Company: FORA
Filing Date: 2025-04-11
Form Type: 10-K
Source: 0001140361-25-013493
Chunk: 3

Company: Forian Inc.
Filing Date: 2025-04-11
Form: 10-K
Item: Item 1C
Chunk 3
---
 Data and Process Enablement plays an important role in the prevention, detection, mitigation, and remediation of cybersecurity incidents and in informing management and our Board of Directors on cybersecurity risks and issues. Regular annual
            assessments include the evaluation of (a) the confidentiality of nonpublic information and the integrity and security of our information systems; (b) cybersecurity policies and procedures; (c) material cybersecurity risks; (d) the effectiveness
            of our cybersecurity program; and (e) any material cybersecurity incidents.

We regularly engage with a range of external experts, including cybersecurity assessors, risk management professionals and other consultants, in evaluating and testing our risk management systems given the complexity and evolving nature of cybersecurity threats. These engagements enable us to leverage specialized knowledge and insights and assist with our goal of maintaining cybersecurity strategies and processes that are consistent with industry best practices.

We are aware of the risks associated with third-party service providers and have implemented policies and processes to oversee and assist with managing these risks. Our management team evaluates third-party providers before engagement and monitors these providers on an ongoing basis commensurate with the level of risk and complexity of the relationship with, and the activities performed by, such providers. This approach is designed to help identify and mitigate risks related to data breaches or other cybersecurity incidents originating from third-parties in order to better protect our assets and data.

We have not encountered cybersecurity threats or incidents that have materially and adversely affected, or are reasonably likely to materially and adversely affect, our business strategy, results of operations or financial condition. Notwithstanding the defensive approach we
              take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While we maintain cybersecurity insurance, the costs related to cybersecurity threats,
              incidents or disruptions may not be fully insured. For more information regarding the risks we face from cybersecurity threats, see “Item 1A. Risk Factors –Security breaches and
                unauthorized use of our systems and information could expose us, our customers, our data suppliers or others to risk of loss.”