Acasti Pharma Inc

Board Oversight

While our Board of Directors (the “Board”) has overall responsibility for risk oversight, the Audit Committee of the Board (the “Audit Committee”) oversees cybersecurity risk matters. The Audit Committee is responsible for reviewing, monitoring, reporting and, where appropriate, providing recommendations to the Board regarding compliance with our internal policies and its progress in remedying any material deficiencies, including those related to our security policies, including the physical safeguarding of corporate assets and security of our networks and information systems. The Audit Committee receives quarterly updates regarding the cybersecurity program, including top threats and risks, and updates on the cybersecurity roadmap.

Cybersecurity Risks

We maintain a Risk Management Policy that governs the process in which we identify cybersecurity risks, and quantify and evaluate their associated impacts and risk levels. A Cybersecurity Risk Register is also leveraged to track identified cybersecurity risks to date and update treatment of such risks accordingly.

For additional information, see “Item 1A—Risk Factors.” In the last two reporting years, we did not experience any material cybersecurity incidents or threats.

Our head office and operations are located at 103 Carnegie Center Suite 300 Princeton, New Jersey, 08540.