CAL-MAINE FOODS INC

Risk Management

and Strategy

We

understand

the importance

of cybersecurity

and its

role in

the success

of the

depend on

the effective

use of

our information

systems

in order to

properly

serve our

manage

our business and

track and

report

our

results.

Our

team

risks

from

threats

in

the

implementation

and

execution

of

our

We

consider

and

assess

the

risks

from

threats

as

part

of

our

overall

risk

process

using the National

Institute

of Standards

and

(“NIST”) Cybersecurity

Framework.

In order to identify, assess

and manage material

risks

arising from cybersecurity

threats, we maintain

internal resources to monitor

and quickly

respond

to such

threats. We

perform vulnerability

scans and

testing designed

to test the effectiveness

of

our

We

engage

third

-party

service

to

assist

in

the

of

our

over

our

systems

through audit

and

consulting services

to

test the

design

and

of security

controls.

We

continually monitor

our systems to detect and

identify cybersecurity

threats. Prior to contracting

with third-party

vendors,

we

perform risk assessments

of the vendors

and require the

vendors to manage

cybersecurity risks to our business

as well

as

notify

us of

any

or

known

risks.

We

also

require

our

to

complete

training

to

their

awareness

of and

sensitivity

to

These

training

include

the

identification

of

such

threats

and

the proper

responses

to a

beach

that

aligns with our adopted

has developed

a response process in the event of a cybersecurity

incident.

The process includes

the cooperation of

team

and our

team

to properly

detect

and

respond

These responses

include

of

the

impact

and

materiality

of

the

incident,

and

matters,

and

mitigation

of

actual

or

damage

to

our

systems

or

arising

from

the

incident.

Mitigation

are

to respond to any

potential cybersecurity

breach in order to continue

to effectively

serve our customers

and conduct

our

with

as

little

as

practicable.

The

team

reviews

the

response

process

periodically

to ensure

that

it is

to be effective

and

to encompass

current or new cybersecurity

As of July 22, 2026, we are

no

t aware of any risks from cybersecurity threats, including as a result of prior cybersecurity

incidents,

that

have

materially affected

or that

we believe

are reasonably

affect

the Company,

including our

strategy,

results

of

or

See

for

further

about

risks

from

Governance

The Board

is responsible

for the

oversight

process for identifying

and mitigating

risks related

to cybersecurity

On a quarterly basis, the Director

provides a report to the Audit Committee

regarding ongoing

processes

to improve

and update

our current

protocols,

new cybersecurity

threats,

assessments,

and any

recent cybersecurity

The

Audit

will make

the Board aware

of any

it deems necessary

or appropriate

in order for the

Board

to effectively

oversee the

risk management

and

strategy.

The

and

the

team

he

manages

are

responsible

for

the

and

of our

systems, including

the assessment,

identification

and management

of risks from cybersecurity

Together,

the

and his

team

have over

150 years

of experience

in the

technology and

environment.

Our

Chief Financial Officer

, to whom the Director of Information

Technology reports, has served as Chief Financial

Officer

and

a Board

member

since 2018

and

has

over 40

years of

risk management

experience.