Company: VEEAW
Filing Date: 2025-04-15
Form Type: 10-K
Source: 0001213900-25-032215
Chunk: 286

Company: VEEA INC.
Filing Date: 2025-04-15
Form: 10-K
Item: Item 1A
Chunk 286
---
 processes.

●Incident
                                            Response Planning: We maintain a breach reporting and resolution plan that includes defined
                                            processes, roles, communications, responsibilities and procedures for responding to cybersecurity
                                            incidents and other events that impact our operations. Our incident response plans are tested
                                            and evaluated on a regular basis.

●Third-Party Risk Management: Our business relies on various services from third party service providers that could adversely impact the security of our systems and business. We have implemented processes designed to identify and assess cybersecurity risks associated with our use of third-party service providers.

●Education
                                            and Awareness: We provide various training programs and tools to employees so they can avoid
                                            risky practices and help us promptly identify potential or actual issues. We also have global
                                            incident response procedures, global service tools to log incidents and issues for investigation,
                                            and an ethics line to report concerns and follow up on matters already reported. The Compliance
                                            team, led by our Chief Technology Officer, develops and implements our strategy, as well
                                            as monitors systems and devices for risks and threats.

We
regularly review and update our policies, procedures, processes and practices to address changes in the threat landscape and as a result
of lessons learned from suspected, actual or simulated incidents. We also conduct tabletop exercises and engage third party services
to conduct evaluations of our security controls through penetration testing and independent audits. We also review industry best practices
to assist in evaluating responses to new challenges and risks. These evaluations include testing both the design and operational effectiveness
of security controls.

Cybersecurity
Risks

While we dedicate resources and
efforts to our cybersecurity program, we may be unable to successfully identify threats, prevent attacks, satisfactorily resolve cybersecurity
incidents, or implement adequate mitigating controls. Any breach of our network security and information systems or other cybersecurity-related
incidents that results in, or may result in, the loss, theft or unauthorized disclosure of data, or any delay in determining the full
extent of a potential breach, could have a material adverse impact on our business, results of operations, and financial condition, including
harm to our reputation and brand, reduced demand for our solutions, time-consuming and expensive litigation, fines, penalties, and other
damages. To date and except as otherwise may be noted in this Annual Report, we do not believe that any cybersecurity threats, including
as a result of any previous cybersecurity incidents have materially affected, or are reasonably likely to materially affect the Company,
including its business strategy,