Global Self Storage, Inc.

We recognize the importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. Our cybersecurity risk management program includes:

•

Experienced third-party consultants and/or service providers that assist us to develop, implement, and maintain information technology risk management measures.

•

Oversight of executive management with experience in areas relating to cybersecurity.

•

Threat protection software, including, anti-virus, anti-malware, email link protection, and email spam filters that are fine-tuned to mitigate threats to our organization.

•

Cloud-based service providers that require strong passwords, access controls, and multi-factor authentication.

•

Periodic cybersecurity and phishing awareness training of our employees, including computer-based training and internal communications.

•

Annual business continuity testing.

•

Periodic reporting to the board of directors on matters relating to cybersecurity.

Management of Material Risks &Integration into Overall Risk Management

Our management team engages with experienced third-party service providers to assist us to develop, implement, and maintain information technology risk management measures. In addition, we have executive management with experience in areas relating to cybersecurity. We also foster a culture of cybersecurity awareness and have incorporated cybersecurity considerations into our decision-making processes. Our management team works closely with our third-party service providers to identify, evaluate and address cybersecurity risks in alignment with our business objectives and operational needs. Our collaboration with third-party service providers includes threat assessments and consultation on security enhancements. In addition, the Company provides cybersecurity and phishing awareness training to our employees periodically.

Oversight of Board of Directors

The board of directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats and oversees the Company's cybersecurity risk management activities. The board of directors receives updates on the Company’s cybersecurity risks and protective measures periodically. Cybersecurity matters are reported to the board of directors so that the board of directors can effectively carry out their oversight role.

Risks from Cybersecurity Threats

We have not identified risks from known cybersecurity threats, including as a result of any cybersecurity incidents, that have materially affectedor are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For more information, see the section titled "Risks

Relatedto our Self Storage Properties and our Business - We rely on information technology in our operations, and any material failure, inadequacy, interruption or security breach through cyber-attacks, cyber-intrusions, or other methods could disrupt our information technology networks and related systems and harm our business."