Company: FLDDW
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0001013762-25-004107
Chunk: 319

Company: Fold Holdings, Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1A
Chunk 319
---
-party experts and service providers, where considered
                                            appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls;

●annual
                                            cybersecurity and privacy training of employees, including incident response personnel and
                                            senior management, and specialized training for certain teams depending on their role and/or
                                            access to certain types of information, such as consumer information; and

●a third-party risk management process that includes internal vetting of certain third-party vendors and service providers with whom we may share data.

67

Over the past fiscal year, we have not identified material risks from
known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our operations,
business strategy, operating results, or financial condition. We will continue to monitor and assess our cybersecurity risk management
program as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a material cybersecurity
incident in the future, such incident may have a material effect, including on our operations, business strategy, operating results, or
financial condition. For more information regarding cybersecurity risks that we face and potential impacts on our business related thereto,
see the section titled “Risk Factors” in Part I, Item 1A of this Annual Report.

Cybersecurity Governance

With oversight from our board of directors, the Audit Committee is
primarily responsible for assisting our board of directors in fulfilling its ultimate oversight responsibilities relating to risk assessment
and management, including relating to cybersecurity and other information technology risks. The Audit Committee oversees management’s
implementation of our cybersecurity risk management program, including processes and policies for determining risk tolerance, and reviews
management’s strategies for adequately mitigating and managing identified risks, including risks relating to cybersecurity threats.

The Audit Committee receives updates from members of management, including
the Chief Technology Officer and VP Risk & Compliance, on our cybersecurity risks at its quarterly meetings, and reviews metrics about
cyber threat response preparedness, program maturity milestones, risk mitigation status, and the current and emerging threat landscape.
In addition, management updates the Audit Committee, as necessary, regarding any material cybersecurity threats or incidents, as well
as any incidents with lesser impact potential.

The Audit Committee reports to our board of directors regarding its
activities, including those related to key cybersecurity risks, mitigation strategies, and ongoing developments, on a quarterly basis
or more frequently as needed. The board of directors also receives updates from management on our cyber risk management program and other
matters relating to our data privacy and cybersecurity approach,