ASTRONICS CORP

Information security is fundamental to the Company’s global operations. We employ robust, security practices and incorporate software and product security engineering to protect our networks, systems, and data from cyber threats. Our cybersecurity strategy focuses on timely detection, analysis, and response to known and emerging threats, disciplined cyber risk management, and maintaining resilience in the face of potential incidents.

We seek to stay ahead of evolving standards by striving to exceed industry best practices and implementing risk-based controls to safeguard information and information systems belonging to both the Company and our partners. To protect our commercial and defense-related businesses and support production operations, the Company follows security principles aligned with the National Institute of Standards and Technology Cybersecurity Framework, applicable contractual obligations, and other global standards.

The Company provides ongoing training to employees on the protection of sensitive information, including regular security awareness programs designed to reduce the risk of successful phishing and related attacks. We also utilize industry and government associations, third-party benchmarking, audits, and threat-intelligence sources to assess and enhance the effectiveness of our cybersecurity program and guide proactive resource allocation.

The Company’s Director of Information Technology provides a report to the Board of Directors on an annual basis, or more frequently as needed, with respect to information security activity, security assessments, controls and investments.

The Company has in place a Cyber Risk Liability and Technology Errors and Omissions Insurance policy written by AXA XL for a twelve-month term expiring July 1, 2026. The twelve-month premium was $186,000. The policy has a limit of $5 million in the aggregate and provides coverage related to data breaches and other cyber security measures.