Solid Power Inc

Risk Management and Strategy

We use various tools and methodologies, including third-party services, to assess, identify, and manage cybersecurity threats. For example, we utilize third-party servicesto monitor the security and integrity of our information systems and the other third-party information systems upon which we rely on an ongoing basis. We also engage athird-party cybersecurity auditorfor periodic penetration and vulnerability testing and assessment of our processes. Our information technology department oversees cybersecurity risk management andreports significant incidents to management. We consult with our advisors as appropriate, including on materiality analysis and disclosure matters, and management makes the final materiality determinations and disclosure and other compliance decisions.

We have not identified risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, but we cannot guarantee that we will not be materially affected in the future by such risks or any future cybersecurity incidents. For more information, see “Part I, Item A. Risk Factors—Risks Related to Legal and Regulatory Compliance—We may be adversely impacted by a disruption or failure of our information technology infrastructure, data security breach, or failure to comply with privacy laws.”

Governance

The Board has delegated primary responsibility for oversight of our cybersecurity risk exposures tothe Audit Committee of the Board, andthe Audit Committee of the Board receives routine updates on cybersecurity matters from our Director of Information Technology and other members of management. Our Director of Information Technology leads our cybersecurity efforts and has 15 years of information technology experience. There are no management positions directly responsible for overseeing our cybersecurity risk. Rather, our Director of Information Technology and our broader information technology department work closely with members of management to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.