ProMIS Neurosciences Inc.

Risk Management and Strategy

We recognize the importance of assessing, identifying, and managing risks to the security, confidentiality, integrity, and availability of our business systems and confidential information, including personal information and intellectual property. We have developed a cybersecurity risk management program in accordance with our risk profile and business. Leveraging the support of a third-party information technology provider, our cybersecurity risk management program includes cybersecurity awareness training for employees and periodic systems monitoring and vulnerability scanning.

We have not identified cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, we and our third-party vendors may from time to time experience threats that could affect our information or systems. For more information, please see the section entitled “Risk Factors” in this Annual Report on Form 10-K.

Governance Related to Cybersecurity Risks

Our Vice President, Finance and Chief Executive Officer, with the assistance of the Company’s third-party information technology provider, are responsible for the strategic leadership and direction of the Company’s cybersecurity program.

The Board exercises oversight of risks from cybersecurity threats primarily through its Audit Committee. Our Vice President, Finance, with input of other members of Company management and the Company’s information technology provider, periodically makes presentations to the Audit Committee on the Company’s enterprise risk management program, which may address cybersecurity risks and related cyber strategy, as applicable.