FibroBiologics Inc

Risk Management and Strategy

We have processes for assessing, identifying and managing cybersecurity risks, which are an integral part of decision-making at every level. Such processes include physical, procedural and technical safeguards, response plans, and routine review of our policies and procedures to identify risks and refine our practices.

We have engaged an external Information Technology Managed Service Provider, or IT MSP, to help our management team design, implement and maintain our information technology systems and infrastructure. Members of our executive leadership team provide oversight of the activities of the IT MSP to ensure appropriate controls. Furthermore, the Audit Committee has oversight with respect to our internal controls and managing the risks of cybersecurity threats.

Governance

Our Audit Committee of the Board of Directors is responsible for overseeing cybersecurity risk and periodically updates our Board of Directors on such matters. The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition, and have not had previous cybersecurity incidents that have materially affected us.