First Watch Restaurant Group Inc

Evaluation of Disclosure Controls and Procedures

We are responsible for establishing and maintaining disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), that are designed to ensure that information required to be disclosed in our reports filed or submitted under the Exchange Act, such as this Annual Report on Form 10-K, is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms.

Disclosure controls and procedures also include, without limitation, controls and procedures that are designed to ensure that such information is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure.

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures as of the end of the period covered by this Annual Report on Form 10-K. Due to the material weaknesses in our internal control over financial reporting discussed below, our Chief Executive Officer and Chief Financial Officer concluded that, as of December 31, 2023, our disclosure controls and procedures were not effective. In light of this fact, our management has performed additional analyses, reconciliations, and other post-closing procedures and has concluded that, notwithstanding the material weaknesses in our internal control over financial reporting, the consolidated financial statements for the periods covered by and included in this Annual Report on Form 10-K fairly present, in all material respects, our financial position, results of operations and cash flows for the periods presented in conformity with GAAP.

Management’s Report on Internal Control Over Financial Reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rule 13a-15(f) and 15d-15(f). Under the supervision and with the participation of our management, including our CEO and CFO, we conducted an evaluation of the effectiveness of our internal control over financial reporting. Management has adopted the framework in “Internal Control-Integrated Framework” (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”).

Based on management’s assessment of the effectiveness of the Company’s internal control over financial reporting as of December 31, 2023 based on the COSO framework, management has determined that the Company’s internal control over financial reporting as of December 31, 2023 was not effective.

We identified material weaknesses in our internal control over financial reporting. The material weaknesses we identified were as follows:

We did not design and maintain an effective internal control environment commensurate with the financial reporting requirements of a public company. Specifically, we lacked a sufficient complement of personnel with an appropriate level of knowledge, experience and training in internal control over financial reporting and the reporting requirements of a public company. Additionally, we did not formally delegate authority or establish appropriate segregation of duties in our finance and accounting functions. As a result, we did not perform an effective risk assessment nor did we design and maintain internal controls in response to the risks of material misstatement. These material weaknesses contributed to the following material weaknesses:

•We did not design and maintain effective controls over the period-end financial reporting process, including controls over the preparation and review of account reconciliations and journal entries, and the appropriate classification and presentation of accounts and disclosures in the consolidated financial statements. This material weakness resulted in adjustments to accruals and within the statement of cash flows in our fiscal 2018 consolidated financial statements, which were recorded prior to the issuance of our fiscal 2018 consolidated financial statements.

•We did not design and maintain effective controls over the accounting for income taxes over the recording of deferred income taxes and the assessment of the realization of deferred tax assets. This material weakness resulted in adjustments to the income tax benefit, deferred taxes, goodwill, and liabilities in our fiscal 2018 consolidated financial statements, which were recorded prior to issuance. This material weakness also resulted in immaterial adjustments to the income tax benefit and deferred taxes and related disclosures in the fiscal 2017 and 2019 consolidated financial statements, which were corrected in the fiscal 2019 and 2020 consolidated financial statements, respectively. This material weakness also resulted in adjustments to the income tax expense and deferred taxes in our fiscal 2021 consolidated financial statements, which were recorded prior to issuance and immaterial adjustments which were recorded in our fiscal 2023 consolidated financial statements.

Additionally, each of the aforementioned material weaknesses could result in a misstatement of the consolidated financial statements that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

Our independent registered public accounting firm will not be required to opine on the effectiveness of our internal control over financial reporting until we are no longer an “emerging growth company” as defined in the JOBS Act.

Remediation Efforts

We continue to implement measures designed to improve the Company’s internal control over financial reporting to address and remediate the previously identified material weaknesses. To date, such measures include the following:

•Hired new and reassigned existing financial reporting, accounting, and information technology leadership with public company experience to enhance public company financial reporting, technical accounting, and information technology services and solutions.

•Augmented financial reporting capabilities by staffing professionals with knowledge and experience in income tax, internal audit, information technology, and legal.

•Established various policies, including a formal delegation of authority policy defining the protocols for reviewing and authorizing commitments, contracts, invoices, and transactions as well as a comprehensive set of information technology policies to govern the Company’s information technology practices.

•Formalized certain roles and reviewed responsibilities, including ensuring appropriate segregation of duties.

•Designed and implemented period-end financial reporting controls, such as controls over the preparation and review of account reconciliations, financial statement disclosures, and the consolidated financial statements, including controls around classification of cash flows and disclosure of noncash items, as well as establishing a formal management Disclosure Committee to review the draft financial statements and disclosures prior to release, including a sub-certification process from various functional groups.

•Enhanced access restrictions for certain users over general ledger journal entries and designed new processes to further segregate journal entry creation from journal entry approval authority.

•Designed and implemented controls over the accounting for income taxes to ensure the appropriate recording of deferred income taxes, income taxes and related disclosures.

While the material weaknesses disclosed have not yet been remediated as of December 31, 2023, management is devoting substantial resources to the ongoing remediation efforts. As we continue to evaluate and work to improve our internal control over financial reporting, we may take additional measures to address control deficiencies, or we may modify certain of the remediation measures described above. The material weaknesses will not be considered remediated until the applicable controls operate for a sufficient period of time and management has concluded, through testing, that these controls are designed and operating effectively.

Remediation of Prior Material Weakness in Internal Control Over Financial Reporting

As previously disclosed in our Annual Report on Form 10-K for the fiscal year ended December 25, 2022, the following control deficiencies constituted a material weakness in our internal control over financial reporting:

•We did not design and maintain effective controls over information technology general controls for information systems and applications that are relevant to the preparation of the consolidated financial statements. Specifically, we did not design and maintain: sufficient user access controls to ensure appropriate segregation of duties and adequately restrict user and privileged access to financial applications, programs and data to appropriate Company personnel; program change management controls to ensure that information technology program and data changes affecting financial information technology applications and underlying accounting records are identified, tested, authorized and implemented appropriately; computer operations controls to ensure that critical batch jobs are monitored, privileges are appropriately granted, and data backups are authorized and monitored; and testing and approval controls for program development to ensure that new software development is aligned with business and information technology requirements. The deficiencies, when aggregated, could impact our ability to maintain effective segregation of duties, as well as the effectiveness of information technology-dependent controls (such as automated controls that address the risk of material misstatement to one or more assertions, along with the information technology controls and underlying data that support the effectiveness of system-generated data and reports) that could result in misstatements potentially impacting all financial statement accounts and disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected. Therefore, we concluded the information technology deficiencies resulted in a material weakness. However, these information technology deficiencies did not result in any misstatements to the consolidated financial statements.

The Company has designed and implemented the following measures to remediate the previously identified material weakness related to information technology general controls:

•Hired a seasoned information technology leader with public company experience to enhance information technology services and solutions.

•Designed and implemented user access controls to ensure appropriate segregation of duties and adequately restrict user and privileged access to financial applications, programs and data to appropriate Company personnel.

•Designed and implemented change management controls to ensure that information technology program and data changes affecting financial information technology applications and underlying accounting records are identified, tested, authorized, and implemented appropriately.

•Designed and implemented testing and approval controls for program development to ensure that new software is aligned with business and information technology requirements.

•Designed and implemented computer operation controls to ensure critical jobs are monitored and privileges are appropriately granted. Implemented a new backup and recovery platform to monitor data backups for all relevant systems in accordance with the applicable policy as well as manage a test recovery process.

As of December 31, 2023, the remediation measures described above have been completed, and the newly designed and enhanced controls have been implemented and operated for a sufficient time to demonstrate the material weakness has been remediated. Based on the testing performed by management, the controls have been determined to be appropriately designed and operating effectively as of December 31, 2023 and as such, the material weakness related to information technology general controls for information systems and applications that are relevant to the preparation of the consolidated financial statements has been remediated.

Changes in Internal Control over Financial Reporting

There have been no changes in internal control over financial reporting during the quarter ended December 31, 2023 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.