Company: FEBO
Filing Date: 2025-05-14
Form Type: 20-F
Source: 0001641172-25-010075
Chunk: 164

Company: Fenbo Holdings Ltd
Filing Date: 2025-05-14
Form: 20-F
Item: Item 16K
Chunk 164
---
Item 16K. Cybersecurity

The Company
has adopted a Cybersecurity Policy governing the establishment and application of certain procedures and safeguards to identify potential
cybersecurity risks and, in the event of a cybersecurity breach, the protocol for disclosing to the Securities and Exchange Commission,
including possible remedies. We review cybersecurity risk as part of our overall risk-management program. This ensures that cybersecurity
risk management remains a meaningful priority in our business strategy and operations. Our risk management strategy for cybersecurity
generally includes:

  Identification: We aim to proactively identify the manners in which our business could be materially impacted by cybersecurity risks including:  

  Cybersecurity Incidents - an unauthorized occurrence on or conducted through its information system that jeopardizes the confidentiality, integrity or availability of its information systems or...  
  Cybersecurity Threats - any potential occurrence that may result in an unauthorized effort to adversely affect the confidentiality, integrity, or availability of its information systems or any ...  

  97  

  Assessment: We periodically assess our risks relating to cybersecurity threats, including risks relating to our reliance on third parties. In so doing, we consider the likelihood and impact tha...  
  Management: If deemed appropriate, we design and implement reasonable safeguards to address any identified gaps in our existing processes and procedures, including annual cybersecurity awarenes...  
  Evaluation: If a cybersecurity breach occurs, the Audit Committee will determine whether the Incident or Threat is “material” (i.e., whether there is a substantial likelihood that a reasonable ...  
  Report: Establish and monitor an incident response approach requiring our Chief Financial Officer to report to us, the full Board of Directors and legal counsel any cybersecurity concerns or ev...  
  Disclosure: To ensure compliance with SEC requirements and maintain overall stakeholder confidence in the Company, all material and known facts regarding the cybersecurity breach will be record...  

We presently
do not engage third parties to assist with evaluating the effectiveness of our risk-management and cybersecurity practices. The Company
did not have any material cybersecurity breaches during the year ended December 31, 2024.

The Audit
Committee of our Board of Directors is the governance body involved in, and ultimately responsible for, cybersecurity oversight. They
will generally coordinate with our Chief Financial Officer in this regard. If needed, the full Board would be updated on cybersecurity
risks and incidents.
None of our directors on the Audit Committee nor our Chief Financial Officer have particular experience in cybersecurity
matters.

  98  

PART III