ICHOR HOLDINGS LTD

Evaluation of Disclosure Controls and Procedures

We carried out an evaluation under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer (the certifying officers), of the effectiveness of the design and operation of our disclosure controls and procedures (as defined in Rules 13a‑15(e) and 15d‑15(e) under the Exchange Act) as of December 29, 2023. There are inherent limitations to the effectiveness of any system of disclosure controls and procedures, including the possibility of human error and the circumvention or overriding of the controls and procedures. Accordingly, even effective disclosure controls and procedures can only provide reasonable assurance of achieving their control objectives. Based on this evaluation, our certifying officers concluded that our disclosure controls and procedures were effective as of December 29, 2023.

Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting (as defined in Rules 13a‑15(f) and 15d‑15(f) under the Exchange Act). With the participation of our certifying officers, our management, under the oversight of our Board of Directors, evaluated the effectiveness of our internal control over financial reporting as of December 29, 2023, using the framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”) in Internal Control – Integrated Framework (2013). Our internal control over financial reporting is designed to provide reasonable assurance with U.S. GAAP and includes those policies and procedures that: (1) pertain to the maintenance of records that in reasonable detail accurately and fairly reflect our transactions and the dispositions of our assets; (2) provide reasonable assurance that our transactions are recorded as necessary to permit preparation of the financial statements in accordance with GAAP and that our receipts and expenditures are being made in accordance with appropriate authorizations; and (3) provide reasonable assurance regarding the prevention or timely detection of unauthorized acquisition, use or disposition of our assets that could have a material effect on our financial statements.

Based on that evaluation, management concluded that our internal control over financial reporting was effective as of December 29, 2023.

Remediation of Prior Years' Material Weaknesses

As disclosed in Item 9A.– Controls and Procedures in our Annual Report on Form 10-K for the fiscal year ended December 30, 2022, we identified a material weakness related to ITGCs in the areas of user access and program change management over an information technology system (“IT System”) that supports our financial reporting process. We did not have resources within the organization with sufficient levels of information technology knowledge and did not perform risk assessment surrounding the IT System to adequately understand how areas of user access and program change management function within the IT System in order to design and operate ITGCs sufficient to mitigate the identified risks.

As of December 29, 2023, management has completed the implementation of our remediation efforts of the material weakness described above. During the fiscal year ended December 29, 2023, we implemented our material weakness remediation plan that included: (i) modification of business and IT user roles to restrict system change access for key setup and configurations related to the operation of automated system controls; (ii) implementation of a technology tool to approve, monitor and review changes by business users to certain setup and maintenance activities which can have a material impact on the operation of automated system controls; and (iii) enhanced our internal control function with additional resources and developed and provided training for control owners and operators including the principles and requirements of the control activities.

During the fourth quarter of 2023, we completed our testing of the operating effectiveness of the implemented controls and found them to be effective. As a result we have concluded the material weakness has been remediated as of December 29, 2023. Our independent registered public accounting firm, KPMG, LLP, has issued an attestation report on the effectiveness of our internal control over financial reporting, which is included in Item 8. - Financial Statements and Supplementary Data of this Annual Report on Form 10-K.

Changes in Internal Control Over Financial Reporting

Other than the changes in connection with our implementation of the material weakness remediation plan discussed above, there have been no other changes in our internal control over financial reporting (as defined in Rules 13a‑15(f) or 15d‑15(f) of the Exchange Act) that occurred during the fourth quarter of December 29, 2023 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations on Effectiveness of Controls and Procedures

A company’s internal control over financial reporting is a process designed by, or under the supervision of, a company’s principal executive and principal financial officers, or persons performing similar functions, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with GAAP. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with policies or procedures may deteriorate. If we cannot provide reliable financial information, our business, operating results, and share price could be negatively impacted.