7 unchanged sentences
Our program is integrated into our operations and is widely communicated to employees through annual employee and contractor cybersecurity awareness training, regular awareness exercises, and employee outreach activities including cybersecurity tech talks, on-site digital signage, intranet resources, CEO cybersecurity champion recognition at quarterly town hall meetings, and other targeted communications.
−Removed: These awareness measures are coupled with ongoing implementation of technology aimed to reduce vulnerabilities (including external testing and validation) and to monitor and assess threats.
+Added: These awareness measures are coupled with ongoing implementation of technology aimed at reducing vulnerabilities (including external testing and validation) and to monitor and assess threats.
Our program includes monitoring on an ongoing basis by automated tools that detect threats and trigger alerts for assessment, investigation, and remediation by our internal cybersecurity team.
1 unchanged sentence
The cybersecurity program is an important part of the Company’s enterprise risk management (ERM), with our Senior Vice President & Chief Information Officer serving on our ERM Committee and our Vice President of ERM serving as the strategic crisis management coordinator under our cybersecurity incident response plan.
−Removed: We have developed processes for managing cybersecurity
−Removed: incidents including clear allocation of responsibilities and defined incident classifications, escalation requirements based on materiality, and prioritization parameters.
+Added: We have developed processes for managing cybersecurity incidents including clear allocation of responsibilities and defined incident classifications, escalation requirements based on materiality, and prioritization parameters.
Our cybersecurity incident response plan is integrated into our ERM Committee risk mitigation action plan process, our Senior Leadership Team (SLT) strategic crisis management action plan process, and our Disclosure Committee protocol for cybersecurity incidents.
28 unchanged sentences
The Company maintains a dedicated internal cybersecurity team that is supported by internal and external software, third-party experts, and threat intelligence resources.
−Removed: Members of our cybersecurity team provide cybersecurity reports to our Board, SLT, and cross-functional leaders and teams.
+Added: Members of our cybersecurity team provide cybersecurity reports to our Board, senior leadership team (SLT), and cross-functional leaders and teams.
The internal cybersecurity team is responsible for implementing our cybersecurity strategy including policies, standards, architecture, and processes including our processes for identifying cybersecurity risks and threats and recommending mitigating actions to strengthen cybersecurity resilience.
In addition, our internal cybersecurity team is responsible for managing detection, mitigation, and remediation of all cybersecurity incidents.
−Removed: Conagra’s Cybersecurity Team is led by our Chief Information Security Officer (CISO) .
+Added: Throughout fiscal 2026, Conagra’s Cybersecurity Team was led by our Chief Information Security Officer (CISO) .
Our CISO, a certified information security professional, has more than 25 years of cybersecurity leadership experience across multiple industries and holds a Doctor of Science (DSc) degree in Cybersecurity.
10 unchanged sentences
Our Board and its Audit/Finance Committee exercises oversight over our enterprise risk management including our cybersecurity program.
−Removed: The Audit/Finance Committee receives updates from our CIO or CISO at each of its regularly scheduled meetings regarding matters related to information technology and cybersecurity including the state of the Company’s cybersecurity programs, emerging cybersecurity developments and threats, and the Company’s strategy to mitigate cybersecurity risks.
+Added: The Audit/Finance Committee receives updates from our CIO or CISO at each of its regularly scheduled meetings regarding matters related to information technology and cybersecurity including the state of the Company’s cybersecurity programs, emerging cybersecurity developments and threats, the Company’s use of new technologies including AI, and the Company’s strategy to mitigate cybersecurity risks.
Additionally, our full Board receives reports on our cybersecurity program at least annually which includes a review of our cybersecurity incident response plans which are described above.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.