Company: HVIIR
Filing Date: 2025-12-23
Form Type: S-4
Source: 0001493152-25-029121
Chunk: 92

Company: Hennessy Capital Investment Corp. VII
Filing Date: 2025-12-23
Form: S-4
Chunk 92
---
 lead to data leakage. In particular, ransomware attacks could result in prolonged operational outages across ONE Nuclear’s energy infrastructure, delay site commissioning, or trigger fail-safe shutdowns of critical systems. More sophisticated attack vectors, such as spear phishing, credential stuffing, and deepfake-based social engineering, may further undermine ONE Nuclear’s ability to detect and prevent compromise. These disruptions could materially affect its ability to fulfill off-taker and customer obligations and meet development milestones. ONE Nuclear will not be able to anticipate, detect, or prevent all cyberattacks, particularly as attackers adapt methods to evade detection and exploit zero-day vulnerabilities. Additionally, some cyber incidents, including surveillance, data exfiltration, or deepfake impersonation, may go undetected for extended periods.

| 59 |

As a public company, ONE Nuclear will also be subject to the cybersecurity disclosure and incident reporting requirements adopted by the SEC, which may increase the cost and complexity of its compliance efforts and expose ONE Nuclear to additional scrutiny in the event of a cyber incident.

Additionally, ONE Nuclear’s board of directors will be responsible for overseeing the adequacy of management’s conduct of threat environment and vulnerability assessments, management of cyber incidents, pursuit of projects to strengthen internal cyber security and the cyber security of ONE Nuclear’s operations teams to evaluate the cyber security implications of its products and offerings, and coordination of efforts to monitor, detect, and prevent future cyber threats. In addition, the board of directors, or a duly authorized committee thereof, will annually review ONE Nuclear’s risk profile with respect to cybersecurity matters. To the extent that any disruption or security breach were to result in a loss of, or damage to, ONE Nuclear’s data or applications, or inappropriate disclosure of confidential or proprietary information, ONE Nuclear could incur liability and reputational damage and the further development and commercialization of its projects could be delayed. ONE Nuclear may also be required to expend significant additional capital or operating costs to investigate and remediate vulnerabilities, strengthen controls, or comply with evolving cybersecurity regulations.

ONE Nuclear will be required to continuously upgrade cybersecurity controls, test defenses, and maintain redundancy and isolation protocols. Any failure could materially impair its operations or partner relationships. ONE Nuclear expects to maintain cybersecurity insurance, but such coverage may not be adequate to cover all losses. Certain consequential or reputational damages may not be insurable, and ONE Nuclear may be required to self-fund recovery efforts, litigation costs, and regulatory penalties. As cyberattacks increase globally in frequency and severity, the cost of such insurance may increase and availability of such insurance may also