Perimeter Solutions SA

Cybersecurity Risk Management and Strategy

We have processes in place for assessing, identifying, and managing material risks from cybersecurity threats which have been integrated into the Company’s overall risk management strategy and processes. The Company seeks to address cybersecurity risks through a comprehensive approach that is focused on implementing robust protective measures, promoting user awareness and education, continuously monitoring for potential threats, and swiftly responding to any security incidents to ensure the confidentiality, integrity, and availability of sensitive information.

In addition, we actively engage with key vendors and industry communities as part of our continuing efforts to evaluate and enhance the effectiveness of our information security policies and procedures and have processes in place to oversee and identify the risk of cybersecurity threats associated with our use of these third-party vendors. We generally require third parties to, among other things, maintain security controls to protect our confidential information and data, and notify us of material cybersecurity threats that may impact our business.

In 2023, we did not identify any cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.

Governance

Our Board has oversight of our strategic and business risk management and has delegated the oversight of cybersecurity risk management to the Company’s Audit Committee. The Company’s Audit Committee is responsible for overseeing all matters relating to the security of and risks related to the Company’s information technology systems and procedures, including its cybersecurity and other information technology risks. The Audit Committee is responsible for ensuring the Company has processes in place for assessing, identifying and managing material risks from cybersecurity threats.

The Company’s information security program is managed by the Company’s Chief Information Officer (the “CIO”), whose team is responsible for leading our enterprise-wide cybersecurity strategy, policy, standards, architecture, and processes. The CIO has extensive global experience in developing and executing information technology strategies. The CIO and the information security team, in collaboration with the Chief Financial Officer and the Audit Committee, monitor the prevention, detection, mitigation and remediation of cybersecurity incidents.

The CIO provides periodic reports to our Board, as well as our Chief Financial Officer and other members of our senior management as appropriate. These reports include updates on the Company’s cyber risks and threats, the status of projects to strengthen our information security systems, assessments of the information security program, and the emerging threat landscape.