MYERS INDUSTRIES INC

The Company takes cybersecurity threats seriously, including regular reassessment of cybersecurity risks both internally and with third parties and updates to the Board of Directors at least annually. The Company's information security management system is based upon the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF). Among other best practices, the company uses multi-factor authentication wherever possible, maintains current versions of firewalls and security software, performs regular cybersecurity training and email phishing campaigns for employees, uses third parties to perform intrusion testing, and maintains disaster recovery and incident response plans, which include retainer contracts for third party cybersecurity response specialists. The Company employs a combination of active and passive methods to monitor for new or developing cybersecurity risks.

The Board regularly receives reports and training from management and third parties on cybersecurity matters, as part of our overall enterprise risk management program. Management is responsible for developing cybersecurity programs, including as may be required by applicable law or regulation. Company IT personnel have the appropriate expertise in IT and cybersecurity, which generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. Company cybersecurity personnel monitor the prevention, detection, mitigation and remediation of cybersecurity incidents as part of the cybersecurity programs described above. Incidents, if any, are escalated to management and the Board according to the Company’s incident response policy. There have been no material cybersecurity incidents in the periods presented.