Company: JOUT
Filing Date: 2025-12-12
Form Type: 10-K
Source: 0001140361-25-045348
Chunk: 20

Company: JOHNSON OUTDOORS INC
Filing Date: 2025-12-12
Form: 10-K
Item: Item 1A
Chunk 20
---
    CYBERSECURITY

Risk Management and Strategy

We take cybersecurity threats seriously.  We have developed and implemented processes to assess, identify and manage material risks from cybersecurity threats.  These cybersecurity processes are a part of our overall enterprise risk management system, sharing governance processes and reporting structures with other components of our enterprise-wide risk management system. Our cybersecurity processes include security monitoring and threat hunting through a third-party managed vendor and mandatory, Company-wide employee training. Our cybersecurity processes also extend to the oversight and identification of risks associated with our vendors and customers if their computer systems interface with our information systems. Upon detection of a potentially material cybersecurity incident, we will activate our cyber incident procedure to investigate, contain and remediate the incident. Depending on the extent and severity of the incident, we may engage third-party cybersecurity consultants to assist with our cyber incident procedure.  Risks from cybersecurity threats have the potential to materially affect us, including our results of operations and financial condition. 

Governance

The Company has established an Enterprise Risk Committee, which is co-chaired by the Company’s Chief Financial Officer and Senior Managing Director of Legal Affairs, and under that framework has chartered a Cybersecurity Sub-Committee, chaired by the Chief Technology Officer.  Both committees include various other members of key senior management.  Our Board of Directors (including our Audit Committee through delegation as described below), along with our Enterprise Risk 

14

Committee and Cybersecurity Sub-Committee, are actively involved in providing oversight of our cybersecurity program.  The role of the Board of Directors in the Company’s risk oversight process includes receiving reports and presentations from the Enterprise Risk Committee or other senior management leaders on areas of material risk to the Company, including operational, financial, legal and regulatory, strategic, reputational, cybersecurity and Environmental, Social and Governance (“ESG”) related risks and any measures taken to mitigate such risks. In addition, the Board of Directors regularly reviews and discusses areas of material risk at its meetings. In essence, the Board of Directors oversees a company-wide approach to risk management, carried out by Company management.  With respect to cybersecurity risk, the Board (through the Audit Committee) periodically reviews information on management’s policies and processes related to the Company’s cybersecurity and data-protection measures, including related to monitoring, controlling and mitigating against such risks, and the entire Board receives periodic updates on the Company’s cybersecurity risk management processes.  There have been no material cybersecurity incidents in the periods presented in this Report.