USANA HEALTH SCIENCES INC

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures that are designed to ensure that information that is required to be disclosed in our Exchange Act reports is recorded, processed, summarized, and reported within the time periods that are specified in the SEC’s rules and forms and that such information is accumulated and communicated to management, including our Chief Executive Officer (Principal Executive Officer) and Chief Financial Officer (Principal Financial and Accounting Officer), as appropriate, to allow timely decisions regarding any required disclosure. In designing and evaluating these disclosure controls and procedures, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives.

As of the end of the period covered by this report, our Chief Executive Officer and Chief Financial Officer evaluated the effectiveness of the design and operation of our disclosure controls and procedures (as defined in Rule 13a- 15(e) under the Exchange Act). Based on this evaluation, the Chief Executive Officer and Chief Financial Officer concluded that, as a result of material weaknesses in internal control over financial reporting related to information technology general controls (ITGCs) as described in Part II, Item 9A of our Form 10-K for the fiscal year ended December 30, 2023 (the “2023 Form 10-K”), the disclosure controls and procedures were not effective as of September 28, 2024.

Changes in Internal Control Over Financial Reporting

Other than with respect to the remediation efforts addressed below, there were no changes in our internal control over financial reporting during the three months ended September 28, 2024, that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Remediation Efforts to Address Material Weaknesses

As previously disclosed in Part II, Item 9A of the 2023 Form 10-K, we are implementing measures designed to ensure that the control deficiencies contributing to the material weaknesses are remediated, such that the relevant controls are designed, implemented, and operating effectively. The remediation actions are ongoing and include:

•Enhancing our IT organization that is responsible for the development, monitoring, and testing of the ITGCs to ensure sufficiency of resources with the appropriate knowledge, experience, and training; and

•Developing a training program addressing ITGCs and related policies, to educate control owners on the principles and requirements of internal control activities, including maintaining adequate evidence of the controls’ operation, and ensuring timely and consistent performance of the controls as designed.

We are executing our remediation plan to address each control deficiency, including advising with a third-party consultant with expertise in ITGCs to assist with risk assessment and control design, educating and training ITGC control owners, advising on relevant IT policies, and providing guidance with regard to sufficient control documentation to support the controls’ operation. Additionally, we have reviewed and updated IT policies, analyzed current processes and control documentation, and established the appropriate level of responsibility and ownership of ITGCs. We will continue our efforts to ensure that the control deficiencies contributing to the material weaknesses are remediated. The material weaknesses will not be considered remediated until the applicable controls operate for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively. We expect that the remediation of these material weaknesses will be completed prior to the end of fiscal year 2024.