RESPONSIBLE BUSINESS PRACTICES Risk Management and Business Continuity At Casey’s, we recognize that building a robust resiliency program into our core business operations plays an essential part in earning the trust of our guests and stakeholders each day. We aim to not only get through a crisis but to react to and ideally prevent potential risks, or at least reduce their impact, and cultivate a willingness to view problems as a strategic opportunity to grow. Risk Oversight Business Continuity Risk management and assessment are primary Disaster recovery and business continuity plans responsibilities of our CEO and management are provided to the risk management team by team, while the Board retains independent the business units and updated as needed. Our oversight responsibility for the company’s key teams frequently engage in the necessary tests, enterprise risks. The Board meets regularly audits and updates to provide awareness and with SLT to discuss strategy and risks facing the preparedness among our team members to organization. The Board also regularly receives address and quickly resolve business disruptions. information from other key leaders on business operations, financial results and strategic issues, including the identification, assessment and management of critical enterprise risks. In addition, the SLT holds strategic planning sessions to discuss strategies, key challenges, and risks and opportunities. For more information, please see our 2022 Proxy Statement on the Investor Relations page of our website. 18 Casey’s 2022 ESG Report