Innovex International, Inc.

Wemaintain a cyber risk management program designed to identify, assess, manage, mitigate, and respond to cybersecurity threats. The underlying controls of the cyber risk management program are based on recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology (“NIST”). We have an annual assessment, performed by a third party, of our cyber risk management program against the NIST Cybersecurity Framework. We contract a CyberSecurity Operations Center operating in three locations to provide 24/7 monitoring of our global cybersecurity environment and to coordinate the investigation and remediation of alerts. An annual incident response drill is in place to prepare support teams in the event of a significant incident. Cyber partners are a key part of our cybersecurity infrastructure. We partner with leading cybersecurity companies and organizations, leveraging third-party technology and expertise. Weengage with these partners to monitor and maintain the performance and effectiveness of products and services that are deployed in ourenvironment.

Our VP of IT reports to our Chief Financial Officer and is the head of our cybersecurity team. The VP of IT brings over 27 years of dedicated experience in information security and isresponsible for assessing and managing our cyber risk management program, informing senior management regarding the prevention, detection, mitigation, and remediation of cybersecurity incidents and supervising such efforts. The cybersecurity team has decades of experience selecting, deploying, and operating cybersecurity technologies, initiatives, and processes around the world, and relies on threat intelligence as well as other information obtained from governmental, public or private sources, including external consultants engaged by Innovex. The Audit Committee of the Board of Directors oversees our cybersecurity risk exposures and the steps taken by management to monitor and mitigate cybersecurity risks. The IT department briefs the Audit Committee on the effectiveness of our cyber risk management program, typically on a semiannual basis. In addition, cybersecurity risks are reviewed by our Board of Directors, at least annually, as part of our corporate risk mapping exercise. Weface risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. We have experienced, and will continue to experience, cyber incidents in the normal course of its business. However, prior cybersecurity incidents have not had a material adverse effect on our business, financial condition, results of operations, or cash flows. Refer to “Item 1A. Risk Factors—Risks Related to Technology Advancement—We are subject to cybersecurity risks. A cyber incident could occur and result in information theft, data corruption, operational disruption and/or financial loss” and “Item 1A. Risk Factors—Risks Related to Technology Advancement—We have experienced IT system disruptions and cyber attacks in the past, and a failure of our IT infrastructure and cyber attacks could adversely impact us in the future"for additional information.