Company: NGVT
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001653477-25-000015
Chunk: 490

Company: Ingevity Corp
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1
Chunk 490
---
 joint ventures. The ability to grow through acquisitions or other investments depends upon our ability to identify, negotiate, finance, complete, and integrate suitable acquisitions or joint venture arrangements. There can be no assurances that we will be able to integrate these acquisitions in an efficient and cost-effective manner or that these acquisitions or joint ventures will generate the expected value.

Acquisitions and other investments may expose us to liability from the target company and/or joint venture partner. Acquisition and investment target companies may be or may become involved in disputes regarding intellectual property and other aspects of their businesses or may be subject to liabilities that are unknown at the time of the transaction, including liabilities under environmental or tax laws. Depending on the nature of our investment and/or structure of an acquisition, we may take on or be exposed to such liability, which could materially impact our business, financial condition, or results of operations.

As we rely on information technologies to conduct our business, cyber-attacks, data and privacy breaches, or a failure of information technology systems could disrupt our operations and expose us to liability, which could cause our business and reputation to suffer.

We rely on our information technology systems, some of which are managed by third parties, to support, manage and maintain the day-to-day operations and activities of our business, including our manufacturing facilities, customer and vendor transactions, and financial, accounting, and business records. In addition, we collect and store certain data, including proprietary business information, and may have access to confidential or personal information that is subject to privacy and security laws and regulations.

The secure processing, storage, and transmission of sensitive, confidential, and personal data is critical to our operations and business strategy. We have instituted a system of security policies, procedures, capabilities, internal controls and audits aligned with our ISO 27001 certification, designed to protect this information. Additionally, we engage third-party threat detection, penetration testing, and monitoring services which includes a global cybersecurity incident response team. Despite our security architecture and controls, and those of our third-party providers, we may be vulnerable to cyber-attacks, computer viruses, security breaches, ransomware attacks, inadvertent or intentional employee actions, system failures, and other risks that could potentially lead to the compromising of sensitive, confidential or personal data, improper use of our, or our third-party provider systems, solutions or networks, unauthorized access, use, disclosure, modification or destruction of information, and operational disruptions. We also maintain an information security risk insurance policy to help mitigate the financial consequences of these risks, however, there is no guarantee that such