Medtronic, Inc.

Medtronic's 10-K Item 1C cybersecurity disclosure describes its NIST CSF 2.0-based cybersecurity risk management program, incident response planning, third-party risk assessments, employee training, and governance structure (CISO reporting to CIO; Board Quality and Audit Committees oversight). The Company states it is not aware of any cybersecurity incident that has had, or is reasonably likely to have, a material impact on its business or operations. No specific incident is disclosed.