Maison Solutions Inc

Risk management and strategy

We rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident. We seek to mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We plan to engage a third-party consultant to assist us with designing controls and our cybersecurity risk management framework. We have not encountered cybersecurity threats or incidents that have had a material impact on our business.

Governance

Our Board of Directors has specific oversight responsibility for cybersecurity, which also oversees our general risk management. The Board of Directors reviews and discusses with management our policies, practices and risks related to information security and cybersecurity. Our chief financial officer has primary responsibility for assessing, monitoring and managing cybersecurity risks. Our chief financial officer provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.