NATIONAL BEVERAGE CORP 10-K

ITEM 1B. UNRESOLVED STAFF COMMENTS None. ITEM 1C. CYBERSECURITY Cybersecurity Risk Management and Strategy. We have developed and continue to evolve our cybersecurity risk management strategy designed to protect our data and ensure the availability of our critical information systems. Key components of our cybersecurity risk management strategy include: ● The use of current cybersecurity systems and technologies providing a multi-tier approach to identifying, assessing and mitigating current and emerging cybersecurity risks. ● An experienced internal security team responsible for managing our cybersecurity risk assessment processes, security controls and our response to cybersecurity incidents. ● The use of external service providers that augment our internal cybersecurity resources. ● Cybersecurity awareness training of our employees, incident response personnel and senior management. In addition, the Company has established response procedures to address cyber events that may occur. Our incident response plan coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents and includes a contractual relationship with an external and cybersecurity response team. We also maintain insurance coverage that, subject to its terms and conditions, is intended to reimburse certain costs associated with cyber incidents and information systems failures. During Fiscal 2026, there were no identified cybersecurity incidents that had, or were reasonably likely to have, a material effect on our business strategy, results of operations or financial condition. We continue to monitor potential cybersecurity threats and incorporate findings into our risk management strategies. See “Item 1A. Risk Factors” for a discussion of cybersecurity risks. Cybersecurity Governance . Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management program and receives periodic reports from management on our cybersecurity risk management. Our management team, led by our Director of Information Technology who has over 30 years of experience in Information Technology, is responsible for assessing, identifying and managing material cybersecurity risks to our business.