v3.26.1
Cybersecurity Risk Management, Strategy, and Governance
12 Months Ended
Jan. 31, 2026
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

Item 1C. Cybersecurity

Overview

Maintaining the safety and security of our systems and data is essential to the success of our company. As with other industries, there are several cybersecurity threats we encounter. These include phishing, ransomware, and denial of service, among others. Our suppliers, vendors, and other partners face similar threats. A cybersecurity incident impacting us or any of these entities could materially affect our operations, performance, or financial results. See Item 1A, Risks Related to Information Security for additional details.

The governance of our risk management program is a partnership between our cross functional management team and our Board. This program includes both a cyber team, as well as an Enterprise Risk Management (“ERM”) program led by our Head of Compliance. Our Chief Information Officer ("CIO"), who retired effective February 2026, had over 30 years of information technology experience, including over 4 years of direct oversight of information security. Our Information Security and Compliance Director, who has over 25 years of information technology experience, is currently leading our cyber team until a new CIO is appointed. Risk oversight for both our cyber and ERM programs is primarily the responsibility of the Audit Committee of the Board who receive quarterly updates, at a minimum, with additional updates shared to the full Board on a recurring basis. The Audit Committee includes members of the Board of Directors who possess backgrounds and experience which we believe enable them to provide effective oversight of our IT and cybersecurity risks.

Cyber Security Team

Our cross functional cyber security team is responsible for the overall information security strategy, risk assessment, cyber threat detection and response, and execution of an ongoing cyber program. The goal of this team is to lower the impact and likelihood of persistent threats to the extent feasible, including safeguarding of key information and the integrity of key systems. We also partner with third-party vendors to enhance our program including monitoring, pen testing, and other assessments and programs. Additionally, the Company has implemented certain information security measures which include security reviews, as well as internal training and testing programs. We have implemented transition measures to maintain consistent oversight of our cybersecurity risk management program through existing governance structure including the Executive Steering Committee, Audit Committee and Board.

Enterprise Risk Management (ERM) Program

Our cyber risks are included in our ERM program. Our ERM program is led by our Senior Director of Compliance and Internal Audit who has over 10 years of cyber security experience and has oversight from our Audit Committee. This program includes a cross functional team including our senior leadership team and other key members of management. Risk reduction plans are developed and updates are regularly assessed by the team. Our Audit Committee provides oversight and

is briefed quarterly, at a minimum. In the event a cyber incident should occur, there are additional steps taken to mitigate cybersecurity risks and incidents.

As of the date of this filing, we are not aware of any current cybersecurity threats or cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business, results of operations or financial condition.

Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block]

Enterprise Risk Management (ERM) Program

Our cyber risks are included in our ERM program. Our ERM program is led by our Senior Director of Compliance and Internal Audit who has over 10 years of cyber security experience and has oversight from our Audit Committee. This program includes a cross functional team including our senior leadership team and other key members of management. Risk reduction plans are developed and updates are regularly assessed by the team. Our Audit Committee provides oversight and

is briefed quarterly, at a minimum. In the event a cyber incident should occur, there are additional steps taken to mitigate cybersecurity risks and incidents.

Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Board of Directors Oversight [Text Block] The governance of our risk management program is a partnership between our cross functional management team and our Board. This program includes both a cyber team, as well as an Enterprise Risk Management (“ERM”) program led by our Head of Compliance. Our Chief Information Officer ("CIO"), who retired effective February 2026, had over 30 years of information technology experience, including over 4 years of direct oversight of information security. Our Information Security and Compliance Director, who has over 25 years of information technology experience, is currently leading our cyber team until a new CIO is appointed. Risk oversight for both our cyber and ERM programs is primarily the responsibility of the Audit Committee of the Board who receive quarterly updates, at a minimum, with additional updates shared to the full Board on a recurring basis.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] Risk oversight for both our cyber and ERM programs is primarily the responsibility of the Audit Committee of the Board who receive quarterly updates, at a minimum, with additional updates shared to the full Board on a recurring basis.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] both our cyber and ERM programs is primarily the responsibility of the Audit Committee of the Board who receive quarterly updates, at a minimum, with additional updates shared to the full Board on a recurring basis.
Cybersecurity Risk Role of Management [Text Block]

Enterprise Risk Management (ERM) Program

Our cyber risks are included in our ERM program. Our ERM program is led by our Senior Director of Compliance and Internal Audit who has over 10 years of cyber security experience and has oversight from our Audit Committee. This program includes a cross functional team including our senior leadership team and other key members of management. Risk reduction plans are developed and updates are regularly assessed by the team. Our Audit Committee provides oversight and

is briefed quarterly, at a minimum. In the event a cyber incident should occur, there are additional steps taken to mitigate cybersecurity risks and incidents.

As of the date of this filing, we are not aware of any current cybersecurity threats or cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business, results of operations or financial condition.

Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] The governance of our risk management program is a partnership between our cross functional management team and our Board. This program includes both a cyber team, as well as an Enterprise Risk Management (“ERM”) program led by our Head of Compliance.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] Our Chief Information Officer ("CIO"), who retired effective February 2026, had over 30 years of information technology experience, including over 4 years of direct oversight of information security. Our Information Security and Compliance Director, who has over 25 years of information technology experience, is currently leading our cyber team until a new CIO is appointed.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] Our cross functional cyber security team is responsible for the overall information security strategy, risk assessment, cyber threat detection and response, and execution of an ongoing cyber program. The goal of this team is to lower the impact and likelihood of persistent threats to the extent feasible, including safeguarding of key information and the integrity of key systems. We also partner with third-party vendors to enhance our program including monitoring, pen testing, and other assessments and programs. Additionally, the Company has implemented certain information security measures which include security reviews, as well as internal training and testing programs.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true