Legacy Housing Corp

The Company's senior management is actively involved in oversight of our risks and cybersecurity represents an important component of the Company’s overall approach toenterprise risk management (“ERM”). In general, we seek to address cybersecurity risks through an approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Risk Management and Strategy

The Company’s cybersecurity program is focused on the following key areas:

Technical Safeguards: The Company deploys technical safeguards that are designed to protect our system from cybersecurity threats, including two-factor authentication, firewalls, anti-malware functionality, email threat protection, and access controls, which are evaluated and improved through vulnerability assessments.

Third-Party Risk Management: We maintain a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of our system, as well as the systems of third parties that could adversely impact on our business in the event of a cybersecurity incident affecting those third-party systems.

Education and Awareness: We provide training, support and alerts for personnel regarding cybersecurity threats to equip our personnel with effective tools to address cybersecurity threats, and to communicate the evolving information security policies, standards, processes and practices.

Governance

Senior management, in coordination with the Company’s third-party service providers specializing in information technology, works collaboratively across the Company to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents. Through ongoing communications with third party service providers, Senior Management monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents.

Cybersecurity incidents havenot materially affected the Company's results of operations or financial condition, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents.