Edible Garden AG Inc

Cyber Security Governance

Oversight of cybersecurity infrastructure is managed by members of our management team, including our Chief Executive Officer and Interim Chief Financial Officer. Management works in tandem with athird-party service provider (the “Service Provider”) who routinely reviews and updates our antivirus and antimalware software, monitors our intrusion detection system and intrusion protection system and reviews and cleans our corporate email system. Other than engaging the Service Provider prior to our initial public offering, given our overall risk profile, the Board has had limited involvement with our cybersecurity risk management. The management team, with support from the Service Provider, would raise any significant cybersecurity risks with the Board.

Risk Management and Strategy

We believe we have implemented processes that are designed to effectively manage risks from cybersecurity threats. Through our Service Provider, we have established an Incident Response Plan (the “IRP”). The IRP lays out our guidelines for responding to and handling cyber incidents. The IRP helps to ensure a quick and organized response in the event of a cyber incident and helps ensure all necessary members of management are informed so action can be taken as soon as possible. Under the IRP, once a cyber incident is identified, a response team will review the details of the cyber incident, inform management and work to secure our systems and fix the vulnerability. An investigation will be conducted, with the assistance of the Service Provider if needed, to determine the root cause of the cyber incident, the materiality of the cyber incident, and any disclosure or legal obligations that will stem from the cyber incident.

We havenot been the victim of a cyber incident in the past but may be the subject of cyber incidents in the future. See Item 1A,Risk Factors for more information about the risk posed to us by cybersecurity threats.