CXJ GROUP CO., Ltd

We believe that information security is a critical component of our business strategy. Therefore, we maintain and continuously assess and strengthen our cyber security program. Management is responsible for the day-to-day administration of the Company’s risk exposures and has adopted a risk management framework including identification, analysis and response to risks affecting our business.

We regularly engage third-party services to conduct evaluations of our security controls, which can include penetration testing, independent audits, or consulting on best practices to address new challenges. These evaluations include testing both the design and effectiveness of security controls.

We rely on third-party service providers for a variety of services to run our information systems. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers. A cyber-attack at a third-party service provider could have a significant impact on our business, and we continuously monitor the risks associated with our service providers.

The Chief Financial Officer is responsible to oversight of the Company’s risk management program, including technology and cybersecurity risks facing the Company. The Chief Financial Officer receives briefings from management and the third-party service provider about cybersecurity risk management and the overall technology and cybersecurity environment.

We believe that currently we havenot encountered a cybersecurity event that has had a material impact on our business. See Item 1A. “Risk Factors” for a discussion of our cybersecurity risk.