BAIYU Holdings, Inc. 10-K Cybersecurity GRC - 2024-03-22

Page last updated on April 11, 2024

BAIYU Holdings, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-22 16:46:47 EDT.

Filings

10-K filed on 2024-03-22

BAIYU Holdings, Inc. filed an 10-K at 2024-03-22 16:46:47 EDT
Accession Number: 0001213900-24-025189

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Information technology systems, including our website, email system, and various other online processes and functions, are critical to our business and operations. The Company faces risks associated with cybersecurity, including operational interruptions, financial losses, personal information leakage and non-compliance risks. For additional details on risks from cybersecurity threats, please refer to Item 1A. Risk Factors We are subject to a variety of laws and regulations regarding cybersecurity and data protection, and any failure to comply with applicable laws and regulations, including improper use or appropriation of personal information provided directly or indirectly by our customers or end users, could have a material adverse effect on our business, financial condition and results of operations. We employed email correspondence anti-leakage software and firewall system to our website. We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. Nevertheless, the changes in our business and operations may impact our cybersecurity program in the future. We will leverage internal and external resources to support our cyber risk management efforts, such as vulnerability assessments, and employee cybersecurity awareness training. We will engage the services of external information security service providers to help support our information technology environment, assist with security monitoring, and help us draft and implement information security policies when necessary and/or appropriate. Further, we will utilize third parties to help us monitor issues that are internally discovered or externally reported that may materially affect our website and email systems, and we have processes to assess the potential cybersecurity impact or risk of these issues. The Audit Committee of our Board of Directors (the Audit Committee ) oversees risks pertaining to cybersecurity. The Chief Operating Officer regularly reports to the Audit Committee, and directly to the Board of Directors, as appropriate, on the state of our cybersecurity program and provides updates on cybersecurity matters.

Company Information