Company: SWAGW
Filing Date: 2025-01-22
Form Type: 10-K/A
Source: 0001213900-25-005516
Chunk: 75

Company: Stran & Company, Inc.
Filing Date: 2025-01-22
Form: 10-K/A
Chunk 75
---
 to avail ourselves of this or other exemptions from Nasdaq requirements that are or may be afforded to smaller reporting companies while our shares and warrants are listed on Nasdaq, in the future we may elect to rely on any or all of these exemptions. By electing to utilize any such exemptions, our company may be subject to greater risks of poor corporate governance, poorer management decision-making processes, and reduced results of operations from problems in our corporate organization. Consequently, if we were to avail ourselves of these exemptions, the prices of our securities might suffer, and there is no assurance that we would be able to continue to meet all continuing listing requirements of Nasdaq from which we would not be exempt, including minimum stock price requirements. ITEM 1B. UNRESOLVED STAFF COMMENTS. Not applicable. ITEM 1C. CYBERSECURITY. Risk Management and Strategy The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. We have developed the following processes as part of our strategy for assessing, identifying, and managing material risks from cybersecurity threats. Managing Material Risks & Integrated Overall Risk Management Information technology is important to our business operations and we are committed to protecting the privacy, security and integrity of our data, as well as our employee and customer data. This program is integrated into the Company’s overall enterprise risk management process. We monitor and update our information technology networks and infrastructure to prevent, detect, address and mitigate risks associated with unauthorized access, misuse, computer viruses and other events that could have a security impact. Additionally, to protect and secure sensitive data such as customer information, we employ multi-factor authentication, a suite of security tools, systems monitoring and alerting, audit logs, and controls across our major systems, corporate devices, and business processes. Our cybersecurity process is designed to assess, identify, prevent, and manage cybersecurity risks and threats, as well as identify, contain and respond to cybersecurity incidents. This process includes a variety of activities, such as company-wide security awareness training, including regular phishing simulations, acceptable use training, self-assessments, and other targeted training throughout the year as appropriate. These cybersecurity trainings provide employees the opportunity to gain an understanding of the various forms of cybersecurity incidents and enable our employees to handle and report any suspicious activity or threat. To date, our approach to cybersecurity has been effective in protecting the confidentiality, integrity, and availability of our information; however, we cannot guarantee that its efforts will be successful