Search every filing
2,476,630 paragraphs from 10-Ks, 10-Qs and 8-Ks with press releases.
Matching paragraphs
cybersecurity incidents, which may make us more vulnerable to cybersecurity incidents as well.
Read in the filing ↗
We have been, and continue to be, the subject of cybersecurity attacks, including unauthorized intrusion, malicious software infiltration, network disruption, and denial of service. Although we believe that we maintain a robust program of information security and controls and none of the cybersecurity incidents that we have identified to date have materially affected us, including our business strategy, results of operations, or financial condition, we cannot provide assurances that a cybersecurity incident will not materially affect us, or our business strategy, results of operations or financial condition in the future. For additional information on cybersecurity related risks, see “Item 1A. Risk Factors” of this Annual Report on Form 10-K.
Read in the filing ↗ Also in 10-K of Aug 6, 2025
• Incident Management and Response. A global team monitors our key applications and systems 24/7/365 to detect, investigate and respond to anomalies and incidents. This team addresses reported or detected issues by following a defined incident lifecycle and uses an incident management system to record facts, impact and remedial actions taken. We have established a cybersecurity incident response plan and escalation process, outlining processes for responding to incidents from identification to mitigation and notifying members of senior leadership, the board of directors and external advisors, as appropriate. We test our plans and processes through simulation exercises, scenario planning and tabletop exercises, using findings to improve processes.
Read in the filing ↗ Also in 10-K of Aug 6, 2025
We have programs and processes in place designed to prevent, detect and respond to data or cybersecurity incidents. However, as a result of the complexity of our operating environment, the period over which hardware and software has been acquired or other reasons, our programs and processes may not be sufficient or adequate or may fail to prevent, detect or respond to a cybersecurity incident or identify and/or remediate a security vulnerability in our operating environment. The techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently, are
Read in the filing ↗ Also in 10-K of Aug 5, 2026
• Third-Party Risk Management. We maintain a third-party risk management process, designed to identify and manage risks associated with our vendors, our partners and other third parties, that includes conducting security assessments prior to engagement and periodically during the engagement. We also seek to include security and privacy terms, where appropriate, in our contracts with third-party service providers that require third parties to maintain security controls to protect our data and notify us in the event of a cybersecurity incident.
Read in the filing ↗ Also in 10-K of Aug 6, 2025
We have been, and expect we will continue to be, the subject of cybersecurity attacks, including unauthorized intrusion, malicious software infiltration, network disruption, denial of service, corruption of data, ransomware attack, insider threats, and theft of sensitive information (including our intellectual property). Although none of the cybersecurity incidents that we have identified to date have materially affected us, including our …
Read in the filing ↗ Also in 10-K of Aug 5, 2026
… Further, while we perform due diligence prior to acquisitions and take actions to safeguard the businesses that we acquire, these businesses may not have invested as significantly as we do in security and technology and may be more susceptible to cybersecurity incidents, which may make us more vulnerable to cybersecurity incidents as well.
Read in the filing ↗
… We may fail to anticipate or detect these techniques and/or incidents for long periods of time and, even when we do so, we may be unable or fail to implement adequate or timely preventive or responsive measures. Our ability to address data or cybersecurity incidents may also depend on the timing and nature of assistance that may be provided …
Read in the filing ↗