HACKETT GROUP, INC.

Item 1C cybersecurity risk-management disclosure. The filer describes its cybersecurity program, governance (Board/Audit Committee oversight, Senior Director of IT reporting to CFO), incident response plan, third-party risk management, and ISO 27001 certification. The filing explicitly states no cybersecurity incidents have materially affected, or are reasonably likely to materially affect, the company's business operations or financial condition. No breach incident disclosed.