Company: XTIA
Filing Date: 2025-04-15
Form Type: 10-K
Source: 0001213900-25-032213
Chunk: 71

Company: XTI Aerospace, Inc.
Filing Date: 2025-04-15
Form: 10-K
Item: Item 1
Chunk 71
---
 risk mitigation plan to address such risks, and where necessary, remediate potential vulnerabilities
identified through the annual assessment process.

In
addition, XTI Aerospace maintains policies and procedures over areas such as information security, IT change and configuration management,
acceptable use, access on/offboarding, accounts management, risk management, and data backup and recovery to help govern the processes
put in place by management designed to protect XTI Aerospace’s IT assets, data, and services from threats and vulnerabilities.
XTI Aerospace partners with industry recognized cybersecurity providers leveraging third-party technology and expertise. These cybersecurity
partners to the Company, including consultants and other third-party service providers, are a key part of XTI Aerospace’s
cybersecurity risk management strategy and infrastructure and provide services including, maintenance of an IT assets inventory, periodic
vulnerability testing, identity access management controls including restricted access of privileged accounts, physical security measures
at Company facilities, information protection/detection systems including maintenance of firewalls and anti-malware tools, network and
traffic monitoring and automated alerting, ongoing cybersecurity user awareness training, industry-standard encryption protocols, capacity
management, formalized processes over asset and data destruction, formalized change management processes, data backups management, infrastructure
maintenance, incident response, cybersecurity strategy, and cyber risk advisory, assessment and remediation.

XTI
Aerospace’s management team, with the Executive Vice President of IT Operations in charge of primary oversight, in conjunction
with third-party IT and cybersecurity service providers is responsible for oversight and administration of XTI Aerospace’s cyber
risk management program, and for informing senior management and other relevant stakeholders regarding the prevention, detection, mitigation,
and remediation of cybersecurity incidents. The Company’s management team has prior experience selecting, deploying, and overseeing
cybersecurity technologies, initiatives, and processes directly or via selection of strategic third-party partners, and also relies on
threat intelligence as well as other information obtained from governmental, public or private sources, including external consultants
engaged by XTI Aerospace for strategic cyber risk management, advisory and decision making. Our Executive Vice President of IT Operations
has over 25 years of experience serving in various roles in information technology and information security and has relevant experience
in designing, deploying, and maintaining operations for critical IT systems, cloud infrastructure, virtualization technology, corporate
networks, data protection, privacy, and governance.

XTI
Aerospace has implemented third-party risk management processes to manage the risks associated with reliance on vendors