MIND CTI (MNDO) Risk Analysis

Our products and services, including our cloud offerings, store, retrieve, and manage our customers' information and data, as well as our own data. We have a reputation for secure and reliable product offerings and related services, and we have invested a great deal of time and resources in protecting the integrity and security of our products, services and the internal and external data that we manage. See Item 16K below. Despite our efforts to implement network security measures, we cannot guarantee that our systems are fully protected from vulnerabilities related to IT-related viruses, worms and other malicious software programs, attacks, break-ins and similar disruptions from unauthorized tampering by computer hackers and others. Such cybersecurity incident could include an attempt to gain unauthorized access to digital systems for purposes of misappropriating assets or sensitive information, corrupting data, or causing operational disruption. Security measures in our products and services may be penetrated or bypassed by computer hackers and others who may gain unauthorized access to our or our customers' or partners' software, hardware, cloud offerings, networks, data or systems. They may use a wide variety of methods, including by use of artificial intelligence, or AI, which may include developing and deploying malicious software to attack our products third-party data, products or services incorporated into our own. Data may also be accessed or modified improperly as a result of customer, partner or employee error or malfeasance and third parties may attempt to fraudulently induce customers, partners, employees or suppliers into disclosing sensitive information such as usernames, passwords or other information in order to gain access to our data or IT systems or our customers' or partners' data or IT systems. Any of the foregoing occurrences could create system disruptions and cause shutdowns or denials of service or compromise data, including personal or confidential information, of us, our partners or our customers. If a cyber-attack or other security incident (for example phishing, advanced persistent threats, or social engineering) were to result in unauthorized access to, or deletion of, and/or modification and/or exfiltration of our customers' data, other external data or our own data or our IT systems or if the services we provide to our customers were disrupted, customers could lose confidence in the security and reliability of our products and services, including our cloud offerings, and perceive them not to be secure. This in turn could lead to fewer customers using our products and services and result in reduced revenue and earnings. The costs we would incur to address and fix these security incidents would increase our expenses. These risks will increase as we continue to grow our cloud and network offerings and store and process increasingly large amounts of data, including personal information and our customers' confidential information and data and other external data, and host or manage parts of our customers' businesses in cloud-based IT environments. Any of the events described above could cause our customers to make claims against us for damages allegedly resulting from a security breach or service disruption, which could adversely affect our business, results of operation and financial condition.