Company: FORA
Filing Date: 2025-04-11
Form Type: 10-K
Source: 0001140361-25-013493
Chunk: 2

Company: Forian Inc.
Filing Date: 2025-04-11
Form: 10-K
Item: Item 1C
Chunk 2
---
Item 1C.

                  Cybersecurity

We believe that a strong cybersecurity program is vital to effective cybersecurity risk management. Since our formation, we have prioritized the implementation and maintenance of robust cybersecurity measures to help safeguard sensitive information and our business operations and to protect the confidentiality, integrity and availability of our information systems and the nonpublic information transmitted, processed and stored on our systems or those of third-party service providers.

Our Board of Directors is responsible
            for overseeing our cybersecurity program and includes members with diverse skills and experience, including risk management, technology and finance, which the Board considers to be helpful in overseeing cybersecurity risks. Our Board of
            Directors regularly assesses material developments with respect to the risks from cybersecurity threats in connection with its evaluation of our business operations on a quarterly basis. Our Board of Directors has established oversight
            mechanisms that are intended to promote effective governance in managing risks associated with cybersecurity threats in recognition of the significance these threats present to our operational integrity and the information stored on our and our
            third-party providers’ information systems.

Our Vice President of Data and Process Enablement provides management with information regarding our cybersecurity program and potential cybersecurity threats or incidents, which information is then provided to our Board of Directors as required. In addition, our Vice President of Data and Process Enablement is empowered to escalate material cybersecurity threats or incidents and strategic risk management decisions to the Board of Directors so that they can provide appropriate oversight and guidance on these critical cybersecurity issues within the context of our overall strategic objectives and business operations.

Our management team is responsible for ensuring that we have appropriate policies and procedures in place to help identify, measure, monitor and control potentially significant business risks. In connection with these responsibilities, our management team meets regularly to assess our information technology policies and review the architecture of our information system infrastructure in the management of cybersecurity related risks to our business.

            22

              Table of Contents

Our

            management works closely with their information technology and security counterparts to evaluate and address cybersecurity threats in alignment with our business objectives and operational needs. We also maintain an enterprise-wide information
            systems security program that applies to all employees. All employees are expected to assist in safeguarding our information systems and to assist in the discovery and reporting of cybersecurity incidents. This program is intended to identify
            and assess internal and external cyber and information security risks that may threaten the security or integrity of nonpublic information stored on our and our third-party providers’ information systems from unauthorized access, use or other
            malicious acts.

Additionally, our Vice President of