WESTWATER RESOURCES INC

The Company stores and transmits data including sensitive and nonpublic data regarding our company, employees, counterparties and customers, among others. Like many companies, we are the subject of attempts by unauthorized actors to disrupt our operations, access our data, or otherwise cause damage to our technology infrastructure, including through the use of phishing, malware and other attack vectors.

In addition, we are subject to cybersecurity risk in connection with vendors we utilize. For example, a weakness in vendor systems or software products that we use in the operation of our business may provide a mechanism for a cyber threat actor to access the Company’s systems or information through trusted paths. Recent global supply chain security incidents such as compromises of reputable software update services are illustrative of this type of occurrence. To date, Westwater has not been materially affected by cybersecurity incidents.

In light of the nature of the data at risk and the cyber-related threats faced by the Company, the Company employs an agency-wide cybersecurity detection, protection and prevention program for the protection of the Company’s operations and assets. This program includes cybersecurity protocols and controls, network protection, system monitoring and

detection processes, vendor risk management process, and regular cybersecurity and privacy training for employees. However, cybersecurity is an evolving landscape, and we are constantly learning from our own experiences as well as the experiences of others, and there can be no assurance that our processes and procedures will be successful in preventing all cybersecurity incidents.