Company: NTWK
Filing Date: 2025-09-29
Form Type: 10-K
Source: 0001493152-25-015950
Chunk: 494

Company: NETSOL TECHNOLOGIES INC
Filing Date: 2025-09-29
Form: 10-K
Item: Item 1C
Chunk 494
---
, standards, architecture and processes. Our current SMIS received his bachelor’s
in computer sciences and has over 20 years of cybersecurity experience, including relevant prior senior leadership experience at our
Company. Furthermore, he has also achieved globally recognized information security certifications, including CISSP (Certified Information
Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CRISC (Certified
in Risk and Information Systems Control), CompTIA Security+, ISO 27001 Lead Auditor, CEH (Certified Ethical Hacker), CHFI (Computer Hacking
Forensic Investigator), among others.

The
SMIS attends and is invited to all Company Cybersecurity Committee meetings, a cross-functional management committee that drives awareness,
ownership and alignment across broad governance for effective cybersecurity risk management. The Cybersecurity Committee is composed
of senior leaders from our legal, information technology, cybersecurity, and audit sections. Subject matter experts are also invited,
as appropriate. The Cybersecurity Committee meets at least quarterly and has responsibility for oversight and validation of the Company’s
cybersecurity strategic direction, risks and threats, priorities, and resource allocation. The SMIS and his team, as well as the Cybersecurity
Committee, are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity incidents in accordance
with the Company’s cyber incident response plan.

The
Board of Directors receives regular reports from the SMIS and Cybersecurity Committee on, among other things, the Company’s cyber
risks and threats, the status of projects to strengths of the Company’s information security systems, assessments of the Company’s
security program, insurance, and the emerging threat landscape. In accordance with our cyber incident response plan, the Cybersecurity
committee s promptly informed by SMIS’s team of cybersecurity incidents that could adversely affect the Company or its information
systems and is also regularly updated about incidents with less impact potential. The Board of Directors and Audit committee are informed
of any incidents that could adversely affect the Company by the Cybersecurity committee and SMIS’s team.

10

In
an effort to detect and defend against cyber threats, the Company annually, and, periodically as needed, provides its employees with various cybersecurity and data
protection training programs. These programs cover timely and relevant topics, including social engineering, phishing, password protection,
confidential data protection, asset use and mobile security, and educate employees on the importance of reporting all incidents promptly
to the Company’s centrally managed cyber defense and