Company: BRID
Filing Date: 2025-01-29
Form Type: 10-K
Source: 0001493152-25-004182
Chunk: 129

Company: BRIDGFORD FOODS CORP
Filing Date: 2025-01-29
Form: 10-K
Item: Item 1B
Chunk 129
---
None.

Item 1C. Cybersecurity

We maintain an information
security and cybersecurity program, as well as a cybersecurity governance framework, which are designed to protect our information systems
against operational risks related to cybersecurity.

Cybersecurity Risk Management and Strategy

We recognize the importance
of assessing, identifying, and managing material risks associated with cybersecurity threats which include, among other things, operational
risks, intellectual property theft, fraud or extortion, harm to employees or customers, violation of privacy or security laws and related
litigation and legal risk, and reputational risks.

We have developed and implemented
a cybersecurity risk management program overseen by our Audit Committee intended to protect the confidentiality, integrity, and availability
of our critical systems and information, and detect and contain any cybersecurity incidents that impact us. The program is integrated
into our overall risk management systems and processes, and includes a cybersecurity risk assessment process that routinely evaluates
potential impacts of cybersecurity risks on our business, including risks from cybersecurity threats associated with our use of third-party
service providers. These assessments inform our cybersecurity risk mitigation strategies. The results are regularly shared with our information
technology committee comprised of our Vice President of Information Technology, our Information Technology Manager, our President and
our Chief Financial Officer (the “IT Steering Committee”) and the Audit Committee of our Board as part of the committees’
involvement in managing and overseeing cybersecurity risks.

Our cybersecurity risk management
program also includes processes to triage, assess the severity of, escalate, contain, investigate, and remediate an incident, as well
as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. If a cybersecurity incident is
determined to be a potentially material cybersecurity incident, our disclosure controls and procedures define the steps to determine materiality
and disclose such a material cybersecurity incident.

In addition, we engage
an independent third-party provider in connection with our cybersecurity risk management program to monitor cybersecurity threats and
provide certain security measures. We regularly engage with this provider to aid in the identification and remediation of potential threats.
This provider has qualifications that include Microsoft Certified: Security, Compliance, and Identity Fundamentals, Certified Information
Systems Security Professional (CISSP), Certified Hacking Forensic Investigator, Certified Ethical Hacker (CEH) and Security+.

While we believe that our
business strategy, results of operations or financial condition have not been materially adversely affected by any cybersecurity incidents,
cybersecurity threats are pervasive and, similar to other institutions, we, as well as