Rapport Therapeutics, Inc.

Cyber Risk Management and Strategy

We have implemented cybersecurity risk management processes aligned with our risk profile and business size to identify, assess, and mitigate risks from current and emerging cybersecurity threats. These processes, informed by the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”), are supported by athird-party Managed Service Provider (“MSP”) that assists us in managing our information technology systems.

Our multi-layered approach to cybersecurity includes, but is not limited to, employee security awareness training, phishing simulations, incident response planning, and the use of various cybersecurity tools and technologies. We leverage third-party information technology and security providers for system scans and threat intelligence analysis. In addition, we have conducted a cybersecurity risk assessment designed to reflect the evolving cyber threat landscape and industry best practices, and we continue to adapt our cyber strategy to mitigate emerging risks.

We maintain a risk-based process to assess and review the cybersecurity practices of our third-party vendors, as appropriate, based on their level of access to critical operations, IT systems, and personally identifiable information.

To date, we have not identified any cybersecurity incidentsor threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, we and certain of our third-party vendors have occasionally experienced threats and cybersecurity incidents involving our information technology systems and infrastructure. Our third-party vendors may also encounter such threats and cybersecurity incidents from time to time. For more information, please refer to Item 1A, “Risk Factors,” in this Annual Report on Form 10-K.

Governance Related to Cybersecurity Risk

Management is responsible for identifying, evaluating, and assessing material business risks, including risks related to cybersecurity, on an ongoing basis. Our Chief Information Officer (“CIO”) oversees our overall IT strategy and operations, including the strategic direction of our cybersecurity program, cybersecurity risk oversight, and monitoring of prevention, detection, mitigation, and remediation of cybersecurity incidents. Our CIO brings over 10 years of experience in information security.

Our Board of Directors has delegated oversight of our cybersecurity risk management program to our Audit Committee, as outlined in the Audit Committee Charter. Our CIO provides quarterly updates to the Audit Committee on cybersecurity risks and delivers an annual enterprise risk management update, which includes updates on plans intended to enhance our overall cybersecurity posture. The Audit Committee, in turn, updates the full Board of Directors on cybersecurity risk management matters as needed.