Company: LASE
Filing Date: 2025-06-24
Form Type: 10-K
Source: 0001641172-25-016194
Chunk: 225

Company: Laser Photonics Corp
Filing Date: 2025-06-24
Form: 10-K
Item: Item 1
Chunk 225
---
 and treatment of cybersecurity risks. Our cybersecurity oversight and
operational processes are integrated into our overall risk management processes, and cybersecurity is one of our designated risk categories.
We use the National Institute of Standards and Technology Cybersecurity Framework to guide our approach, ensuring a structured and comprehensive
strategy for managing cybersecurity risks. We implement a risk-based approach to the management of cyber threats, supported by cybersecurity
technologies, including automated tools designed to monitor, identify, and address cybersecurity risks. In support of this approach,
our IT security team implements processes to assess, identify, and manage security risks to the company, including in the pillar areas
of security and compliance, application security, infrastructure security, and data privacy. This process includes regular compliance
and critical system access reviews. In addition, we conduct application security assessments, vulnerability management, penetration testing,
security audits, and ongoing risk assessments as part of our risk management process. We also maintain an incident response plan to guide
our processes in the event of an incident. We also have a process to require corporate employees to undertake cybersecurity training
and compliance programs annually.

We
utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises
and to conduct security testing.

Further,
we have processes in place to evaluate potential risks from cybersecurity threats associated with our use of third-party service providers
that will have access to Company data, including a review process for such providers’ cybersecurity practices, risk assessments,
contractual requirement, and system monitoring.

We
continue to evaluate and enhance our systems, controls, and processes where possible, including in response to actual or perceived threats
specific to us or experienced by other companies.

Although
risks from cybersecurity threats have to date not materially affected us, our business strategy, results of operations or financial condition,
we have, from time to time, experienced threats to and breaches of our and our third-party vendors’ data and systems. For more
information, please see Item 1A. Risk Factors, the section titled “Risk Factors—Risks Related to our Business and Our Industry—
Internal system or service failures could disrupt our business and impair our ability to effectively provide our services and products
to our customers, which could damage our reputation and adversely affect our revenues and profitability.” and “As
a U.S. defense contractor, we are vulnerable to security threats and other disruptions that could negatively impact our business.”

Risk
Management Oversight and Governance

The
Board of Directors has oversight of the Company’s cybersecurity program and has