Company: BNRG
Filing Date: 2025-03-04
Form Type: 20-F
Source: 0001213900-25-020178
Chunk: 86

Company: Brenmiller Energy Ltd.
Filing Date: 2025-03-04
Form: 20-F
Item: Item 16K
Chunk 86
---
ITEM 16K. CYBERSECURITY.

Our board of directors recognizes
the critical importance of maintaining the trust and confidence of our customers, business partners and employees. Our board of directors
is guided by stringent regulatory requirements and best practices. Our approach, aligned with the new SEC cybersecurity disclosure requirements
and the ISO 27001 and ISO 27002 standards, encompasses a broad spectrum of activities from incident response and risk management to governance,
compliance documentation, and continuous improvement. We have established a proactive incident identification and evaluation process,
leveraged advanced detection tools and we encourage both internal and external incident reporting. The board of directors is actively
involved in oversight of our risk management program, and cybersecurity represents an important component of our overall approach to risk
management. Our risk management strategy is thorough and dynamic, incorporating annual risk assessments to identify and mitigate potential
cybersecurity threats. Our cybersecurity policies, standards, processes and practices are fully
integrated
into our risk management program
and are based on recognized frameworks established by the Israel National Cyber Directorate (INCD), the International Organization for
Standardization and other applicable industry standards. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional
approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by
identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Risk Management and Strategy

Our cybersecurity risk management
framework is designed to align with our risk management strategy, through adherence to the ISO:27001:2022 and ISO/IEC 27005:2022 information
security, cybersecurity and privacy protection guidance on managing information security risks the standard for information security risk
management. This structured approach facilitates the comprehensive identification, assessment, and mitigation of cybersecurity threats,
underscoring our commitment to protecting our valuable information.

In our risk management structure,
we conduct annual internal risk assessments alongside a significant external evaluation performed by a reputable third party. These internal
assessments are crucial for preemptively identifying and mitigating cybersecurity vulnerabilities, spearheaded by our dedicated cybersecurity
team. Leading this initiative is the vice president of quality assurance/regulatory affairs (VP QA/RA), who holds certifications in ISO
27001, ISO 27002, ISO 27005, and is a qualified auditor. The VP QA/RA is supported by the IT Manager, ensuring a comprehensive and informed
approach to managing cybersecurity risks.

To ensure the integrity of
our operations and data,