Academy Sports & Outdoors, Inc.

Item 1C of a 10-K filing describing a generic cybersecurity governance program. The company states it has implemented a cybersecurity program based on the NIST framework, including risk management, vendor assessment, and incident response plans. The filing explicitly states that risks from cybersecurity threats have not materially affected the company's business, results of operations, or financial condition, and no specific incident is disclosed.