DEEP FISSION, INC.

Risk Management and Strategy

Management believes the Company has adequate processes and systems to maintain the confidentiality of its communications and records. However, given our current business plan and lack of significant operations and employees, management does not believe that cybersecurity threats constitute a material risk for the Company. The Company currently does not have formal processes for assessing, identifying and managing risks from cybersecurity threats to the Company directly or through third-party service providers. We do not engage assessors, consultants, auditors or other third parties in connection with cybersecurity.

The Company has not experienced any cybersecurity incidents to date.

Governance

The board of directors oversees risks from cybersecurity threats as part of its risk oversight function. However, there are no specific processes or committees by which the board of directors may be informed about such risks.

Management is responsible for assessing and managing the any material risks to the Company from cybersecurity threats. However, management has no specific expertise in such matters, and there are no specific processes by which management is informed about or monitors the prevention, detection, mitigation and remediation of cybersecurity incidents. If any such risks were identified, management would report such risks to the board of directors.

If and when the Company completes a merger or other acquisition, the board of directors and management will assess the risks of cybersecurity threats to its business adopt processes for assessing, identifying and managing risks from cybersecurity threats as warranted.