JEWETT CAMERON TRADING CO LTD

Risk Management and Strategy

We currently manage our cybersecurity risk through our IT consultants in a variety of practices that are applicable to all users of our information technology and information assets, including our officers, directors, employees, vendors and contractors. Our cyber risk management programs are designed to identify, assess, manage, mitigate, and respond to cybersecurity threats.

We utilize a combination of technology and active monitoring that are integrated within our enterprise risk management network system to promote security awareness and prevent security incidents that are consistent with recognized standards and practices for information technology and cyber security. Our process for addressing risk aligns with industry standards as outlined in the NIST Cybersecurity Framework and NIST Risk Management Framework. The performance and effectiveness of our cybersecurity program are also tested on a regular schedule by outside consulting third-party experts.

We have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.

Our Chief Financial Officer is responsible for assessing and managing our cyber risk management program and informs senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents.

Governance

The Audit Committee of the Board of Directors is responsible for overseeing risks related to cybersecurity.

Our Chief Executive Officer and Chief Financial Officer are responsible for assessing and managing risks and incidents relating to cybersecurity threats. They report any material findings and recommendations, if any, to the Audit Committee and the Board of Directors.