has access to advisors, and various other reports, and presentation materials related to cybersecurity threats, risk and mitigation. The Board also
                                                 receives ad hoc updates, as needed, about material changes to the Company’s cybersecurity program and/or the cybersecurity
                                                 landscape, including briefings on major legislative and regulatory developments.

The Company regularly evaluates its cybersecurity risk profile and leads the development of strategies to mitigate risks and
address cybersecurity issues that may arise in consultation with members of our senior management team. On an as needed basis, the Company engages external advisors and consultants to assess our internal cybersecurity
programs and compliance with applicable regulatory requirements and industry standards

We
have formal policies and procedures that address cybersecurity incident response and disaster recovery from interference with our critical
applications. Our Cybersecurity Incident Response Standard provides a documented framework for responding to cybersecurity incidents
in coordination across multiple departments. In the event of such an incident, our Cybersecurity Incident Response Team (“CIRT”),
which includes our CIO, Chief Executive Officer, Chief Financial Officer, and outside legal counsel, would respond to such incident in
accordance with our Cybersecurity Incident Response Standard. Any cybersecurity incident that is designated by the CIRT with a “High”
severity classification according to the Cybersecurity Incident Response Standard or that otherwise necessitates regulatory disclosure
because of its materiality, will be communicated by the CIRT to the Board within specified timeframes. All cybersecurity incidents, will
be evaluated by our CIRT to assess the impact of the incident on the Company, considering qualitative and quantitative factors. In conducting
this assessment and responding to an incident, the CIRT Team may utilize the services of third-party consultants. Third-party consultants
may be engaged to assist with the identification of the source of any cybersecurity incidents, remediation and recovery from such incident,
and the refinement of cybersecurity controls to avert similar future cybersecurity threats and incidents.

Cybersecurity
user awareness training is mandatory for all new hires and for existing employees on an annual basis to help protect our employees and
the Company against cybersecurity threats. Novel cybersecurity threats to the Company that are identified  are communicated
to all employees