Company: KARO
Filing Date: 2025-06-09
Form Type: 20-F
Source: 0001213900-25-052372
Chunk: 180

Company: Karooooo Ltd.
Filing Date: 2025-06-09
Form: 20-F
Item: Item 16K
Chunk 180
---
 availability of the information that
we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents
when they occur.

We regularly engage in network
and endpoint monitoring, vulnerability assessments, threat hunting and penetration testing. Data collected from these activities informs
our response and action, as appropriate. This includes routinely performing incident simulations and recovery exercises at both a technical
and management level.

All staff receive annual cybersecurity
awareness training. Our security training, incorporates awareness of cyber threats (including but not limited to malware, ransomware,
and social engineering attacks), password hygiene and incident reporting processes. We incorporate external expertise and reviews in all
aspects of our program, which includes the ongoing certification of the Group to the ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018 information
security standards.

Access to personal data is restricted in accordance with
applicable Data Protection legislation and monitored in conjunction with appointed Data Protection Officers.

As at the date of this annual
report, cybersecurity threats, including as a result of any previous cybersecurity incidents, havenot materially affectedour business,
results of operations or financial conditions. We face risks from cybersecurity threats that, if realized, could have a material adverse
effect on us including an adverse effect on our business, financial condition and results of operations. See Also “ Risks Factors
 - Risks Relating to Our Intellectual Property, Data Privacy and Cybersecurity.”

Item 17. FINANCIAL STATEMENTS