Company: AVCRF
Filing Date: 2025-06-16
Form Type: 20-F
Source: 0001641172-25-015266
Chunk: 57

Company: Avricore Health Inc.
Filing Date: 2025-06-16
Form: 20-F
Item: Item 16K
Chunk 57
---
ITEM
16K. CYBERSECURITY

Cybersecurity
Risk Management and Strategy

Cybersecurity
risk management is an integral part of Avricore Health Inc.’s enterprise risk management framework, implemented through our operating
subsidiary, HealthTab Inc. Our approach aligns with industry standards, including the National Institute of Standards and Technology
(NIST) Cybersecurity Framework (CSF), to effectively manage cybersecurity threats and incidents, including those related to third-party
applications and services.
Our
framework includes:
Assessing the severity of cybersecurity threats
Identifying the sources of cybersecurity threats
Implementing countermeasures and mitigation strategies
Reporting material cybersecurity threats and incidents to management
47
Processes
for Assessing, Identifying, and Managing Material Risks from Cybersecurity Threats
(i) Integration
Cybersecurity
risk management is integrated into our broader risk management system. Regular risk assessments and business impact analyses are conducted
to identify critical systems, applications, and data, as well as potential disruptions and their consequences. The Information Security
Officer (ISO) at HealthTab Inc. conducts these assessments, which inform the development of contingency plans including redundancy, backup
and recovery, alternate site operations, and data restoration.
(ii) Engagement
We
engage third-party
Our third-party
Material
Effects of Cybersecurity Threats
In
the past year, we didnotencounter any cybersecurity threats that materially affected or are likely to materially affect our business
strategy, results of operations, or financial condition.

Cybersecurity
Governance

Board
of Directors’ Oversight

Our
Board of Directors plays a critical role in overseeing cybersecurity risks as part of its broader risk oversight responsibilities. The
Information Security Officer (ISO) at HealthTab Inc. provides the board with updates on cybersecurity risks and incidents. Significant
cybersecurity incidents are reported to the board to ensure appropriate and timely responses.

Management’s
Role in Assessing and Managing Cybersecurity Risks

(i) Management
The
ISO at HealthTab Inc. is responsible for developing and maintaining our cybersecurity and contingency plans, coordinating risk assessments,
and managing incident responses. The ISO has extensive experience in building secure web applications for healthcare. In addition to
the ISO, we engage consultants and DevOps engineers with relevant degrees and certifications to support our cybersecurity efforts. System
Owners are responsible for identifying critical systems, assessing risks, and implementing appropriate security controls.
48
(ii) Processes
We
have established comprehensive processes for continuous monitoring and information sharing.