Company: BNRG
Filing Date: 2025-03-04
Form Type: 20-F
Source: 0001213900-25-020178
Chunk: 87

Company: Brenmiller Energy Ltd.
Filing Date: 2025-03-04
Form: 20-F
Item: Item 16K
Chunk 87
---
 we vet third-party service providers. This includes periodic evaluations of their cybersecurity protocols, a
strategy that effectively mitigates potential risks associated with these external entities.

Although no past cybersecurity
incidents have materially impacted our business strategy, operations, or financial condition, we proactively incorporate potential cybersecurity
risks into our risk management framework. This precautionary measure ensures our readiness to address any emergent threats, thereby maintaining
the resilience and integrity of our business.

Through continuous assessment
and improvement, guided by international standards and the expertise of a dedicated team, we are committed to addressing cybersecurity
to maintain the trust and confidence of our stakeholders.

As part of our comprehensive
approach to mitigating cybersecurity risks, we implement several key strategies to enhance our digital security posture:

  Annual awareness training is conducted for all employees to ensure they are informed about the latest cybersecurity threats and best practices.  

  We perform a monthly initiated copy of key servers to Bren PDM, BrenVeeam, Vcenter disks, housed in a secure, fireproof safe that offers redundancy protection against physical damage.  
 ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

  The IT department has taken steps to ensure data is doubly safeguarded through these measures.                                            
  We have integrated the LANSWEEPER system to continuously monitor and safeguard hardware and software across all of our network segments.  

  Kaspersky antivirus blocks have been deployed via the DOK system for an added layer of security.  

Priority (or ERP system) servers are backed up weekly to
a separate offsite location, ensuring that in the event of a data loss, we can recover up to a month’s worth of data, maintaining our
operational integrity and mitigate against potential cybersecurity threats.

We engage in the periodic
assessment and testing of our policies, standards, and processes that are designed to address cybersecurity threats and incidents. These
efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing,
and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. We regularly engage
third parties
to perform assessments on our cybersecurity measures, including information security maturity assessments, audits and independent reviews
of our information security control environment and operating effectiveness. The results of such assessments, audits and reviews are reported
to our board of directors, and we adjust our cybersecurity policies, standards, processes and practices accordingly.

Governance

Our board of directors oversees
our