Item 9A. Controls and Procedures

Evaluation of Disclosure Controls and Procedures

Our management has evaluated, under the supervision and with the participation of our Chief Executive Officer and Chief Financial Officer, the effectiveness of our disclosure controls and procedures as of October 31, 2024, pursuant to and as required by Rule 13a-15(b) under the Securities Exchange Act of 1934 (“Exchange Act”). Based on that evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that, as of October 31, 2024, the company's disclosure controls and procedures, as defined by Rule 13a-15(e) under the Exchange Act, were effective and designed to ensure that (i) information required to be disclosed in the company's reports filed under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC's rules and forms, and (ii) information is accumulated and communicated to management, including the Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosures.

Management's Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rule 13a-15(f). Under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on the results of this evaluation, our management concluded that our internal control over financial reporting was effective as of October 31, 2024.

In accordance with guidance issued by the SEC, companies are permitted to exclude acquisitions from their assessment of internal control over financial reporting for a period not to exceed one year from the date of acquisition. The company completed the acquisition of ESI Group SA (“ESI Group”) during January 2024, Riscure Holding B.V. (“Riscure”) on February 21, 2024, and AnaPico AG (“AnaPico”) on June 12, 2024. Management excluded ESI Group, Riscure, and AnaPico from its assessment of the effectiveness of the company’s internal control over financial reporting as of October 31, 2024. ESI Group constituted approximately 1% of total assets and approximately 3% of total revenues, while Riscure and AnaPico each constituted less than 1% of total assets and total revenues for the year ended October 31, 2024.

The effectiveness of our internal control over financial reporting as of October 31, 2024 has been audited by PricewaterhouseCoopers LLP, an independent registered public accounting firm, as stated in their report that appears in Item 8 of this Annual Report on Form 10-K.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal control over financial reporting during the fourth quarter of 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.