CDT Equity Inc.

We operate in the biotechnology sector, which is subject to various cybersecurity risks that could adversely affect our business, financial condition, and results of operations, including intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy laws and other litigation and legal risk; and reputational risk. We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems. We have implemented a risk-based approach to identify and assess cybersecurity threats that could impact our business and information systems. As part of this strategy, the Company has engaged a third-party service provider to implement comprehensive IT and cybersecurity policies, including Guardz, Cyber Essentials, and others. These initiatives are supported by detailed policies, staff training programs, and the use of advanced tools such as firewalls and VPNs to prevent cybersecurity incidents. Additionally, consultation with third-party experts has further strengthened the Company’s IT framework and improved overall compliance. We require third-party service providers with access to personal, confidential or proprietary information to implement and maintain comprehensive cybersecurity practices consistent with applicable legal standards and industry best practices.

The Company has engaged a third-party service provider to implement comprehensive IT and cybersecurity policies, including Guardz, Cyber Essentials, and others. These initiatives are supported by detailed policies and staff training programs, which have strengthened the Company’s IT framework and improved compliance.

In light of the pervasive and increasing threat from cyberattacks, the Company’s Board of Directors and the Audit Committee, with input from management, assess the Company’s cybersecurity threats and the measures implemented by the Company to mitigate and prevent cyberattacks. The Audit Committee consults with management regarding ongoing cybersecurity initiatives, and requests management to report to the Audit Committee or the full Board regularly on their assessment of the Company’s cybersecurity program and risks.

As of the date of this Annual Report, the Company is not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.