Company: BCHT
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001477932-25-002237
Chunk: 377

Company: Birchtech Corp.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1B
Chunk 377
---
We are a smaller reporting company as defined by Rule 12b-2 of the Securities Exchange Act of 1934 and are not required to provide the information under this item.

Item 1C. Cybersecurity.

Cybersecurity Risk Management and Strategy

We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. Based on our small size and limited number of employees and consultants, we rely extensively on information technology systems managed by third party major service providers to securely process, store and transmit our data to conduct business. Our employees and consultants utilize end point security tools, such as firewalls and anti-virus protection, to protect our data. To date, we have not engaged any assessors, consultants, auditors or other third parties in connection with our risk management system or processes, and believe that, given our size, our current approach to manage cybersecurity risks is adequate. 

In connection with our use of third-party services providers, we have certain processes in place to oversee and identify cybersecurity risks from threats and incidents.  We are not aware of having experienced any material cybersecurity incidents.  We are not aware of any existent cybersecurity threats that would materially affect, or are reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition.  However, there could be cybersecurity threats or incidents in the future that may adversely affect our business.   For more information, please refer to Part I, Item 1A. “Risk Factors” in this Annual Report on Form 10-K. 

Our overall strategy in combatting known cybersecurity risks includes a variety of individual tactics, including:

 ·the use of antivirus software, virtual private networks, email security, as well as other software to prevent and detect data intrusions.    ·the deployment of updates and patches as they are available and maintaining the current versions of major software to reduce the exposure to vulnerabilities.    ·the review of the security procedures used by third parties that may host or otherwise have access to the Company’s data.    ·if necessary, the use of third-party security experts if and when an incident is detected.

Governance

Our Executive Vice President of Operations oversees risks of cybersecurity threats and will report, as necessary, to the Board of Directors, including promptly reporting any cybersecurity incidents that may pose a significant risk to us. To date, our Executive Vice President of Operations has not had to report any cybersecurity incidents