STRATTEC SECURITY CORP

We take cybersecurity threats seriously, including regular assessment of cybersecurity risks both internally and with third party assistance and updates to the Board of Directors at least annually. We use the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) as the basis for the information security management system. As we implement new technologies, the NIST CSF is used as the guiding framework. Among other best practices, we use multi-factor authentication wherever possible for external access to systems, assess and update current versions of security solutions, perform regular cybersecurity training and email phishing campaigns for employees, use third parties to perform external penetration testing, and maintain disaster recovery and incident response plans, which include retainer contracts for third party cybersecurity response specialists. We employ a combination of methods to monitor for new or developing cybersecurity risks.

The Board regularly receives reports and training from management and third parties on cybersecurity matters. Management is responsible for developing cybersecurity programs, as may be required by applicable law or regulation. Our cybersecurity personnel have the appropriate expertise in IT and cybersecurity, which generally has been gained from a combination of education, including relevant degrees and/or certifications, and prior work experience. Our cybersecurity personnel, along with third parties, monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents as part of the cybersecurity programs described above. Incidents, if any, are escalated to management and the Board according to our incident response policy. There have been no material cybersecurity incidents in the periods presented.