Company: SLNH
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001641172-25-001756
Chunk: 300

Company: Soluna Holdings, Inc
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 300
---
 bolstering monitoring and alert capabilities, and consulting with expert advisors. On the
management front, our IT security team diligently oversees alert systems and routinely convenes to evaluate current threat levels, analyze
trends, and strategize effective remediation methods.

In
addition to assessing our own cybersecurity preparedness, we also consider and evaluate cybersecurity risks associated with the use of
third-party vendors and service providers. The internal business owners of the hosted applications are required to review user access
at least annually and provide a System and Organization Controls (“SOC”) 1 or SOC 2 report from the vendor. If a third-party
vendor is unable to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our
relationship on that basis.

Governance

Under
the direction of the Company’s Chief Technology Officer (“CTO”) and Director of Information Technology, with oversight
from the Board, we maintain a security governance structure to evaluate and address cyber risk. The CTO and the Director of IT are responsible
for developing and implementing our information security program. Our CTO is an Executive Sponsor of the Cyber Security Program and has
over a decade of experience in the Defense sector working directly with technology-driven Operational Security. 

The
Director of IT regularly oversees the Company’s cybersecurity program. This comprehensive review includes examining management’s
initiatives to identify and detect potential threats, outlining planned responses and recovery strategies for potential incidents, evaluating
recent improvements made to the Company’s security detection and response capabilities, and assessing management’s advancement
along the cybersecurity strategic roadmap. The internal IT team also subscribes to various threat intelligence services to evaluate our
security strategy or defense mechanism against such threats.

42

Our
board of directors has ultimate oversight of our strategic and business risk management and, as such, has oversight responsibilities
for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation with law enforcement,
and related effects on financial and other risks. Management is responsible for identifying, assessing, and managing material cybersecurity
risks on an ongoing basis, establishing and updating processes to ensure such potential risks are monitored, putting in place appropriate
mitigation measures, and will be providing regular reports on cybersecurity trends and risks, and should they arise, any material incidents
with our board of directors.

Item
2: Properties

We
lease approximately 3,478 square feet of office, in Albany, New York, which houses the corporate offices of SHI. The current lease agreement