Company: AEMD
Filing Date: 2025-06-26
Form Type: 10-K
Source: 0001683168-25-004780
Chunk: 82

Company: AETHLON MEDICAL INC
Filing Date: 2025-06-26
Form: 10-K
Item: Item 1
Chunk 82
---
 our
company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which in turn could cause our stock
price or trading volume to decline.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 1C. CYBERSECURITY

Risk management and strategy

We have implemented and maintain
various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical
computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual
property, confidential information that is proprietary, strategic or competitive in nature, information related to our clinical trials,
and information of our employees, or Information Systems and Data.

The Company’s Chief
Financial Officer, with assistance from our third-party cybersecurity vendors, is responsible for identifying, assessing, and managing
our cybersecurity threats and risks. Together, they identify and assess risks from cybersecurity threats by monitoring and evaluating
our threat environment using various methods including, for example, automated tools, evaluating our and our industry’s risk profile,
conducting real-time monitoring of certain systems, and implementing escalation protocols with our third-party cybersecurity vendors.

 47 

Depending on the environment,
we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage
and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example: an incident response
plan; incident detection and response tools; encryption of certain sensitive data and certain data on mobile systems; certain access controls
enforcing the principle of need-to-know encryption of certain sensitive data and certain data on mobile systems; physical security measures;
asset management, tracking and disposal; monitoring of certain systems; and employee training.

Our assessment and management
of material risks from cybersecurity threats are integrated into our overall risk management processes. For example, cybersecurity risk
is addressed through our quality management system and processes and overseen by our audit committee of the board of directors. We use
third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats,
including, for example, professional services firms, including legal counsel and certain cybersecurity service providers.

We
use third-party service providers to perform a variety of functions throughout our business, such as hosting companies and contract research
organizations. We have a vendor management program to manage cybersecurity risks associated with our use of these providers. The program
includes conducting a risk assessment for certain vendors.

For a description of