Company: JLL
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001037976-25-000006
Chunk: 31

Company: JONES LANG LASALLE INC
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 31
---
 BREACHES OR CYBERSECURITY ISSUES, OR FAILURES TO EXECUTE OUR ENTERPRISE-WIDE DATA STRATEGY, COULD IMPACT OUR ABILITY TO SERVICE OUR CUSTOMERS AND ADVERSELY AFFECT OUR BUSINESS, DAMAGE OUR REPUTATION AND EXPOSE US TO FINANCIAL RISK. 

Our business is highly dependent on our ability to collect, use, store and manage organizational and client data. If any of our significant information and data management systems do not operate properly or are disabled, we could suffer a disruption of our businesses, liability to clients, loss of client or other sensitive data, loss of employee data, regulatory intervention, breach of confidentiality or other contract provisions, or reputational damage. These systems may fail to operate properly or become disabled as a result of events wholly or partially beyond our control, including disruptions of electrical or communications services, as well as disruptions caused by natural disasters, political instability, terrorist attacks, sabotage, computer viruses, deliberate attempts to disrupt our computer systems through "hacking," "phishing," or other forms of both deliberate or unintentional cyber-attack, or our inability to occupy one or more of our office locations. As we outsource significant portions of our information technology functions, such as cloud computing, to third-party providers, we bear the risk of having less direct control over the manner and quality of performance. 

Our enterprise data governance is responsible for identifying, defining and providing direction and oversight of significant data-related business needs. Failure to effectively execute our enterprise-wide data strategy may lead to a loss of sensitive or critical data, costly remediation of data-related issues and possible regulatory or contractual penalties.

Cyber threats are proliferating and advancing the ability to identify and exploit vulnerabilities, requiring continuous evaluation and improvements to our security architecture and cyber defenses. The risk of cyber threats also extends to suppliers and vendors we engage on a principal basis to perform various services. We also face increased cybersecurity risk as we deploy additional mobile and cloud technologies. We service clients across multiple industry verticals - many of which are higher-profile cyber targets themselves - including financial services, technology, government institutions, healthcare and life sciences, and because of this the risk that we are subject to cyber-attack incidents may increase. In addition, the rapid evolution and increased adoption of artificial intelligence technologies amplify these risks. We are continuously hardening our infrastructure built on these technologies, monitoring for threats, and evaluating our capability to respond to any incidents to minimize any impact to our systems, data, or business operations. However, we cannot ensure