Envirotech Vehicles, Inc.

Risk Management and Strategy

Our risk management strategy comprises of ensuring access controls are in place to prevent unauthorized users from accessing our systems. Our systems are completely cloud-based and our providers have their own security protocols to assist us. We retain audit logs and login records for review, and we use multifactor authentication and username/password management for all of our systems.

As of the date of this Annual Report, we have not experienced any cybersecurity threat or incident that has materially affected, or is reasonably likely to materially affect, our business strategy, results of operations, or financial condition. However, there can be no assurance that we will not experience such an incident in the future. We seek to incorporate industry best practices into our cybersecurity program and continue to invest in additional controls to enhance the resiliency of our networks and prevent cybersecurity incidents. For a discussion of how cybersecurity threats could materially affect us, including potential impacts on our business strategy, results of operations, and financial condition, please refer to the section titled “Risk Factors” in this Annual Report.

Governance

Our cybersecurity program is overseen by our President and Interim Chief Financial Officer. Day-to-day risk management and oversight of the Company’s cybersecurity programs fall to experienced information technology personnel, who directly report to our President and Interim Chief Financial Officer. In the event of a cybersecurity threat, the IT personnel assesses the threat and determines the course of action to eliminate the threat. Depending on the circumstances, such threat is communicated to the executive team and if warranted to the Board for further action.