BIOLIFE SOLUTIONS INC

We have a thorough process for identifying, assessing, and managing cybersecurity risks within our broader risk management framework. We gather insights from external experts and internal threat intelligence teams for our cybersecurity risk management program. A dedicated team oversees cybersecurity risk management, led by professionals with deep expertise, including our Vice President, Cybersecurity and Information Security Officer. Our executive leadership, supported by our cybersecurity team, oversees our enterprise risk management and regularly considers cybersecurity and other material risks.

Within our cybersecurity risk management system, our incident management team tracks and logs privacy and security incidents across the Company and third-party service providers. Significant incidents undergo review by a cross-functional group, with immediate escalation for potentially material incidents. We consult with outside counsel as needed, with final decisions made by senior management.

The Audit Committee oversees cybersecurity risks and incidents, ensuring compliance with disclosure requirements and cooperation with law enforcement. Senior management regularly updates the committee on cyber risks and any material incidents.

While our business strategy and financial condition have not been materially affected by cybersecurity risks, we cannot guarantee future immunity. For more details, refer to Item 1A Risk Factors in our Annual Report on Form 10-K.