Onar Holding Corp

Risk Management and Strategy

The Company’s cybersecurity environment is led by its Chief of Staff with input from the Chief Executive Officer and Board, who in addition to cybersecurity matters, oversees the Company’s IT infrastructure and is responsible for monitoring and managing the security of the Company’s corporate network and enterprise systems, including technical controls, and safety protocols and responding to security threats.

The Company establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems.

As of and for the year ended December 31, 2025, there have been no cybersecurity incidents that have materially affected the Company’s business strategy, results of operations, or financial condition.

Governance; Board Oversight of Cybersecurity Risks

The Board is responsible for the oversight of cybersecurity risks facing the Company. The Company does not currently have a separately designated cybersecurity committee or a formal cybersecurity governance framework. The Company’s Chief Executive Officer is responsible for assessing and managing material cybersecurity risks and reports to the Board on cybersecurity matters as they arise. The Board is informed of cybersecurity incidents and developments on an as-needed basis. The Company relies on its technology team and third-party service providers to implement technical safeguards, monitor systems, and respond to cybersecurity threats. Management intends to evaluate the establishment of more formalized cybersecurity governance structures, policies, and reporting protocols.