7 unchanged sentences
We mitigate risks from cybersecurity incidents using a multi-faceted approach that includes, but is not limited to:
−Removed: establishing information security policies and standards, implementing information protection processes and technologies, assessing cybersecurity risk through vulnerability assessments and audits on an annual basis, reviewing newly developed cybersecurity standards or legislation, implementing cybersecurity training, monitoring our information technology systems for cybersecurity threats and collaborating with public and private organizations on best practices.
+Added: establishing information security policies and standards, implementing information protection processes and technologies, assessing cybersecurity risk through vulnerability assessments and audits on an annual basis, reviewing newly developed cybersecurity standards or legislation, implementing cybersecurity training, real-time monitoring our information technology systems for cybersecurity threats through a 7x24 security operations center and collaborating with public and private organizations on best practices.
We did not experience a material cybersecurity incident during the fiscal year ended December 26, 2025.
3 unchanged sentences
Our board of directors is engaged in overseeing and reviewing the Company’s strategic direction and objectives, including the Company’s risk profile and exposures as they relate to cybersecurity, conducting reviews of policies regarding risk assessment and risk management and major risk exposures, as well as evaluations of risks from potential or actual cybersecurity threats.
−Removed: Our Chief Information Officer, Vice President of Infrastructure, and Security Administrator have responsibility of cybersecurity oversight of the Company and each have 13, 16, and 7 years of cybersecurity experience, respectively.
−Removed: The Security Administrator reports to the Vice President of Infrastructure, who in turn reports to the Chief Information Officer.
+Added: Our chief information officer, vice president of enterprise infrastructure, senior manager of information technology risk management, and security administrator have responsibility of cybersecurity oversight of the Company and each have 15, 18, 10, and 9 years of cybersecurity experience, respectively.
+Added: The security administrator reports to the vice president of enterprise infrastructure, who in turn reports to the chief information officer.
Members of the board receive regular quarterly cybersecurity updates from our chief information officer, including updates on existing and new cybersecurity risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.