Tianci International, Inc.

Cybersecurity: Risk Management and Strategy

We have developed and implemented a cybersecurity risk management program that is designed to protect the confidentiality, integrity, and availability of the Company’s data and systems. Our cybersecurity risk management program includes a cybersecurity incident response plan.

Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.

Our cybersecurity risk management program includes:

Additionally, the Company assesses and manages cybersecurity threats associated with itsthird party service providers’ information technology systems that could compromise the Company’s information security or data. Identified cybersecurity threats are communicated to management for review, response and mitigation as appropriate.

As of the date of this filing, we havenot identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.

Cybersecurity: Governance

Our Board of Directors considers cybersecurity risk within the Board’s risk oversight function. The Board of Directors has charged management with responsibility for oversight of cybersecurity risks and incidents and any other risks and incidents relevant to the Company’s computerized information system controls and security. The Board and its Audit Committee oversee management’s implementation of our cybersecurity risk management program.

Our Corporate Controller reviews the efficacy of our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the Company’s financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls, including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment of the Company’s internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company’s internal controls. Copies of the Corporate Controller’s report are also given to the CEO/CFO and made available to members of the Board of Directors. Copies of the auditor’s report are delivered to the members of the Board of Directors, which reviews and is responsible to cause a remediation of any material inadequacies in the controls environment.

Our Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as appropriate, regarding the Company’s cybersecurity program.