INVO Fertility, Inc.

Risk management and strategy

We havenot formally developed and implemented a cybersecurity risk management program. However, we generally follow operating practices designed to help prevent cybersecurity risk to protect the confidentiality, integrity, and availability of our data and systems and any personal health information (“PHI”) that we maintain.

Our general operating procedures for cybersecurity risk management are incorporated into our overall enterprise risk management programs, and share common methodologies, reporting channels and governance processes, including the following:

As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We may face risks from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. For additional information, see Part I, Item 1A:Risk Factors— Risks Relating to our Business: We are susceptible to cybersecurity breaches and cyber-related fraud.

Cybersecurity: Governance

Our executive team evaluates our cybersecurity risk and reports any findings, recommendations, or material impacts to the Board, which provides an oversight function. The Board has charged management with the responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to our computerized information system controls and security.

Our IT consultant reviews the efficacy of our cybersecurity procedures from time to time as circumstances make it appropriate and annually in connection with the annual audit of our financial statements. Our IT consultant reports to our CEO and CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management procedures. Our CEO and CFO provide prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding our cybersecurity activities.