Company: BIAF
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001641172-25-001840
Chunk: 235

Company: bioAffinity Technologies, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 235
---
 that fact, even if the weakness is quickly remedied, could diminish investors’ confidence
in our financial statements and harm our stock price. In addition, non-compliance with Section 404 could subject us to a variety of administrative
sanctions, including the suspension of trading, ineligibility for future listing on one of the Nasdaq Stock Markets or national securities
exchanges, and the inability of registered broker-dealers to make a market in our Common Stock, which may reduce our stock price.

Item
1B. Unresolved Staff Comments.

None.

 51 

Item
1C. Cybersecurity

We
maintain a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats.

The
underlying processes and controls of the bioAffinity cyber risk management program incorporate recognized best practices and standards
for cybersecurity and information technology, including the National Institute of Standards and Technology (“NIST”) Cybersecurity
Framework (“CSF”).

In
addition, bioAffinity maintains policies over areas, such as information security, access on/offboarding, and access and account management,
to help govern the processes put in place by management designed to protect bioAffinity IT assets, data, and services from threats and
vulnerabilities. bioAffinity partners with industry-recognized cybersecurity providers leveraging third-party technology and expertise.
These cybersecurity partners, including consultants and other third-party service providers, are a key part of bioAffinity’s cybersecurity
risk management strategy and infrastructure and provide services including maintenance of an IT assets inventory, periodic vulnerability
scanning, identity access management controls including restricted access to privileged accounts, network integrity safeguarded by web-based
software, including endpoint protection, endpoint detection and response, and remote monitoring management on all devices, industry-standard
encryption protocols, critical data backups, infrastructure maintenance, incident response, cybersecurity strategy, and cyber risk advisory,
assessment and remediation.

bioAffinity’s
management team, in conjunction with third-party IT and cybersecurity service providers, is responsible for oversight and administration
of the cyber risk management program and informing senior management and other relevant stakeholders regarding the prevention, detection,
mitigation, and remediation of cybersecurity incidents. Our management team has prior experience selecting, deploying, and overseeing
cybersecurity technologies, initiatives, and processes and relies on threat intelligence as well as other information obtained from governmental,
public, or private sources.

The
Audit Committee of the Board of Directors oversees bioAffinity cybersecurity risk exposures and the steps taken by management to monitor