BioCorRx Inc. - (BICX)

10-K Filing Date: April 01, 2024
Item 1C - Cybersecurity.

 

We have developed and maintain a cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management methodology is integrated into our overall enterprise risk management, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal, compliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have instituted a cybersecurity awareness designed to identify, assess and manage material risks from cybersecurity threats, including by engaging a third-party cybersecurity service provider, which communicates directly with our management and compliance personnel. The cyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and networks, including networks on which we rely. Through our cybersecurity awareness, the current threat landscape is actively monitored in an effort to identify material risks arising from new and evolving cybersecurity threats. We may engage external experts, including cybersecurity assessors, consultants and auditors to evaluate cybersecurity measures and risk management processes as needed. We also depend on and engage various third parties, including suppliers, vendors and service providers in connection with our operations.

 

 
18

 

Our cybersecurity risk management methodology includes:

 

● risk assessments designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;

 

● individuals, including employees and external third-party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;

 

● the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;

 

● a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and

 

● a third-party risk management process for service providers, suppliers, and vendors.

 

We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.

 

Cybersecurity Governance

 

Our Board oversees management’s implementation of our cybersecurity risk management methodology. Our Board receives periodic updates from our Chief Executive Officer and more frequently as needed, regarding the overall state of our cybersecurity preparedness, information on the current threat landscape, and material risks from cybersecurity threats and cybersecurity incidents. The Board and our management team are informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents, including through the receipt of notifications from third-party service providers.

 

Our management team is responsible for assessing and managing our material risks from cybersecurity threats. The team has primary responsibility for developing and maintaining our overall cybersecurity risk methodology and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.]

 

Item 2 - Properties.

 

We do not own any real estate or other physical properties material to our operations. Our executive offices are located at 2390 East Orangewood Avenue, Suite 500, Anaheim, California 92806, and our telephone number is (714) 462-4880. We lease this property. On July 15, 2019, the Company and its landlord agreed that the Company would move to a larger space within the building that currently houses its principal executive offices. The Company extended the term of its lease for an additional 63 months beginning approximately November 1, 2019 (upon the landlord’s completion of the work on the new space). The extended term expires on January 31, 2025. The extended lease has escalating payments from $9,505 per month to $11,018 per month.

 

On June 16, 2020, the Company entered into a lease agreement, whereby the Company agreed to lease office space in Costa Mesa, California for a term of 5 years. Due to COVID-19, the Company was not able to move in or take possession until 30 days after shelter in place has been lifted in Orange County, CA. The Company would owe monthly rental payments ranging from $2,286 to $2,584 over the term of the lease. On September 20, 2020, the Company took possession of the office space. On October 25, 2023, the Company terminated the lease.

 

 
19