Company: XAIR
Filing Date: 2025-06-20
Form Type: 10-K
Source: 0001641172-25-015750
Chunk: 616

Company: Beyond Air, Inc.
Filing Date: 2025-06-20
Form: 10-K
Item: Item 1
Chunk 616
---
 resulting
in supply disruption, or cause delays in payments for our services by third-party payors or our collaborators. Any of the foregoing could
harm our business and we cannot anticipate all of the ways in which the current economic climate and financial market conditions could
adversely impact our business.

72

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 1C. CYBERSECURITY

We rely on sophisticated information
technology systems and network infrastructure to operate and manage our business. We also maintain personally identifiable information
(“PII”) about our employees, and given the nature of our business, we have access to protected health information (“PHI”).
Our business therefore depends on the continuous, effective, reliable, and secure operation of our computer hardware, software, networks,
Internet servers, and related infrastructure. To the extent that our hardware or software malfunctions or access to our data by internal
personnel, suppliers or customers through the Internet is interrupted or compromised, our business could suffer.

The integrity and protection of
our customer, personnel, financial, research and development, and other confidential data is critical to our business, and our customers
and employees have a high expectation that we will adequately protect their personal information. The regulatory environment governing
information, security and privacy laws is increasingly demanding and continues to evolve and a number of states have adopted laws and
regulations that may affect our privacy and data security practices regarding the use, disclosure and protection of PII. For example,
the California Consumer Privacy Act (“the CCPA”), among other things, creates individual privacy rights and imposes increased
obligations on companies handling PII.

Although our computer and communications
hardware are protected through physical and software safeguards, they are still vulnerable to system malfunction, computer viruses, malware
and ransomware, and other cybersecurity threats such as phishing and social engineering attacks. These events could lead to unauthorized
access to our information technology systems and result in financial loss and the misappropriation or unauthorized disclosure of confidential
information belonging to us, our employees, partners, customers, or suppliers. The techniques used by criminal elements to attack computer
systems are sophisticated, change frequently and may originate from less regulated and remote areas of the world. As a result, we may
not be able to address these techniques proactively or implement adequate preventative measures. If our information technology systems
are compromised, we could be subject to fines, damages, litigation and enforcement actions, incur financial losses, suffer reputational
damage, and