ENNIS, INC.

Form 10-K Item 1C cybersecurity disclosure describes the registrant's NIST CSF-based cybersecurity risk management program, governance by the Board, Audit Committee, and Director of Information Technology, and annual third-party risk assessments and penetration testing. The filer states that during the fiscal year ended February 28, 2026, no cybersecurity risks or threats materially affected business operations or financial condition. No specific incident is disclosed.