Company: SWAGW
Filing Date: 2025-04-14
Form Type: 10-K
Source: 0001213900-25-031596
Chunk: 385

Company: Stran & Company, Inc.
Filing Date: 2025-04-14
Form: 10-K
Item: Item 1B
Chunk 385
---
ITEM 1B. UNRESOLVED STAFF COMMENTS. 

Not applicable.

38

 ITEM 1C. CYBERSECURITY.

Risk Management and Strategy

The Company recognizes the critical importance
of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality,
integrity, and availability of our data. We have developed the following processes as part of our strategy for assessing, identifying,
and managing material risks from cybersecurity threats.

Managing Material Risks & Integrated
Overall Risk Management

Information technology is important to our business
operations and we are committed to protecting the privacy, security and integrity of our data, as well as our employee and customer data.
 This program is integrated into the Company’s overall enterprise risk management process.

We monitor and update our information technology
networks and infrastructure to prevent, detect, address and mitigate risks associated with unauthorized access, misuse, computer viruses
and other events that could have a security impact. Additionally, to protect and secure sensitive data such as customer information, we
employ multi-factor authentication, a suite of security tools, systems monitoring and alerting, audit logs, and controls across our major
systems, corporate devices, and business processes. Our cybersecurity process is designed to assess, identify, prevent, and manage cybersecurity
risks and threats, as well as identify, contain and respond to cybersecurity incidents. This process includes a variety of activities,
such as company-wide security awareness training, including regular phishing simulations, acceptable use training, self-assessments, and
other targeted training throughout the year as appropriate. These cybersecurity trainings provide employees the opportunity to gain an
understanding of the various forms of cybersecurity incidents and enable our employees to handle and report any suspicious activity or
threat.

To date, our approach to cybersecurity has been
effective in protecting the confidentiality, integrity, and availability of our information; however, we cannot guarantee that its efforts
will be successful in preventing all cybersecurity incidents. Further, we currently maintain a cyber insurance policy that provides coverage
for security breaches; however, such insurance may not be sufficient in type or amount to cover us against claims related to security
breaches, cyber-attacks and other related breaches.

Engaging Third Parties on Risk Management

Recognizing the complexity and evolving nature
of cybersecurity threats, we leverage the expertise of a managed service provider, and when warranted will engage with independent third
parties in evaluating and testing our risk management systems. These service providers enable us to leverage specialized knowledge and
insights, ensuring our