A Dark Vector Cognition product

Item 9A. Controls and Procedures

15K characters. Original on sec.gov ·

Item 9A. Controls and Procedures

Controls and Procedures

Evaluation of Disclosure Controls and Procedures

Under the supervision and with the participation of management, including

our principal executive officer and

principal financial officer, we evaluated the effectiveness of the design and operation of our disclosure controls and

procedures as of the end of the period covered by this annual report as

such term is defined in Rules 13a-15(e) and

15d-15(e) promulgated under the Securities Exchange Act of 1934,

as amended (the “Exchange Act”).

Based on

this evaluation, our management, including our principal executive

officer and principal financial officer,

concluded that our disclosure controls and procedures were effective as of December 30,

2023, to ensure that all

material information required to be disclosed by us in reports that we file

or submit under the Exchange Act is

accumulated and communicated to them as appropriate to allow timely

decisions regarding required disclosure and

that all such information is recorded, processed, summarized and reported

within the time periods specified in the

SEC’s rules and forms, and the rules of the Nasdaq stock exchange.

Changes in Internal Control over Financial Reporting

During the quarter ended December 30, 2023, we acquired a 90% voting

equity interest in Shield, a supplier of

homecare medical products headquartered in California.

The full integration of this acquisition, as well as our

previously reported acquisitions of S.I.N and Biotech Dental, extended

beyond year-end and, therefore, we

excluded Shield, Biotech Dental, and S.I.N., which together represent

less than 1.5% of our total net sales, from our

annual assessment of internal control over financial reporting as of December

30, 2023, as permitted by SEC staff

interpretive guidance for newly acquired businesses.

Post-acquisition integration related activities for other dental and

medical businesses acquired during 2023 across

the U.S., Europe, Brazil, Australia, and China were included in

our annual assessment of internal control over

financial reporting as of December 30, 2023.

These acquisitions, the majority of which utilize separate information

and financial accounting systems, have been included in our consolidated financial

statements since their respective

dates of acquisition.

Finally, we continued systems implementation activities in the U.S. for two of our dental businesses.

The combination of acquisitions (including Shield, S.I.N., and Biotech

Dental), continued acquisition integrations

and systems implementation activities undertaken during the quarter

and carried over from prior quarters when

considered in the aggregate, represents a material change in our

internal control over financial reporting.

During the quarter, all acquisitions, continued acquisition integrations and systems implementation activities

involve necessary and appropriate change-management controls

that are considered in our quarterly assessment of

changes in our internal control over financial reporting.

In October 2023, we experienced a cybersecurity incident that primarily

affected the operations of our North

American and European dental and medical distribution businesses.

Once we became aware of the issue, as part of

the Company’s incident response plan, we took precautionary actions to contain the incident including shutting

down connectivity to networks and key business, operating and financial

accounting systems globally.

In addition

to notifying affected and potentially affected third parties and all relevant law enforcement

authorities, we engaged

external cyber-security experts to support our assessment of the cyber-incident’s impact as well as sanitize, rebuild

and restore our affected systems and applications.

We also notified law enforcement and our employees,

customers, suppliers and investors, informing them of both the incident and

management’s efforts to mitigate its

impact on our daily operations and data maintained on the Company’s systems.

Subsequently, on or about November 8, 2023, we determined that the threat actor obtained personal and sensitive

information maintained on our systems belonging to certain third parties and

since that date we have notified

affected parties and potentially affected parties as appropriate.

The scope of personal and sensitive data impacted is

still under investigation.

On November 22, 2023, we experienced a related disruption to our

ecommerce platform and related applications,

which has since been remediated.

In order to mitigate the impact of this disruption on our systems and on our

ability to service customers, alternative

procedures and controls were temporarily implemented.

Management’s

Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate

internal control over financial reporting,

as such term is defined in Exchange Act Rule 13a-15(f).

Our internal control system is designed to provide

reasonable assurance to our management and Board regarding the preparation

and fair presentation of published

financial statements.

Under the supervision and with the participation of our management,

including our principal

executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal

control over financial reporting based on the framework in Internal Control-Integrated

Framework (2013), updated

and reissued by the Committee of Sponsoring Organizations, or the COSO Framework.

Based on our evaluation

under the COSO Framework, our management concluded that our

internal control over financial reporting was

effective at a reasonable assurance level as of December 30, 2023.

The effectiveness of our internal control over financial reporting as of December 30,

2023, has been independently

audited by BDO USA, P.C., an independent registered public accounting firm, and their attestation is included

herein. The evaluation of internal controls involves judgment.

Our external auditor has concluded that the

Company has a material weakness resulting from the aggregation of certain

control deficiencies at the application

control level related to logical and user access management and segregation of

duties.

The Company agrees that

there are control deficiencies that our external auditor has identified, all of which

either have been addressed or are

being addressed. The Company’s management has considered the control deficiencies identified by our

external

auditor, and believes that, individually and in aggregate, they do not result in a material weakness.

A material

weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such

that

there is a reasonable possibility that a material misstatement of the

company’s financial statements will not be

prevented or detected on a timely basis.

Limitations of the Effectiveness of Internal Control

A control system, no matter how well conceived and operated, can provide

only reasonable, not absolute, assurance

that the objectives of the internal control system are met.

Because of the inherent limitations of any internal control

system, no evaluation of controls can provide absolute assurance that

all control issues, if any, within a company

have been detected.

Report of Independent Registered Public Accounting Firm

Shareholders and Board of Directors

Henry Schein, Inc.

Melville, NY

Opinion on Internal Control over Financial Reporting

We

have audited Henry

Schein, Inc.’s

(the “Company’s”)

internal control over

financial reporting as

of December

30, 2023, based on

criteria established in Internal Control

– Integrated Framework (2013) issued

by the Committee

of Sponsoring Organizations of the Treadway Commission (the

“COSO criteria”). In our opinion, the Company did

not maintain,

in all

material respects,

effective internal

control over

financial reporting

as of

December 30,

2023,

based on the COSO criteria.

We

do

not

express

an

opinion

or

any

other

form

of

assurance

on

management’s

statements

referring

to

any

corrective actions taken by the Company after the date of management’s assessment.

We

also

have

audited,

in

accordance

with

the

standards

of

the

Public

Company

Accounting

Oversight

Board

(United

States)

(“PCAOB”),

the

consolidated

balance

sheets

of

the

Company

as

of

December

30,

2023

and

December

31,

2022,

the

related

consolidated

statements

of

income,

comprehensive

income,

changes

in

stockholders’ equity,

and cash

flows for

each of

the three

years in

the

period ended

December 30,

2023, and

the

related

notes

(collectively

referred

to

as

“the

financial

statements”)

and

our

report

dated

February

28,

2024

expressed an unqualified opinion thereon.

Basis for Opinion

The Company’s

management is

responsible for

maintaining effective

internal control

over financial

reporting and

for

its

assessment of

the

effectiveness

of

internal control

over financial

reporting, included

in

the

accompanying,

“Item 9A, Management’s

Report on Internal

Control over Financial Reporting”. Our

responsibility is to express

an

opinion on the

Company’s internal

control over financial

reporting based on

our audit. We

are a public

accounting

firm

registered

with

the

PCAOB and

are

required

to

be

independent

with

respect

to

the

Company in

accordance

with

U.S.

federal

securities

laws

and

the

applicable

rules

and

regulations

of

the

Securities

and

Exchange

Commission and the PCAOB.

We conducted our audit of internal control over financial reporting in accordance with the standards of the PCAOB.

Those standards require

that we plan

and perform the

audit to

obtain reasonable assurance

about whether effective

internal

control

over

financial

reporting

was

maintained

in

all

material

respects.

Our

audit

included

obtaining

an

understanding

of

internal

control

over

financial

reporting,

assessing

the

risk

that

a

material

weakness

exists,

and

testing

and

evaluating

the

design

and

operating

effectiveness

of

internal

control

based

on

the

assessed

risk.

Our

audit also included performing

such other procedures as we

considered necessary in the

circumstances. We

believe

that our audit provides a reasonable basis for our opinion.

A material

weakness is

a deficiency,

or a

combination of

deficiencies, in

internal control

over financial

reporting,

such

that

there

is

a

reasonable

possibility

that

a

material

misstatement

of

the

Company’s

annual

or

interim

consolidated

financial

statements

will

not

be

prevented

or

detected

on

a

timely

basis.

We

have

identified

the

following material weakness

that has not

been identified as

a material weakness

in management’s

assessment. The

material weakness in

internal control over

financial reporting is

related to logical

and user access

management and

segregation

of

duties,

at

the

application

control

level,

in

certain

information

technology

environments

at

certain

components.

There

is

a

reasonable

possibility

that

a

material

misstatement

of

the

Company’s

annual

or

interim

consolidated

financial

statements

with

respect

to

these

matters

would

not

have

been

prevented

or

detected

on

a

timely

basis.

This

material

weakness

was

considered

in

determining

the

nature,

timing,

and

extent

of

audit

tests

applied in

our audit

of the

2023 consolidated

financial statements,

and this

report does

not affect

our report

dated

February 28, 2024, on those consolidated financial statements.

As indicated in

the accompanying “Item

9A, Management’s

Report on Internal

Control over Financial

Reporting”,

management’s assessment of and conclusion on the effectiveness of internal control

over financial reporting did not

include

the

internal

controls

of

Shield

Healthcare,

Inc.,

S.I.N.

Implant

System,

and

Biotech

Dental,

which

were

acquired

during

the

year

ended

December

30,

2023,

and

are

included

in

the

consolidated

balance

sheet

of

the

Company

as

of

December

30,

2023,

and

the

related

consolidated

statements

of

income,

comprehensive

income,

changes

in

stockholders’

equity,

and

cash

flows

for

the

year

then

ended.

Shield

Healthcare,

Inc.,

S.I.N.

Implant

System, and

Biotech Dental,

together represent

less than

1.5% of

total net

sales for

the year

ended December

30,

  1. Management did not assess the effectiveness of internal control over financial reporting of Shield Healthcare,

Inc.,

S.I.N.

Implant

System,

or

Biotech

Dental

because

of

the

timing

of

the

acquisitions

which

were

completed

during the

year ended

December 30,

  1. Our

audit of

internal control

over financial

reporting of

the Company

also did

not include

an evaluation

of the

internal control

over financial

reporting of

Shield Healthcare,

Inc., S.I.N.

Implant System, or Biotech Dental.

Definition and Limitations of Internal Control over Financial Reporting

A

company’s

internal

control

over

financial

reporting

is

a

process

designed

to

provide

reasonable

assurance

regarding the

reliability of

financial reporting

and the

preparation of

financial statements

for external

purposes in

accordance

with

generally

accepted

accounting

principles.

A

company’s

internal

control

over

financial

reporting

includes

those

policies

and

procedures

that

(1)

pertain

to

the

maintenance

of

records

that,

in

reasonable

detail,

accurately and

fairly reflect

the transactions

and dispositions

of the

assets of

the company;

(2) provide

reasonable

assurance

that

transactions

are

recorded

as

necessary

to

permit

preparation

of

financial

statements

in

accordance

with generally

accepted accounting

principles, and

that receipts

and expenditures

of the

company are

being made

only

in

accordance with

authorizations of

management and

directors of

the

company; and

(3) provide

reasonable

assurance

regarding

prevention

or

timely

detection

of

unauthorized

acquisition,

use,

or

disposition

of

the

company’s assets that could have a material effect on the financial statements.

Because

of

its

inherent

limitations,

internal

control

over

financial

reporting

may

not

prevent

or

detect

misstatements.

Also,

projections

of

any

evaluation

of

effectiveness

to

future

periods

are

subject

to

the

risk

that

controls

may

become

inadequate

because

of

changes

in

conditions,

or

that

the

degree

of

compliance

with

the

policies or procedures may deteriorate.

/s/ BDO USA, P.C.

New York

,

NY

February 28, 2024

Previous: Item 9. Changes in and Disagreements with Accountants on Accounting and · Next: Item 9B. Other Information