Company: OXBRW
Filing Date: 2025-03-26
Form Type: 10-K
Source: 0001641172-25-000736
Chunk: 431

Company: OXBRIDGE RE HOLDINGS Ltd
Filing Date: 2025-03-26
Form: 10-K
Item: Item 1A
Chunk 431
---
 may become subject to new compliance requirements and/or new costs or taxes associated with
natural resource or energy usage and related emissions (such as a “carbon tax”), which could increase our operating costs.

26

We
could incur additional costs relating to implementing, monitoring and reporting various ESG practices and initiatives, as well as complying
with applicable law, which could place a strain on our personnel, systems and resources. Our failure, or perceived failure, to meet the
goals and objectives we set in any ESG disclosure within the timelines announced or at all, or the expectations of our various stakeholders
could negatively impact our reputation, tenant and employee retention, and access to capital.

ITEM
1B UNRESOLVED STAFF COMMENTS

The
Company has no unresolved written comments regarding its periodic or current reports from the staff of the SEC.

ITEM
1C CYBERSECURITY

Governance

Cybersecurity
                                                 is an integral part of the Board’s risk analysis and discussions with management.  Our board of directors administers the
                                                 Company’s cybersecurity risk oversight function directly as a whole, as well as through the audit committee. At least
                                                 annually, the full Board
                                                 is updated on the Company’s cybersecurity risks and risk mitigation strategy by the audit committee. The audit committee has access to advisors, and various other reports, and presentation materials related to cybersecurity threats, risk and mitigation. The Board also
                                                 receives ad hoc updates, as needed, about material changes to the Company’s cybersecurity program and/or the cybersecurity
                                                 landscape, including briefings on major legislative and regulatory developments.

The Company regularly evaluates its cybersecurity risk profile and leads the development of strategies to mitigate risks and
address cybersecurity issues that may arise in consultation with members of our senior management team. On an as needed basis, the Company engages external advisors and consultants to assess our internal cybersecurity
programs and compliance with applicable regulatory requirements and industry standards

We
have formal policies and procedures that address cybersecurity incident response and disaster recovery from interference with our critical
applications. Our Cybersecurity Incident Response Standard provides a documented framework for responding to cybersecurity incidents
in coordination across multiple departments. In the event of such an incident, our Cybersecurity Incident Response Team (“CIRT”),
which includes our CIO, Chief Executive Officer, Chief Financial Officer, and outside legal counsel, would respond to such incident in
accordance with our Cybersecurity Incident Response Standard. Any cybersecurity incident that is designated by the CIRT with a “High”
severity classification according to the Cybersecurity Incident