Company: BFRG
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001493152-25-010367
Chunk: 229

Company: BullFrog AI Holdings, Inc.
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1B
Chunk 229
---
Not
applicable.

ITEM 1C. CYBERSECURITY

We
have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated
these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats,
including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on
the confidentiality, integrity, or availability of our information systems or any information residing therein.

 22 

We
conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our
business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include
identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such
risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.

Following
these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address
any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing,
monitoring and managing our cybersecurity risks rests with our Chief Information Officer who reports to our Chief Executive Officer,
to manage the risk assessment and mitigation process.

We
engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design
and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service
provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws,
to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach
of its security measures that may affect our company.

We
have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.

Governance

Our
board of directors addresses the Company’s cybersecurity risk management as part of its general oversight function. The board of
directors’ audit committee is responsible for overseeing Company’s cybersecurity risk management processes, including oversight
and mitigation of risks from cybersecurity threats.

Our
cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information
technology team at the direction of our Chief Information Officer. Our executive team, including our Chief Executive Officer and Chief
Financial Officer, are responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the
Company’s overall risk management strategy,