Company: CAG
Filing Date: 2025-07-10
Form Type: 10-K
Source: 0001558370-25-009180
Chunk: 17

Company: CONAGRA BRANDS INC.
Filing Date: 2025-07-10
Form: 10-K
Item: Item 1C
Chunk 17
---
ITEM 1C. CYBERSECURITY

Risk Management and Strategy​Assessing, Identifying and Managing Material Risks​Our cybersecurity program is focused on assessing, identifying, and managing risks arising out of our use of information technology including the risk of cybersecurity incidents and threats. Our program is informed by recognized frameworks (such as the U.S. Department of Commerce’s National Institute of Standards and Technology Cybersecurity Framework) and leverages external and internal expertise, as appropriate. Our program is integrated into our operations and is widely communicated to employees through annual employee and contractor cybersecurity awareness training, regular awareness exercises, and employee outreach activities including cybersecurity tech talks, on-site digital signage, intranet resources, CEO cybersecurity champion recognition at quarterly town hall meetings, and other targeted communications. These awareness measures are coupled with ongoing implementation of technology aimed to reduce vulnerabilities (including external testing and validation) and to monitor and assess threats. Our program includes monitoring on an ongoing basis by automated tools that detect threats and trigger alerts for assessment, investigation, and remediation by our internal cybersecurity team.​Integration with Enterprise Risk Management​The cybersecurity program is an important part of the Company’s enterprise risk management (ERM), with our Senior Vice President & Chief Information Officer serving on our ERM Committee and our Vice President of ERM serving as the strategic crisis management coordinator under our cybersecurity incident response plan. We have developed processes for managing cybersecurity