Company: BRID
Filing Date: 2025-01-29
Form Type: 10-K
Source: 0001493152-25-004182
Chunk: 13

Company: BRIDGFORD FOODS CORP
Filing Date: 2025-01-29
Form: 10-K
Item: Item 1
Chunk 13
---
 Technology Manager, our President and
our Chief Financial Officer (the “IT Steering Committee”) and the Audit Committee of our Board as part of the committees’
involvement in managing and overseeing cybersecurity risks.

Our cybersecurity risk management
program also includes processes to triage, assess the severity of, escalate, contain, investigate, and remediate an incident, as well
as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. If a cybersecurity incident is
determined to be a potentially material cybersecurity incident, our disclosure controls and procedures define the steps to determine materiality
and disclose such a material cybersecurity incident.

In addition, we engage
an independent third-party provider in connection with our cybersecurity risk management program to monitor cybersecurity threats and
provide certain security measures. We regularly engage with this provider to aid in the identification and remediation of potential threats.
This provider has qualifications that include Microsoft Certified: Security, Compliance, and Identity Fundamentals, Certified Information
Systems Security Professional (CISSP), Certified Hacking Forensic Investigator, Certified Ethical Hacker (CEH) and Security+.

While we believe that our
business strategy, results of operations or financial condition have not been materially adversely affected by any cybersecurity incidents,
cybersecurity threats are pervasive and, similar to other institutions, we, as well as our employees, customers, regulators, service providers,
and other third parties have experienced a significant increase in information security and cybersecurity risk in recent years and will
likely continue to be the potential target of cyber attacks. We continue to assess the risks and changes in the cyber environment and
invest in enhancements to our cybersecurity capabilities as deemed necessary to promote advancements in our cybersecurity capabilities.

 9 

Cybersecurity Governance

Our cybersecurity risk management
program is overseen by the Audit Committee and led by the IT Steering Committee. Our Audit Committee is responsible in overseeing risks
from cybersecurity threats, and has the authority to regularly review the adequacy of our cybersecurity, information and technology security,
and data privacy programs, procedures, and policies. Our IT Steering Committee, led by the Vice President of Information Technology,
is primarily responsible for monitoring, assessing, and managing material risks from cybersecurity threats.

The Audit Committee regularly
receives updates from the IT Steering Committee / management with respect to our efforts to manage data protection, cybersecurity, and
information and technology risks, and assesses the results of reviews from internal audits. Materials presented to our Audit Committee
by our IT Steering Committee include updates on our data security posture, results from