Company: FLDDW
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0001013762-25-004107
Chunk: 118

Company: Fold Holdings, Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1
Chunk 118
---
, data
                                            handling requirements, and other cybersecurity safeguards, and internal policies that govern
                                            our cybersecurity risk management and data protection practices;

●a
                                            defined procedure for timely incident detection, containment, response, and remediation,
                                            including a written security incident response plan that includes procedures for responding
                                            to cybersecurity incidents;

●cybersecurity
                                            risk assessment processes designed to help identify material cybersecurity risks to our critical
                                            systems, information, products, services, and broader enterprise IT environment;

●a
                                            security team responsible for managing our cybersecurity risk assessment processes and security
                                            controls;

●the
                                            use of external consultants or other third-party experts and service providers, where considered
                                            appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls;

●annual
                                            cybersecurity and privacy training of employees, including incident response personnel and
                                            senior management, and specialized training for certain teams depending on their role and/or
                                            access to certain types of information, such as consumer information; and

●a third-party risk management process that includes internal vetting of certain third-party vendors and service providers with whom we may share data.

67

Over the past fiscal year, we have not identified material risks from
known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations,
business strategy, operating results, or financial condition. We will continue to monitor and assess our cybersecurity risk management
program as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity
incident in the future, such incident may have a material effect, including on our operations, business strategy, operating results, or
financial condition. For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto,
see the section titled “Risk Factors” in Part I, Item 1A of this Annual Report.

Cybersecurity Governance

With oversight from our board of directors, the Audit Committee is
primarily responsible for assisting our board of directors in fulfilling its ultimate oversight responsibilities relating to risk assessment
and management, including relating to cybersecurity and other information technology risks. The Audit Committee oversees management’s
implementation of our cybersecurity risk management program, including processes and policies for determining risk tolerance, and reviews
management’s strategies for adequately mitigating and managing identified risks, including risks relating to cybersecurity threats.

The Audit Committee receives updates from members of management, including
the Chief Technology Officer and VP Risk & Compliance, on our cybersecurity risks at