FibroBiologics, Inc.

Risk Management and Strategy

We have processes forassessing, identifying, and managing cybersecurity risks that include physical, procedural, and technical safeguards to identify, assess and mitigate risks from cybersecurity threats.

We have engaged an external Information Technology Managed Service Provider, or IT MSP, to support our management team’s maintenance of our information technology systems and infrastructure. A member of our executive leadership team provides oversight of the activities of the IT MSP to monitor cybersecurity controls. Further, through diligence and/or contract, we assess the cybersecurity posture of certain third parties.

Governance

Our management team is responsible for assessing and managing cybersecurity risks, and is informed by our IT MSP regarding cybersecurity matters.

The Audit Committee of our Board of Directors is responsible for oversight of enterprise risk management, including cybersecurity risk management. The Audit Committee, with assistance from the Governance and Nominating Committee of our Board, reviews our processes for assessing and managing such risks. The Audit Committee and Governance and Nominating Committee receive periodic updates from management regarding cybersecurity matters.

We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, we and our third-party service providers experience threats and security incidents that could affect our information or systems. For more information, please see Section 1A. Risk Factors.