Company: OCEA
Filing Date: 2025-04-08
Form Type: 10-K
Source: 0001641172-25-003155
Chunk: 2284

Company: Ocean Biomedical, Inc.
Filing Date: 2025-04-08
Form: 10-K
Item: Item 1A
Chunk 2284
---
 standards, processes, and practices
are integrated across our operational departments.

Cybersecurity
Risk Management and Strategy

As
one of the elements of our overall risk management program, we focus on the following key areas:

Technical
Safeguards: We have commenced to implement technical safeguards, including by not limited to firewalls, anti-malware
functionality and access controls.

Outside
Consultants: We have identified and, as appropriate and when we have the budget to do so, will utilize outside consultants,
including contractors and other third parties, to among other things, conduct regular testing of our networks and systems to identify
vulnerabilities through penetration testing, while also measuring and advising on potential improvements to our incident prevention,
response, and documentation procedures.

We
have not encountered cybersecurity threats or experienced previously cybersecurity incidents that have materially affected or that we
believe are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.

Governance

Board
of Directors Oversight

Our
Board is aware of the critical nature of managing risks associated with cybersecurity threats. Management works with our Board to establish
oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the
significance of these threats to our operational integrity and stakeholder confidence. The Board has delegated to our Audit Committee
the primary responsibility for oversight of cybersecurity risks.

Management’s
Role Managing Risk

Our
Executive Team plays a primary role in informing the Audit Committee on cybersecurity risks. These individuals monitor activity and potential
risks related to the day-to-day operations of the business, including reviewing results of the work of our outside consultants. They
will provide briefings to the Audit Committee on a periodic basis regarding cybersecurity matters, including but not limited to the following:

    ●
    Current
    cybersecurity landscape and emerging threats;

    ●
    Status
    of ongoing cybersecurity initiatives and strategies;

    ●
    Incident
    reporting, if any, and learning from any cybersecurity events;

    ●
    Risk
    mitigation efforts and insurance, and

    ●
    Compliance
    with regulatory requirements and industry standard.

ITEM
2. PROPERTIES.

Our
executive offices are located at 55 Claverick St., Room 325, Providence, RI 02903. We do not have any manufacturing facilities or personnel
at this time. We currently rely, and expect to continue to rely, on contract manufacturing organizations for the manufacture of our product
candidates undergoing preclinical testing,