Company: RETO
Filing Date: 2025-05-09
Form Type: 20-F
Source: 0001213900-25-041195
Chunk: 41

Company: ReTo Eco-Solutions, Inc.
Filing Date: 2025-05-09
Form: 20-F
Item: Item 16K
Chunk 41
---
Item 16K. Cybersecurity

The Company has established
and maintains a cybersecurity risk management policy, mainly comprising procedures and regulations for website and email security and
management, responsibilities and authorities for relevant departments, and rewards and penalties measures aimed at mitigating risks. This
policy is
integrated
into the Company’s overall risk management system and processes, and is managed and enforced internally. The
General Manager’s Office is tasked with the supervision and management of emails, networks and websites.

Risk assessments are conducted
periodically or adjusted based on evolving business needs, covering risks that could hinder the Company’s objectives and those specifically
related to data security compromises. Each identified risk is evaluated based on its impact and likelihood of occurrence, with high-scoring
risks receiving prompt attention. Risks are analyzed to determine whether they meet the Company’s risk acceptance criteria for toleration
or require a mitigation plan.

Cybersecurity threat oversight
is led by the Chief Executive Officer, supported by the Chief Technology Officer, who is responsible for providing solutions if any cybersecurity
incidents occur.

Theaudit committeeis responsible
for overseeing cybersecurity and monitoring risks. Management regularly updates the audit committee on these risks during committee meetings.

As of the date of this annual
report, there arenosignificant cybersecurity threats known to materially affect or are reasonably likely to materially affect the Company,
including its business strategy, financial condition, or operational results.

PART III