Company: ASGN
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000890564-25-000008
Chunk: 27

Company: ASGN Inc
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1A
Chunk 27
---
 variety of functions, including, among other things, identifying consulting and staffing resources, matching personnel with client assignments, and managing our accounting and financial reporting functions. In conducting our business, we and certain of our third-party providers routinely collect, retain, and process data about customers, employees, business partners, and others, including personally identifiable information (PII) on these systems about our employees and billing professionals and their dependents, as well as sensitive and/or proprietary information belonging to our business such as trade secrets (collectively, “Confidential Information”). Any information technology systems are at risk of being compromised, including through malicious activity or human or technological error. Although we devote significant resources to maintain and regularly upgrade our information security technologies, and we have implemented security controls to help protect the security and privacy of our business information on-premise and in the cloud, our and third-party information technology systems’ confidentiality, integrity, and availability are subject to cybersecurity risks from diverse threat actors, such as state-sponsored organizations, opportunistic hackers and hacktivists, as well as through diverse attack vectors, such as potential security breaches through third-party service providers, employee negligence, fraud or misappropriation, business email compromise and cybersecurity threats, including denial of service attacks, viruses, ransomware, social engineering/phishing, other malicious software programs, and as a result of malicious code embedded in open-source software, or misconfigurations, bugs or other vulnerabilities in commercial software that is integrated into our or our service providers’ IT systems, products or services. Successful cyberattacks can result in third parties gaining unauthorized access to our information technology systems for purposes of misappropriating assets or confidential information, corrupting data, or causing operational disruption. We are continuously exposed to unauthorized attempts to compromise the confidentiality, integrity, and availability of our IT systems and Confidential Information through cyber attacks, insider threats and other information security threats, including physical break-ins and malicious insiders, and we have, from time to time, experienced security incidents. Moreover, we have acquired and continue to acquire companies with cybersecurity vulnerabilities and/or unsophisticated security measures, which exposes us to significant cybersecurity, operational, and financial risks. Remote and hybrid working arrangements at our company (and at many third-party providers) also increase cybersecurity risks due to the challenges associated with managing remote computing assets and security vulnerabilities that are present in many non-corporate and home networks. Additionally, any integration of artificial intelligence in our or any service providers’ operations, products or services is expected to pose new or unknown cybersecurity risks and challenges.