Maison Solutions Inc.

Risk management and strategy

We rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident. We seek to mitigate cybersecurity risks through a combination of monitoring and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures, among other processes. We plan to engage athird-party consultant to assist us with designing controls and our cybersecurity risk management framework. We havenot encountered cybersecurity threats or incidents that have had a material impact on our business.

Governance

Our Board of Directors, which also oversees our general risk management, has specific oversight responsibility for cybersecurity. The Board of Directors reviews and discusses with management our policies, practices and risks related to information security and cybersecurity. Ourchief financial officer has primary responsibility for assessing, monitoring and managing cybersecurity risks. Our chief financial officer provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.