Company: THS
Filing Date: 2025-02-14
Form Type: 10-K
Source: 0001320695-25-000007
Chunk: 60

Company: TreeHouse Foods, Inc.
Filing Date: 2025-02-14
Form: 10-K
Item: Item 1C
Chunk 60
---
Item 1C.    Cybersecurity

Risk Management and StrategyOur cybersecurity program and controls are designed to assess, identify, and manage material risks from cybersecurity threats, and protect and preserve the confidentiality, integrity, and continued availability of all information owned by, or in the care of, the Company. Cybersecurity risk is incorporated into the Company’s broader Enterprise Risk Management program, and is managed in alignment with our business objectives and operational needs.  Our information systems are continuously monitored for security threats and anomalies, and our incident response plan and processes are built to enable us to identify, contain, eradicate, and recover from security incidents in a coordinated fashion, helping maintain the function and security of our IT assets, information resources, and business operations. We have formed relationships with various third-party experts and advisors to provide support in the event of a cybersecurity incident. Additionally, we have established various elements of risk management to mitigate costs associated with cybersecurity incidents. We strive to maintain a strong culture of cybersecurity awareness across the organization by conducting regular information security awareness training, and simulation exercises, for employees, and providing access to related educational materials.  We oversee and identify material risks from cybersecurity threats associated with our use of third-party service providers, perform third party security assessments of select third party service providers, and employ techniques to protect our organization in the event our third parties experience a cybersecurity incident.  We employ controls to continuously monitor and assess the information gathered by our security tools, services to identify gaps, exposures, or weaknesses in our overall security posture, and engage reputable external specialists to provide independent assessments of our cybersecurity program, and response preparedness. Further, the Company’s enterprise level IT general controls are audited annually.  Impact of Cybersecurity Risks and ThreatsWe are not aware of having experienced any risks from cybersecurity threats or incidents through the date of this Report that have materially affected the Company, its business strategy, results of operation or financial condition or are reasonably likely to have such an effect over the long term. This does not guarantee that future incidents or threats will not have a material impact or that we are not currently the subject of an undetected incident or threat that may have such an impact.  

Additional information on cybersecurity risks we face is discussed in Part I, Item 1A – Risk Factors, which should be read in conjunction with the foregoing information. 

Governance

Board of DirectorsOur Board of Directors oversees our Enterprise Risk Management program, and cybersecurity risks are monitored as a part of the broader program. Our Board has delegated the primary responsibility