NeoVolta Inc.

Risk Management and Strategy

Due to our small size, we have not established formal policies and procedures for assessing, identifying, and managing material risk from cybersecurity threats. However, we monitor cybersecurity threats internally, including any potential unauthorized occurrence on or conducted through our information systems that we use through third party providers that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.

We conduct occasional risk assessments and perform as needed updates to our risks to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. We do not engage consultants, third parties and auditors in connection with our risk assessment processes.

As of June 30, 2026, and through the date of the filing of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.

Governance

One of the key responsibilities of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face and are responsible for reporting to our board of directors any cybersecurity incidents.

At present, our executive officers do not have specialized cybersecurity credentials, although they possess experience in corporate risk management and regulatory compliance applicable to their oversight responsibilities. Our Executive Vice President, Steve Bond, and our Chief Financial Officer, Jing Nealis, have both served as financial officers of public companies for over five years. Due to our small size, our board of directors has not designated any Board committee or any other subset of Board members to provide oversight of our cybersecurity program as part of a periodic review of our overall risk management program.