HAMMER TECHNOLOGY HOLDINGS CORP. 10-K Cybersecurity GRC - 2025-10-29

Page last updated on October 29, 2025

HAMMER TECHNOLOGY HOLDINGS CORP. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-10-29 15:58:00 EDT.

Filings

10-K filed on 2025-10-29

HAMMER TECHNOLOGY HOLDINGS CORP. filed a 10-K at 2025-10-29 15:58:00 EDT
Accession Number: 0001062993-25-016369

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY To date, the Company has not identified any cybersecurity incidents which have materially affected , or are reasonably likely to materially affect, the Company's business strategy, results of operations or financial condition. The Company is aware of the evolution of cybersecurity risks and is taking proactive steps by keeping up to date our information systems and educating our personnel about these risks. The company maintains a structured cybersecurity risk-management framework focused on identifying, assessing, and mitigating material risks from cybersecurity threats within its digital payments division, HammerPay. HammerPay's platform architecture, which supports regulated payment processing, prepaid merchant card issuance, and digital wallet operations, is continuously monitored to protect customer data and transaction integrity. The Company conducts continuous threat detection, routine penetration testing, and access-control audits, while incident-response protocols are coordinated by the Compliance and IT Security teams. Cybersecurity oversight is an integral component of the Company's enterprise risk-management (ERM) process. Identified threats and mitigation plans are reviewed alongside financial and operational risks. The Chief Compliance Officer (CCO) and Chief Technology Officer (CTO) jointly oversee cybersecurity posture and report quarterly to the Board of Directors. Cybersecurity objectives align with corporate governance and business-continuity strategies. The Company engages independent cybersecurity consultants, auditors, and compliance specialists to validate internal controls, including penetration testing, PCI-DSS and SOC 2 assessments, and KYC/AML compliance audits. Findings are documented, tracked, and reviewed with the Board of Directors. HammerPay's vendor-management program governs all third parties that handle or access sensitive data, including banking partners, cloud providers, and API vendors. Each provider undergoes due diligence, contractual data-protection obligations, and ongoing certification reviews (SOC 2, PCI-DSS). The Company recognizes the importance of developing, implementing, and maintaining cybersecurity measures to safeguard its information systems and protect the confidentiality, integrity , and availability of the data. The Company will be looking to adopt cybersecurity processes, technologies and controls to aid in its efforts to assess, prevent, identify and manage such risks.

Company Information