MILESTONE SCIENTIFIC INC.

Governance Related to Cybersecurity Risks

Our Board of Directors has oversight responsibility for risk management, including cybersecurity risk. The Board exercises this oversight through the Audit Committee, which oversees management’s risk exposure across various areas, including cybersecurity, in accordance with its charter. Management provides quarterly reports to the Audit Committee regarding the status of our cybersecurity program. The Chair of the Audit Committee reports to the full Board on cybersecurity matters every quarter, as applicable.

Management is responsible for the day-to-day administration of our cybersecurity program under the supervision of our Chief Executive Officer. We also engage external security service providers to support monitoring and threat detection and have processes designed to report relevant findings to the Chair of the Audit Committee, as appropriate.

Cybersecurity Risk Management and Strategy

Wemaintain a cybersecurity program that includes processes to identify, assess, and manage cybersecurity risks. We conduct periodic risk assessments, including with the support of external vendors, to evaluate our cybersecurity program, identify areas for enhancement, and develop mitigation strategies. We also conduct periodic security awareness training for employees.

We monitor cybersecurity risks through a combination of internal efforts andthird-party tools and services, including a managed security service provider and other security software designed to detect and respond to threats. We have implemented processes and technologies for network monitoring and data loss prevention, and periodically review these controls.

We havenot identified any cybersecurity incidents that have materially affected, or are reasonably likely to affect materially, our business strategy, results of operations, or financial condition. However, like other companies, our third-party vendors and we may experience cybersecurity threats or incidents from time to time. For additional discussion of related risks, see “Item 1A. Risk Factors.”