BioNexus Gene Lab Corp

Risk Management and Strategy

The Company’s cybersecurity risk management program is designed to assess, identify, and manage risks to the confidentiality, integrity, and availability of its corporate systems and data, including finance and reporting systems, email and collaboration systems, cloud-hosted information, and third-party service providers. The Company uses a combination of internal administrative controls and external service providers to support access management, backup procedures, vulnerability monitoring, vendor review, and incident response.

Management, under the oversight of the Chief Executive Officer, periodically reviews cybersecurity risks and escalates material cybersecurity matters to the Board of Directors, and where appropriate the Audit Committee, as part of the Company’s broader risk oversight process.

During fiscal 2025, the Company did not identify any cybersecurity incident that materially affected, or is reasonably likely to materially affect, the Company’s business strategy, results of operations, or financial condition. However, cybersecurity threats remain a continuing risk and future incidents could adversely affect the Company’s operations, financial condition, or reputation.

Governance

Our Board of Directors maintains oversight of risks from cybersecurity threats. Our Chief Executive Officer is assigned oversight of cybersecurity risks. Our Chief Executive Officer isresponsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents.