PSQ Holdings Inc

We recognize the critical importance of developing, implementing and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data.

Within our risk management framework, we engage in application security assessments, vulnerability management, penetration testing, security audits, and continuous risk assessments. Additionally, we uphold a range of incident response plans that come into play upon incident detection. We mandate that all employees, including corporate personnel with access to information systems, undergo annual data protection and cybersecurity training as well as compliance programs.

Senior leadership, as part of our enterprise risk assessments, thoroughly evaluates our cybersecurity risks and corresponding mitigations.

Our Principal Security Engineer has over twenty years of experience in various roles involving managing information security, developing cybersecurity strategy, implementing effective information and cybersecurity programs, and secure architecture and design, as well as several relevant certifications, including a Bachelor of Science in Computer Science and security related certifications which includes ISC2 Certified Information Systems Security Professional (CISSP), AWS Security Specialty and Google Cloud Professional Cloud Security Engineer. The Information Security team furnishes routine reports to senior management and pertinent stakeholders, detailing a spectrum of cybersecurity threats, assessments, and discoveries.

Our information security team remains abreast of the latest cybersecurity advancements, staying informed about potential threats and emerging risk management strategies. This continuous learning is vital for proactively preventing, detecting, mitigating, and remediating cybersecurity incidents. Our information security team is responsible for implementing and supervising processes for ongoing monitoring of our information systems, incorporating advanced security measures and regular system audits to pinpoint vulnerabilities. In the event of a cybersecurity incident, our information security team employs a well-defined incident response plan, comprising immediate actions to minimize impact and long-term strategies for remediation and prevention of future incidents.

Our information security team consistently updates the CFO and CEO on all cybersecurity risks and incidents to ensure top management stays informed about our cybersecurity posture and potential risks. Additionally, significant cybersecurity matters and strategic risk management decisions are escalated to the Board of Directors, granting them comprehensive oversight and the ability to provide guidance on critical cybersecurity issues.

To date, we have not experienced any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.