Search every filing
2,477,667 paragraphs from 10-Ks, 10-Qs and 8-Ks with press releases.
Matching paragraphs
Incident Response and Recovery Planning: We have established and maintain comprehensive cybersecurity incident response and recovery plans that coordinate multidisciplinary internal teams and cybersecurity partners to assess, triage, escalate, contain, mitigate, investigate, remediate, and recover from a potential cybersecurity incident. Through ongoing communications with these teams, management monitors the incidents and reports incidents to the Audit Committee when appropriate. Managem...
Read in the filing ↗ Also in 10-K of Feb 23, 2026
Through a risk-based approach consistent with Ecolab’s ERM framework, the CISO identifies cyber incidents that are brought forward to a cross-functional cyber-incident response team including our CEO, CFO, EVP & GM Digital, General Counsel, CISO and Executive Vice President Supply Chain. This cyber incident response team, or, in the event of more minor incidents, the CISO and his team, takes steps to promptly assess and address the incident, including engaging third parties according to pre-established guidelines. The Board and the Audit Committee also receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, including ongoing updates regarding any such incident until it has been addressed.
Read in the filing ↗ Also in 10-K of Feb 23, 2026
Assessment: We engage in the periodic assessment, testing and updating of our policies, standards, processes, and practices that are designed to address cybersecurity threats and incidents. These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures, and planning. We engage third parties to perform assessments on our cybe...
Read in the filing ↗ Also in 10-K of Feb 23, 2026
The Board, in coordination with the Audit Committee, provides oversight of our ERM program, including the management of risks arising from cybersecurity threats. The Board receives an overview and the Audit Committee receives reports from our CISO regarding our cybersecurity threat risk management and strategy processes. These reports cover a wide range of topics, and may include current and emerging cybersecurity threat risks, third-party assessments, risk-mitigation tactics and programs, information security considerations arising with respect to our peers and third parties, and our incident response plan.
Read in the filing ↗ Also in 10-K of Feb 21, 2025
While we have continually matured our security program and capabilities and have had no material incidents to date, cyber threats continue to evolve and there can be no assurance that our efforts will prevent cybersecurity attacks or breaches in our systems such as those described in the risk factor entitled, “We are subject to information technology system failures, network disruptions and breaches in data security” under “Item 1A. Risk Factors” of this Form 10-K.
Read in the filing ↗ Also in 10-K of Feb 23, 2026
… Geopolitical tensions or conflicts, such as Russia’s invasion of Ukraine, may further heighten the risk of cybersecurity attacks. While we have continually matured our security program and capabilities and have had no material incidents to date, cyber threats continue to evolve, such as with the use of artificial intelligence, resulting in sophisticated new attack methods that are increasingly automated …
Read in the filing ↗ Also in 10-K of Feb 21, 2025