Company: SATT
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001683168-25-002119
Chunk: 61

Company: SATIVUS TECH CORP.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 61
---
We are a smaller reporting company as defined
in Rule 12b-2 of the Exchange Act and are not required to provide the information required under this item.

Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

Risk Management and Strategy

We recognize the critical importance of developing,
implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity,
and availability of our data. We currently have security measures in place to protect our clients, customers, employees,‌ and vendor
information and prevent data loss and other security breaches. We also only use third party software for accounting, billing and payroll
that have successful SOC 1 type 2 compliance. Both management and the Board are actively involved in the continuous assessment of risks
from cybersecurity threats, including prevention, mitigation, detection, and remediation of cybersecurity incidents.Our current cybersecurity
risk assessment program consists of an annual review of our risks and policies. The program outlines governance, policies and procedures,
and technology we use to oversee and identify risks from cybersecurity threats.

Our
CEO is responsible for overseeing our business operations and are responsible for day-to-day assessment and management of risks from cybersecurity
threats, including the prevention, mitigation, detection, and remediation of cybersecurity incidents. We also use the services of an outside
consulting firm to monitor activity and advise the company of cybersecurity protocols.

 2 

We
routinely undertake activities to prevent, detect, and minimize the effects of cybersecurity incidents, including an annual risk review,
policy reviews and revisions. In addition, we maintain business continuity, contingency, and recovery plans for use in the event of a
cybersecurity incident by the administering of local and cloud based back up of files. and emails.

We engaged and used the advice
of a third-party consultant to help us assess and identify risks from cybersecurity threats, including the threat of a cybersecurity incident,
and manage our risk assessment program. Among other things, these providers have recommended periodic evaluations of the work stations.

We have multiple controls in place
in order to prevent breaches, some of these controls include:

a.FMA/2FA, this is our first AND most important first line of defense, no one should have MFA bypassed or
disabled, with no exceptions.

b.Email Banner for external emails. This banner assists us to identify any phishing / impersonation email
and cannot be bypassed.

c.Conditional Access Policy (CAP): Rejects connections to Exchange Online from un-authorized