Aspira Women's Health (AWH) Risk Factors

In the ordinary course of our business, we and the third parties upon which we rely, process, collect, receive, store, use, transfer, make accessible, and share (collectively, processing) proprietary, confidential, and sensitive data, including personal data (such as health-related data), intellectual property, trade secrets and other sensitive data the Company may process (collectively, sensitive information). The information systems we use for our Aspira Labs business are comprised of systems we have purchased or developed, our legacy information systems and, increasingly, web-enabled and other integrated information systems. In using these information systems, we may rely on third-party vendors to provide hosting services, where our infrastructure is dependent upon the reliability of their underlying platforms, facilities and communications systems. As the breadth and complexity of Aspira Labs' information system grows, we will be increasingly exposed to the risks inherent in maintaining the stability of our legacy systems due to prior customization, attrition of employees or vendors involved in their development, and obsolescence of the underlying technology as well as risks from the increasing number and scope of external data breaches on companies generally. Because certain customers and clinical trials may be dependent upon these legacy systems, we will also face an increased level of risk in maintaining the legacy systems and limited options to mitigate such risk. We are also exposed to risks associated with the availability of all of our information systems, including ?discontinued vendor support of legacy systems;?disruption, impairment or failure of data centers, telecommunications facilities or other key infrastructure platforms, including those maintained by third-party vendors;?failures or malfunctions in our internal systems, including our employee data and communications, critical application systems and their associated hardware; and ?excessive costs, excessive delays and other deficiencies in systems development and deployment. Cyber-attacks, malicious internet-based activity, online and offline fraud, social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, attacks enhanced or facilitated by AI, telecommunications failures, and other similar activities or incidents threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer "hackers," threat actors, "hacktivists," organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. The materialization of any of these risks may impede the processing of data, the delivery of databases and services, and the day-to-day management of our Aspira Labs business and could result in the corruption, loss or unauthorized disclosure of proprietary, confidential or other data. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments.  Further, remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Our mitigation efforts to date might not adequately protect us in the event of a system failure, cyber-attack, cyber-breach, data breach or other adverse event. Despite any precautions we take, damage from fire, floods, hurricanes, the outbreak or escalation of war, acts of terrorism, power loss, telecommunications failures, computer viruses, break-ins and similar events at our various computer facilities or those of our third-party vendors could result in interruptions in the flow of data to us and from us to our customers. Corruption or loss of data may result in the need to repeat a trial at no cost to the customer, but at significant cost to us, the termination of a contract or damage to our reputation. As our business continues its efforts to expand globally, these types of risks may be further increased by instability in the geopolitical climate of certain regions, underdeveloped and less stable utilities and communications infrastructure, and other local and regional factors. Additionally, significant delays in system enhancements or inadequate performance of new or upgraded systems could damage our reputation and harm our business. Unauthorized disclosure of sensitive or confidential data, whether through systems failure or employee or distributor negligence, cyber-attacks, fraud or misappropriation, could damage our reputation and cause us to lose customers and, to the extent any such unauthorized disclosure compromises the privacy and security of individually identifiable health information, could also cause us to face sanctions and fines under HIPAA of 1996 as amended by HITECH. Similarly, we have been and expect that we will continue to be subject to attempts to gain unauthorized access to or through our information systems or those we internally or externally develop for our customers, including a cyber-attack by computer programmers and hackers who may develop and deploy viruses, worms or other malicious software programs, process breakdowns, denial-of-service attacks, malicious social engineering or other malicious activities, or any combination of the foregoing. These same risks also apply to Aspira Labs. Successful attacks could result in negative publicity, significant remediation and recovery costs, legal liability and damage to our reputation and could have an adverse effect on our business, financial condition and results of operations. We use AI/ML to assist us in making certain decisions, which is regulated by certain privacy laws. Due to inaccuracies or flaws in the inputs, outputs, or logic of the AI/ML, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

Our operations, as well as those of the collaborators on which we depend, are vulnerable to damage or interruption from fire, natural disasters, including earthquakes, weather related supply chain delivery disruptions, computer viruses, cyber-attacks, human error, power shortages, telecommunication failures, international acts of terror, foreign or domestic conflicts, epidemics or pandemics such as the COVID-19 pandemic, and other similar events. Although we have certain business continuity plans in place, we have not established a formal comprehensive disaster recovery plan, and our back-up operations and business interruption insurance may not be adequate to compensate us for losses we may suffer. A significant business interruption could result in losses or damages incurred by us and require us to cease or curtail our operations.

We are highly dependent on our executive officers and certain key employees. Our executive officers and key employees are employed at will by us. Any inability to engage new executive officers or key employees could impact operations or delay or curtail our research, development and commercialization objectives. To continue our research and product development efforts, we need people skilled in areas such as clinical operations, regulatory affairs and clinical diagnostics. Competition for qualified employees is intense. To continue our commercialization objectives and reach our financial and operational goals, we require skilled sales individuals with familiarity in our industry. We have from time to time experienced, and may in the future experience, shortages of certain types of qualified employees. If we lose the services of any executive officers or key employees, our ability to achieve our business objectives could be harmed, which in turn could adversely affect our business, financial condition and results of operations. We have and may continue to experience turnover in certain executive officer and key employee roles.

We are from time to time subject to legal proceedings and claims that arise in the ordinary course of business, such as claims brought by our clients in connection with commercial disputes, employment claims made by current or former employees, and claims brought by third parties alleging infringement of their intellectual property rights. In addition, we may bring claims against third parties for infringement of our intellectual property rights. Litigation may result in substantial costs and may divert our attention and resources, which may adversely affect our business, results of operations and financial condition. An unfavorable judgment against us in any legal proceeding or claim could require us to pay monetary damages. In addition, an unfavorable judgment in which the counterparty is awarded equitable relief, such as an injunction, could harm our business, results of operations and financial condition.

We are subject to various international, federal, state and local environmental laws and regulations that govern our operations, including the handling and disposal of non-hazardous and hazardous wastes, the recycling and treatment of electrical and electronic equipment, and emissions and discharges into the environment. Failure to comply with such laws and regulations could result in costs for corrective action, penalties or the imposition of other liabilities. We are also subject to laws and regulations that impose liability and clean-up responsibility for releases of hazardous substances into the environment. Under certain of these laws and regulations, a current or previous owner or operator of property may be liable for the costs to remediate hazardous substances or petroleum products on or from its property, without regard to whether the owner or operator knew of, or caused, the contamination, as well as incur liability to third parties affected by such contamination. The presence of, or failure to remediate properly, such substances could adversely affect the value and the ability to transfer or encumber such property.

Our principal competition currently comes from the many clinical options available to medical personnel involved in clinical decision making. For example, rather than ordering an OvaSuite test for a woman with an adnexal mass, obstetricians, gynecologists and gynecologic oncologists may choose a different clinical option or none at all. If we are not able to convince clinicians that these products provide significant improvement over current clinical practices or to change their ordering habits, our ability to commercialize OvaSuite products will be adversely affected. Competitive offerings include Fujirebio Diagnostics' FDA cleared ROMA test. ROMA combines two tumor markers and menopausal status into a numerical score using a publicly available algorithm. ROMA is a competitive test with the Ova1Plus workflow that has adversely impacted and may continue to materially adversely impact our revenue. In addition, competitors, Abbott Laboratories, Angle plc, Anixa Biosciences, Inc., AOA Dx, Becton Dickinson & Co., ClearNote Health, Exact Sciences Corp., Grail, InterVenn Biosciences and others have publicly disclosed that they have been or are currently working on ovarian cancer diagnostic assays. Academic institutions periodically report new findings in ovarian cancer diagnostics that may have commercial value. A number of diagnostic and academic organizations have announced plans or published studies related to the development of a non-invasive diagnostic tool for the identification of endometriosis. Competitors for our endometriosis offerings include, but are not limited to, DotLab, Endodiag, HERA Biotech and Ziwig. Our failure to compete with any competitive diagnostic assay if and when commercialized could adversely affect our business, financial condition and results of operations. We have priced our products at a point that recognizes the value-added by its increased sensitivity for detecting ovarian malignancy. If others develop a test that is viewed to be similar to any of these products in safety and efficacy but is priced at a lower point, we and/or our strategic partners may have to lower the price of that product in order to effectively compete, which would impact our margins and potential for profitability.