Company: FEBO
Filing Date: 2025-05-14
Form Type: 20-F
Source: 0001641172-25-010075
Chunk: 17

Company: Fenbo Holdings Ltd
Filing Date: 2025-05-14
Form: 20-F
Item: Item 3
Chunk 17
---
 our third-party service providers for certain purposes. We may also share relevant personal
data where it is lawful to do so and necessary to comply with our contractual obligations or your instructions, or where it is
necessary or desirable to do so in connection with any regulatory reporting obligations. In exceptional circumstances, we will share
your personal data with regulatory, prosecuting and other governmental agencies or departments, and with parties to litigation
(whether pending or threatened) in any country or territory, including to any other person where we have a public or legal duty to
do so (e. g., to assist with detecting and preventing fraud, tax evasion and financial crime or compliance with a court order).

A cyberattack, security breach or other unauthorized
access or interruption to our information technology systems or those of any third-party service providers could harm our reputation and
subject us to significant liability.

We are fully aware that cybersecurity
threats, privacy breaches, insider threats or other incidents and malicious internet-based activity continue to increase, evolve in nature
and become more sophisticated. Information security risks for companies such as ours have significantly increased in recent years in part
because of the proliferation of new technologies, the use of internet and telecommunications technologies to conduct financial transactions
and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties, as well as nation-state
and nation-state-supported actors. Many companies that provide services similar to ours have also reported a significant increase in cyberattack
activity since the beginning of the Covid-19 pandemic.

  13  

On April 16, 2024, our Board of
Directors approved the authorization of an amendment to the Company’s Audit Committee Charter (the “ Audit Committee Charter”)
pursuant to which it adopted a cybersecurity policy (the “ Cybersecurity Policy”) and further approved that the Audit Committee
will have full authority and powers to implement the Cybersecurity Policy. The Audit Committee Charter provides the members of the Audit
Committee with authorization and authority to conduct continuous analysis of and review for any potential cybersecurity risks as part
of the Company’s overall risk management program and to create a cyber-resilient organization, which will contribute to the value
preservation of the Company. The Audit Committee Charter further provides authority and responsibility to the members of the Audit Committee
to: (i) understand the economic drivers and impact of cyber risk, including the financial impact to our Company; (ii) align cyber-risk
management policies with the Company’s business needs by integrating cyber-risk analysis into significant business decisions