{"url_path":"/sec/jfb/10-k/2026/item-1c","section_key":"item-1c","section_title":"Item 1C CYBERSECURITY**","topic":"sec","document":{"doc_type":"10-K/A","doc_date":"2026-06-17","source_url":"https://www.sec.gov/Archives/edgar/data/2024306/0001493152-26-028959-index.html","accession_number":"0001493152-26-028959","cik":"0002024306","ticker":"JFB","issuer_name":"JFB Construction Holdings","edgar_url":"https://www.sec.gov/Archives/edgar/data/2024306/0001493152-26-028959-index.html","primary_entity_key":"0002024306","primary_entity_name":"JFB Construction Holdings"},"word_count":669,"has_tables":true,"body_markdown":"**ITEM\n1C. CYBERSECURITY**\n\n** **\n\n**Cybersecurity\nRisk Management and Strategy**\n\n** **\n\nWe\nhave developed and maintained a Cybersecurity risk management methodology intended to protect the confidentiality, integrity, and availability\nof our critical systems and information. Our Cybersecurity risk management methodology is integrated into our overall enterprise risk\nmanagement, and shares common methodologies, reporting channels and governance processes that apply across the Company to other legal,\ncompliance, strategic, operational, and financial risk areas. As part of our overall risk management processes and procedures, we have\ninstituted a Cybersecurity awareness campaign designed to identify, assess and manage material risks from Cybersecurity threats, including\nby engaging a third-party Cybersecurity service provider, which communicates directly with our management and compliance personnel. The\ncyber risk management methodology involves risk assessments, implementation of security measures and ongoing monitoring of systems and\nnetworks, including networks on which we rely. Through our Cybersecurity awareness, the current threat landscape is actively monitored\nin an effort to identify material risks arising from new and evolving Cybersecurity threats. We may engage external experts, including\nCybersecurity assessors, consultants, and auditors to evaluate Cybersecurity measures and risk management processes as needed. We also\ndepend on and engage various third parties, including suppliers, vendors, and service providers in connection with our operations. Our\nrisk management, legal, and compliance personnel oversee and identify, including through a third-party Cybersecurity service provider,\nmaterial risks from Cybersecurity threats associated with our use of such entities.\n\n \n\nOur\nCybersecurity risk management methodology includes:\n\n \n\n●\nrisk assessments designed to help identify material Cybersecurity risks to our critical systems, information, services, and our broader\nenterprise IT environment;\n\n \n\n●\nindividuals, including employees and external third-party service providers, who are responsible for managing our Cybersecurity risk\nassessment processes, our security controls, and our response to Cybersecurity incidents;\n\n \n\n●\nthe use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;\n\n \n\n●\nCybersecurity awareness training of our employees, incident response personnel, and senior management;\n\n \n\n●\na Cybersecurity incident response plan that includes procedures for responding to Cybersecurity incidents; and\n\n \n\n●\na third-party risk management process for service providers, suppliers, and vendors.\n\n \n\nWe\nhave not identified risks from known Cybersecurity threats, including as a result of any prior Cybersecurity incidents that have materially\naffected us, including our operations, business strategy, results of operations, or financial condition. We face risks from Cybersecurity\nthreats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations,\nor financial condition.\n\n \n\n**Cybersecurity\nGovernance**\n\n** **\n\nOur\nBoard provides strategic oversight on Cybersecurity matters, including material risks associated with Cybersecurity threats. The Board\nhas delegated to the Audit Committee oversight of Cybersecurity and other information technology risks. The Audit Committee oversees\nmanagement’s implementation of our Cybersecurity risk management methodology. Our Board and the Audit Committee receive periodic\nupdates from our Chief Financial Officer and more frequently as needed, regarding the overall state of our Cybersecurity preparedness,\ninformation on the current threat landscape, and material risks from Cybersecurity threats and Cybersecurity incidents. The Audit Committee\nand our management team are informed about and monitor the prevention, detection, mitigation, and remediation of Cybersecurity incidents,\nincluding through the receipt of notifications from third-party service providers and reliance on communications with our risk management,\nlegal, and/or compliance personnel.\n\n \n\nThe\nAudit Committee reports to the full Board regarding Cybersecurity activities. The full Board also receives briefings from management\non cyber risk issues and best practices. Our management team is responsible for assessing and managing our material risks from Cybersecurity\nthreats. The team has primary responsibility for developing and maintaining our overall Cybersecurity risk methodology and supervises\nboth our internal Cybersecurity personnel and our retained external Cybersecurity consultants. Our management team supervises efforts\nto prevent, detect, mitigate, and remediate Cybersecurity risks and incidents through various means, which may include briefings from\ninternal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including\nexternal consultants engaged by us; and alerts and reports produced by security tools deployed in the information technology environment.\n\n \n\n25"}