Company: BTBT
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001013762-25-000307
Chunk: 555

Company: Bit Digital, Inc
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1A
Chunk 555
---

Item 1C. Cybersecurity

The Company’s cybersecurity principles,
goals and targets are defined in a policy approved by the Board of Directors (the “Policy”). This Policy is anchored in a
risk-based approach based on industry standards to balance the level of cybersecurity against the risks faced by the Company. Material
risks are managed by both internal resources and third-party contractors. The Company believes that effective information security management
is necessary for the secured sharing and protection of information within the Company’s cyberspace.

The Policy applies to all directors, officers,
employees and contractors of the Company and any parent, holding companies and subsidiaries regardless of their contract terms, who use
the Company’s technological devices.

The Board of Directors is responsible for leading
the Company to minimize the risk of unauthorized and malicious use, disclosure, potential theft, alteration or damaging effects on the
Company’s operations while concurrently enabling the sharing of information in cyberspace. The Board of Directors is committed to
ensuring that risks to the confidentiality, integrity or availability of Company-owned information assets are managed appropriately by
implementing an information security risk management approach.

73

The Board of Directors oversees the Policy and
its implementation of the Company’s oversight, programs, procedures, and policies related to cybersecurity, cybersecurity risks,
information security, and data privacy. Departments of the Company have been identified under the Policy to report to the Company’s
Head of IT overseeing the cybersecurity strategy as defined in the Policy.

The management team includes members with IT backgrounds
to guide our cybersecurity efforts. Management continuously assesses risk as internal and external factors evolve and remains committed
to ensuring employees have the adequate resources and training to fully understand cybersecurity guidelines and expectations. In the event
of a Policy breach, members of the management team may be asked by the IT Department to assist with security investigations. If any member
of management is unaware of the best course of action in dealing with an IT-related matter, the manager shall immediately contact the
Company’s Head of IT. Upon discovering a potential violation of the Policy or a cybersecurity breach, the member of management
must document the incident and request the individual surrender possession of any devices that may have suffered a security breach.

We assessed all third-party vendors, including
our third-party IT firm, before engaging them for various services. . We have partnered with a third-party IT firm for cybersecurity services,
with the Managed Security Operations Center operating 24/7/365 for automated email monitoring, malicious email quarantine, and reporting.
The Head of IT will be