Company: NCEL
Filing Date: 2025-03-31
Form Type: F-4/A
Source: 0001213900-25-026428
Chunk: 783

Company: NewcelX Ltd.
Filing Date: 2025-03-31
Form: F-4/A
Chunk 783
---
 trust and confidence of our customers, clients, business partners and employees. The audit committee is involved in oversight of our IT general controls and cybersecurity. Our IT general controls cybersecurity policies, standards, processes and practices are fully integrated into our risk management program. In general, we seek to address IT general controls cybersecurity risks through a comprehensive, cross -functionalapproach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. In that regard, we have a comprehensive IT policy that outlines our security risk measures. In addition, we have partnered with a professional IT service provider who specializes in security, endpoint protection, and monitoring. We also operate the “Microsoft Office 365 E3” plan. Annex F-110 Risk Management and Strategy As part of the critical elements of our overall risk management approach, our cybersecurity program is focused on the following key areas: •Governance: As discussed in more detail under the heading “Governance,” the audit committee oversees our cybersecurity risk management and interacts with the Company’s Sarbanes -OxleyAct, or SOX, advisor and the Company’s Information Security advisor and other relevant members of management. •Collaborative Approach: The Company has implemented a comprehensive, cross -functionalapproach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner. •Technical Safeguards: The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti -malwarefunctionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence. •Recovery Planning: The Company has established and maintains comprehensive recovery plans that fully address the Company’s response to a cybersecurity incident, and such plans are tested and evaluated on a regular basis. •Education and Awareness: The Company provides regular, mandatory training for personnel regarding cybersecurity threats as a means to equip the Company’s personnel with effective tools to address cybersecurity threats, and to communicate the Company’s evolving information security policies, standards, processes and practices. We engage in the periodic assessment and testing of our policies, standards, processes and practices that are designed to address cybersecurity threats and incidents. These efforts include a wide range of activities, including audits, assessments, tabletop exercises