Company: FWRG
Filing Date: 2025-04-08
Form Type: ARS
Source: 0001789940-25-000033
Chunk: 61

Company: First Watch Restaurant Group, Inc.
Filing Date: 2025-04-08
Form: ARS
Chunk 61
---
 cybersecurity threats or incidents that have materially affected us. However, any actual or perceived breach in the security of our information technology systems or those of our franchisees or our critical vendors and service providers could lead to damage to or failure of our computer systems or network infrastructure which could cause an interruption in our operations and could have a material adverse effect on our business. Furthermore, a significant theft, loss, disclosure, modification or misappropriation of, or access to, guests’, employees’, third parties’ or other proprietary data or other breach of our information technology systems could subject us or our franchisees to litigation or to actions by regulatory authorities. See also Item 1A. “Risk Factors - Risks Related to Information Technology and Intellectual Property—Information technology system failures or breaches of our network security could interrupt our operations and have a material adverse effect on our business, financial condition and results of operations.” Governance The Audit Committee of our Board is tasked with oversight of certain risk issues, including cybersecurity. The Audit Committee receives reports on cybersecurity at least twice annually from the Company’s Chief Information Officer, who has over 25 years of experience in the management of information technology systems and cybersecurity. These reports cover trends vulnerability management, cybersecurity posture, risk assessment findings, incident responses and updates on technology initiatives. The Audit Committee briefs the full Board of Directors on these matters as a part of its reports of its meetings. 36

and 83 franchise-owned restaurants located in 29 states, including a large presence in Florida, Texas, Ohio, North Carolina and Arizona. As of December 29, 2024, company-owned and franchise-owned restaurants by jurisdiction were: State Company- owned Franchise- owned Total Alabama 6 — 6 Arizona 35 — 35 Arkansas — 3 3 Colorado 19 — 19 Delaware 4 — 4 Florida 133 — 133 Georgia 23 — 23 Illinois 8 — 8 Indiana 7 1 8 Kansas 13 — 13 Kentucky 2 15 17 Louisiana — 1 1 Maryland 15 — 15 Michigan 11 — 11 Mississippi — 1 1 Missouri 18 7 25 Nebraska 7 — 7 New Jersey 7 — 7 North Carolina 24 12 36 Ohio 44 — 44 Oklahoma 2 — 2 Pennsylvania 19 — 19 South Carolina 5 5 10 Tennessee 15 9 24 Texas 45 23 68 Utah — 1 1 Virginia 22 4