Global Water Resources, Inc.

Item 1C disclosure describes general cybersecurity risk management policies, including defense-in-depth, independent expert assessments, employee training, and incident response planning. The Company explicitly states it is not aware of any cybersecurity threats that have materially affected or are reasonably likely to materially affect its business, results of operations, or financial condition. No specific incident is disclosed.