AVALON HOLDINGS CORP

Avalon faces various cyber risks, including, but not limited to, risks related to the storage of members’ information, and security breaches could expose us to a risk of loss or misuse of this information, litigation and potential liability. Weutilize a multilayered, proactive approach to identify, evaluate, mitigate and prevent potential cyber and information security. Additionally, we devote significant resources to protecting the security of our computer systems, software, networks and other technology assets. Our efforts are designed to adapt with the evolution of information security risks and appropriate best practices and include physical, administrative and technical safeguards. The risk assessment is discussed with theaudit committee and board of directors on at least an annual basis. Our practices are generally developed from, and benchmarked against, recognized cybersecurity frameworks, such as the National Institute of Standards and Technology Cybersecurity Framework. Our management team also engages certain outside advisors and consultants to assist in the identification, oversight, evaluation and management of cybersecurity risks on a regular basis, as well as to advise on specific topics. We have not experienced a material cybersecurity incident and although we are subject to ongoing and evolving cybersecurity threats, we arenot aware of any material risks from cybersecurity threats that have materially affected the Company.