VALUE LINE INC

We believe that information security is a critical component of our business strategy. Therefore, we maintain and continuously assess and strengthen our cyber security program.

Management is responsible for the day-to-day administration of the Company’s risk exposures and has adopted a risk management framework including identification, analysis and response to risks affecting our business. The Company has established a committee of senior leaders which is chaired by the Company’s Executive Director of Information Technology.

We regularly engage third-party services to conduct evaluations of our security controls, which can include penetration testing, independent audits, or consulting on best practices to address new challenges. These evaluations include testing both the design and effectiveness of security controls.

We rely on third-party service providers for a variety of services to run our information systems. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers. A cyber-attack at a third-party service provider could have a significant impact on our business, and we continuously monitor the risks associated with our service providers.

The Audit Committee has responsibility for the oversight of the Company’s risk management program, including technology and cybersecurity risks facing the Company. The audit committee receives briefings and reports from management about cybersecurity risk management and the overall technology and cybersecurity environment.

We believe that currently we have not encountered a cybersecurity event that has had a material impact on our business. See Item 1A. “Risk Factors” for a discussion of our cybersecurity risks.