AirJoule Technologies Corp.

Cybersecurity is a critical part of risk management and is integrated with our overall enterprise risk management framework. The board of directors and the Audit Committee are responsible for overseeing management’s execution of cybersecurity risk management and for assessing our approach to risk management. Our Chief Financial Officer is responsible for overseeing the assessment and management of cybersecurity risks, including coordinating with third-party cybersecurity service providers that support our cybersecurity monitoring and risk management processes. Senior management isresponsible for assessing and managing our exposure to cybersecurity risks on an ongoing basis.

We regularly assess cybersecurity risks to our systems, applications and infrastructure; are in the process of building our capabilities to monitor our information systems for potential vulnerabilities; and implement controls pursuant to our cybersecurity policies, processes and practices. To protect our information systems from cybersecurity threats, we use various security tools that are designed to help identify, escalate, investigate, resolve and recover from security incidents in a timely manner. We also engage third-party cybersecurity specialists with experience in cybersecurity risk assessment, information systems evaluation and technology risk management, to assist with monitoring our information systems, identifying potential vulnerabilities and supporting our incident response capabilities.

Cybersecurity threats, including those resulting from any previous cybersecurity incidents, havenot materially affected our Company, including our business strategy, results of operations, or financial condition. However, we face certain ongoing risks from cybersecurity threats that, if realized, may be reasonably likely to materially affect our operations and, therefore, our results of operations and/or financial condition.

For more information about these risks, refer to the risk factor captioned “Cyber-attacks or a failure in our information technology and data security infrastructure could adversely affect our business and operations.” in Part I, Item 1A. “Risk Factors.”

Governance

Our board of directors oversees our risk management process, including as it pertains to cybersecurity risks, directly and through its committees. The Audit Committee of the board of directors oversees our risk management program, which focuses on the most significant risks to our business, including oversight of information technology, cybersecurity and data privacy risks. Audit Committee meetings include discussions of specific risk areas throughout the year, including, among others, those relating to cybersecurity threats. The Audit Committee reviews our cybersecurity risk profile with management on a periodic basis using key performance and/or risk indicators. These key performance indicators are metrics and measurements designed to assess the effectiveness of our cybersecurity program in the prevention, detection, mitigation and remediation of cybersecurity incidents.

We take a risk-based approach to cybersecurity and have implemented cybersecurity policies throughout our operations that are designed to address cybersecurity threats and risks incidents. Management is responsible for the establishment of our cybersecurity environment, as well as the assessment and management of cybersecurity risks. Management provides regular updates on our cybersecurity risk profile to the Audit Committee of our board of directors.