Company: NTWK
Filing Date: 2025-09-29
Form Type: 10-K
Source: 0001493152-25-015950
Chunk: 238

Company: NETSOL TECHNOLOGIES INC
Filing Date: 2025-09-29
Form: 10-K
Item: Item 1A
Chunk 238
---
 cybersecurity risk management program is designed to help coordinate the Company’s identification
of response to and recovery from cybersecurity incidents across all consolidated entities. This includes rapid identification, assessment,
investigation and remediation of incidents, as well as complying with applicable legal obligations, communicated promptly and effectively.

Our
internal audit team assesses regularly the effectiveness of our internal controls relating to cybersecurity and updates as necessary.
Our management team also engages, at times when needed, certain outside advisors and consultants to assist in the identification, oversight,
evaluation and management of cybersecurity risks, as well as to advise on specific topics. As part of our overall risk mitigation strategy,
the Company also maintains cyber insurance coverage; however, such insurance may not be sufficient in type or amount to cover us against
claims related to security breaches, cyberattacks and other related breaches.

We
have various processes and procedures in place to evaluate cybersecurity threats associated with third parties. We have not identified
any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, performance,
results of our operations, or financial condition.

Cybersecurity
Governance and Oversight

The
Company’s cybersecurity risk management program is supervised by our Senior Manager of Information Security (SMIS), who reports
directly to the Company’s Chief Operating Officer (“COO”) in Pakistan. The SMIS and his team are responsible for leading
enterprise-wide cybersecurity strategy, policy, standards, architecture and processes. Our current SMIS received his bachelor’s
in computer sciences and has over 20 years of cybersecurity experience, including relevant prior senior leadership experience at our
Company. Furthermore, he has also achieved globally recognized information security certifications, including CISSP (Certified Information
Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CRISC (Certified
in Risk and Information Systems Control), CompTIA Security+, ISO 27001 Lead Auditor, CEH (Certified Ethical Hacker), CHFI (Computer Hacking
Forensic Investigator), among others.

The
SMIS attends and is invited to all Company Cybersecurity Committee meetings, a cross-functional management committee that drives awareness,
ownership and alignment across broad governance for effective cybersecurity risk management. The Cybersecurity Committee is composed
of senior leaders from our legal, information technology, cybersecurity, and audit sections. Subject matter experts are also invited,
as appropriate. The Cybersecurity Committee meets at least quarterly and has responsibility for oversight and validation of the Company’s
cybersecurity strategic direction, risks