FULLER H B CO 10-K

Item 1B. Unresolved Staff Comments None. Item 1C. Cybersecurity Cybersecurity protection and data privacy are important to maintaining our proprietary information and the trust of our customers, suppliers and employees, and we recognize the importance of working to secure our data and information systems from potential cybersecurity and data privacy incidents. We are a large global manufacturer with sites around the world, and we identify and assess our cybersecurity risk through that lens. Securing the execution and control of our manufacturing operations, to the extent implemented through digital technology, is a primary area of focus. We also face risks encountered by substantially all large global companies such as the risks of intellectual property and information being compromised, fraud and violation of privacy or security laws. Our cybersecurity risk is managed as part of our broader enterprise risk management program. Specifically, a risk management workstream focused on our information technology function (including cybersecurity) is designed to assess, identify and manage cybersecurity-related risks and mitigation measures. Our cybersecurity risk program also includes a documented incident response plan to be used in the event of a cybersecurity incident. The incident response plan provides for certain responses based on various factors of a cybersecurity incident. We periodically assess and test our policies, standards, processes and practices that are designed to address cybersecurity threats and incidents, including those from third -party service providers who have access to our systems, data or are critical to our continued business operations. These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. We regularly engage third parties to perform assessments on our cybersecurity measures, including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness. The results of such assessments, audits and reviews are reported to senior management and, if warranted, to our audit committee, and we adjust our cybersecurity policies, standards, processes and practices as necessary based on the information provided by these assessments, audits and reviews. While some of our third -party service providers have experienced cybersecurity incidents and have experienced threats to their data and systems, as of the date of this report, we are not aware of any cybersecurity threats or incidents that have materially affected our business strategy, results of operations, or financial condition. This does not guarantee that future incidents or threats will not have a material impact by interrupting operations, causing reputational harm, increasing operating costs, or exposing the Company to litigation. For additional commentary on cybersecurity risks, see Part 1, Item 1A. Risk Factors. Governance and Management's Responsibilities Our Board of Directors views the identification and effective management of cybersecurity threats as a critical component of overall risk management and oversight responsibilities and has delegated responsibility for oversight of this risk to the audit committee. The audit committee oversees the management of risks arising from cybersecurity threats and regularly reports to the Board of Directors regarding cybersecurity. Our audit committee oversees our enterprise risk management (“ERM”) process, and cybersecurity represents an important component of our overall approach to ERM. Our cybersecurity policies, standards, processes and practices are informed by the National Institute of Standards and Technology (NIST) Cybersecurity Framework and applicable industry standards. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional program that is focused on identifying, assessing, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur. 11 Table of Contents To manage our cybersecurity program, management has established a cybersecurity steering committee and cybersecurity incident response team, both led by our chief information officer. Our cybersecurity steering committee and cybersecurity incident response team include multidisciplinary groups of corporate and operational leaders, external cyber-specialist resources and technical experts in cybersecurity risk management, incident response and security operations. Many members of our cybersecurity team have extensive experience in the operations of networks, network security and infrastructure management. Our chief information officer has over 20 years of information technology experience, including leadership roles at large, global, publicly-traded companies, and is informed about and monitors prevention, detection, mitigation, and remediation efforts through regular communication and reporting from professionals on the cybersecurity steering committee and cybersecurity incident response team, and through the use of technological tools and software. Our chief information officer is also responsible for updating the audit committee on cybersecurity on a quarterly basis and, where appropriate, escalating certain cybersecurity incidents to the full Board of Directors. Item 2. Propertie s Principal executive offices and central research facilities are located in the St. Paul, Minnesota area. These facilities are company-owned. Manufacturing operations are carried out at 33 plants located throughout the United States and at 44 plants located in 24 other countries. In addition, numerous sales and service offices are located throughout the world. We believe that the properties owned or leased are suitable and adequate for our business. Operating capacity varies by product line, but additional production capacity is available for most product lines by increasing the number of shifts worked. The following is a list of our production facilities as of November 29, 2025 (each of the listed properties are owned by us, unless otherwise specified): Hygiene, Health and Consumable Adhesives Engineering Adhesives Australia Dandenong South France Surbourg Australia Sydney 1 Germany Wunstorf Brazil Curitiba 1 Germany Nienburg Brazil Guarulhos Italy Pianezze Colombia Rionegro People's Republic of China Beijing Egypt 6th of October City - CPC Industrial Park People's Republic of China Chongqing Finland Valkeakoski 1 People's Republic of China Nanjing France Blois People's Republic of China Suzhou Germany Lueneburg People's Republic of China Yantai Greece Lamia Portugal Mindelo India Pune Taiwan Kaohsiung City 1,2 Indonesia Mojokerto Turkey Bursa 1,2 Ireland Dublin 1 Turkey İstanbul 1,2 Italy Viareggio United Kingdom Preston 1 Kenya Nairobi 1 United States California - Irvine 1 Malaysia Selangor United States California - Wilmington 1 New Zealand Auckland 1 United States California - Santa Fe Springs 1,2 People's Republic of China Guangzhou United States Georgia - Ball Ground 1 Sweden Landskrona United States Georgia - Norcross 1 United Kingdom Dukinfield United States Illinois - Frankfort - Corsair United Kingdom Milton Keynes 1 United States Illinois - Frankfort - West Drive United States California - Roseville United States Illinois - Northbrook 1,2 United States Georgia - Covington United States Illinois - Rockford 2 United States Georgia - Tucker United States Indiana - South Bend United States Illinois - Seneca United States Michigan - Clawson 1,2 United States Kentucky - Paducah United States Michigan - Grand Rapids United States Minnesota - Vadnais Heights United States Michigan - Troy 1 United States New York - Syracuse 1 United States Ohio - Bellevue 1 United States North Carolina - Hudson United States Ohio - Twinsburg 1,2 United States Ohio - Blue Ash United States Texas - Arlington 2 United States South Carolina - Simpsonville United States Texas - Mesquite Idle Facilities United States Washington - Vancouver Brazil Sorocaba Canada Ontario - Toronto 1 Building Adhesive Solutions Chile Santiago Belgium Willebroek Egypt 6th of October City - 3rd Industrial Zone Germany Langelsheim 1 Germany Frankfurt 1 - Vilbeler Germany Pirmasens Philippines Manila Mexico Coahuila 1 United States North Carolina - Charlotte United Arab Emirates Ras Al-Khaimah 1 United Kingdom Kirkby in Ashfield United Kingdom Lymington United Kingdom Mansfield 1 United Kingdom Staffordshire United States Michigan - Michigan Center United States Minnesota - Fridley United States Minnesota - Maple Grove United States Ohio - Chagrin Falls United States Texas - Houston 1 Leased Property 2 Application Center 12 Table of Contents