Toppoint Holdings Inc.

Risk Management and Strategy

The Company recognizes the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of our data. Therefore, we have established a cybersecurity and risk management framework, which includes regular cybersecurity risk assessments to identify and evaluate potential cyber-attack threats and information security weakness that may affect our business. The data we collect during our operations primarily includes publicly available operational information from port websites. Additionally, we utilize athird-party software vendor to handle any personally identifiable information directly uploaded by truck drivers via a secure portal. We implement two-factor authentication for accessing emails and software, and enforce user role-based security with periodic password updates and login activity tracking. We plan to implement additional preventive measures, including firewalls, cyber-attack detection systems, and data encryption, to safeguard confidential information and data. We will regularly conduct cybersecurity awareness training for employees to enhance their awareness of potential cybersecurity threats and ensure they take appropriate preventive measures.

We havenot identified risks from known cybersecurity threats, or experienced any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. In the event of any significant cybersecurity incidents, we will publicly disclose the nature, scope, and impact of the incident, as well as the remediation measures we implement.

Governance

Board of Directors Oversight

Our board of directors oversees the management of risks associated with cybersecurity threats.

Management’s Role in Managing Risk

The Company’s Chief Financial Officer is primarily responsible for assessing, monitoring and managing our cybersecurity risks. Management must ensure that all industry standard cybersecurity measures are functioning as required to prevent or detect cybersecurity threats and related risks. Management oversees and tests our compliance with standards, remediates known risks, and leads our employee training program.

Monitoring Cybersecurity Incidents

The Company’s management is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. Management implements and oversees processes for the regular monitoring of our information systems. This includes the deployment of industry-standard security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, management will implement the cybersecurity crisis management plan.

Reporting to Board of Directors

Significant cybersecurity matters, and strategic risk management decisions, will be escalated to the board of directors.