ASTRONICS CORP

Information security is critical to the Company’s operations around the world. We seek to employ industry-leading security practices, while leveraging software and product security engineering to protect our networks, systems and information from cyber threats. Our cybersecurity strategy prioritizes detection, analysis and response to known, anticipated or unexpected cyber threats, effective management of cyber risks, and resilience against cyber incidents. We continuously strive to exceed industry best practices and implement risk-based controls to protect our partners’ and the Company’s information and information systems. In order to protect both commercial and defense-related businesses and support our production operations, the Company has adopted security principles in accordance with the National Institute of Standards and Technology Cybersecurity Framework, contractual requirements and other global standards. The Company conducts regular periodic training of its employees as to the protection of sensitive information which includes

security awareness training intended to prevent the success of “phishing” attacks. We also leverage industry and government associations, third-party benchmarking, audits, and threat intelligence feeds, among other things, to ensure the effectiveness of our cybersecurity efforts and proactively allocate resources.

The Company’s Director of Information Technology provides a report to the Board of Directors on an annual basis, or more frequently as needed, with respect to information security activity, security assessments, controls and investments.

The Company has in place a Cyber Risk Liability Insurance policy written by the Traveler’s for a twelve-month term expiring July 1, 2024. The twelve-month premium was $74,088. The policy has a limit of $3 million in the aggregate and provides coverage related to data breaches and other cyber security measures.