Company: VEEAW
Filing Date: 2025-04-15
Form Type: 10-K
Source: 0001213900-25-032215
Chunk: 425

Company: VEEA INC.
Filing Date: 2025-04-15
Form: 10-K
Item: Item 1B
Chunk 425
---
ITEM
                                            1B. UNRESOLVED STAFF COMMENTS.

None.

ITEM
1C. CYBERSECURITY.

We
manage cybersecurity and data protection through a continuously evolving framework, as described in further detail below. The framework
allows us to identify, assess and mitigate the risks we face, and assists us in establishing policies and safeguards to protect our systems
and the information of those we serve.

49

Risk
Management Strategy

The
Company’s cybersecurity risk management program is focused on the following key areas:

●Governance: Our Audit Committee of our Board of Directors has oversight of our cybersecurity program and is in the process of implementing procedures to obtain regular updates on our cybersecurity program, including recent developments, key initiatives to strengthen our systems, applicable industry standards, vulnerability assessments, third-party and independent reviews, and other information security considerations. Our cybersecurity program is led by Mohan Gundu, our Senior Vice President of Engineering and Cloud Platform. Mr. Gundu holds an MBA in Business Administration from Babson College, a Master of Science in Computer Science from Worcester Polytechnic Institute and a Bachelor of Technology in Electronics and Communication from Jawaharlal Nehru Technological University. Mr. Gundu has over 20 years of development experience focused on architecture and security. Mr. Gundu has led transformative projects, cultivated cybersecurity awareness and promoted holistic cybersecurity practices that were aligned with policies defined and approved by management. Mr. Gundu and his team are dedicated to integrating security into development, ensuring robust cloud security, enforcing security policies, and driving shift-left practices with operational excellence at the Company.

●Approach:
                                            We use a cross-functional approach to identifying, preventing, assessing, and mitigating
                                            cybersecurity threats and incidents, while also implementing controls and procedures that
                                            are designed to provide for the prompt escalation of cybersecurity incidents and support
                                            appropriate public disclosure and reporting of incidents as required in a timely manner.
                                            Our cybersecurity efforts include the use of risk-based administrative, technical, and physical
                                            controls. Veea has implemented policies, procedures, systems and tools designed to help safeguard
                                            our systems and data, including firewalls, intrusion detection systems, access controls including
                                            multi-factor authentication, vulnerability scanning, penetration testing, independent third-party
                                            control audits, and other systems and processes.

●Incident
                                            Response Planning: We maintain a breach reporting and resolution plan that includes defined
                                            processes, roles, communications, responsibilities and procedures for responding to cybersecurity
                                            incidents and other events that impact our operations