Company: ALIT
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001809104-25-000062
Chunk: 30

Company: Alight, Inc. / Delaware
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 30
---
 to the same types of security breaches. In the future, these types of incidents could result in intellectual property or other confidential information being lost or stolen, including client, employee or business data. In addition, we may not be able to detect breaches in our information technology systems or assess the severity or impact of a breach in a timely manner.

We have implemented various measures to manage our risks related to system and network security and disruptions. Nevertheless, an actual or perceived security breach, a failure to make adequate disclosures to the public or law enforcement agencies following any such event or a significant and extended disruption in the functioning of our 

11

information technology systems could damage our reputation and cause us to lose clients, adversely impact our operations, sales and operating results and require us to incur significant expense to address and remediate or otherwise resolve such issues.

We maintain policies, procedures and technological safeguards designed to protect the security and privacy of this information. These include, for example, the appropriate encryption of information, the use of anti-virus, anti-malware and other protections. Nonetheless, we cannot eliminate the risk of human error or inadequate safeguards against employee or vendor malfeasance or cyber-attacks that could result in improper access to, misappropriation, destruction or disclosure of confidential, personal or proprietary information and we may not become aware in a timely manner of any such security breach. Such unauthorized access, misappropriation, destruction or disclosure could result in the loss of revenue, reputational damage, indemnity obligations, damages for contract breach, civil and criminal penalties for violation of applicable laws, regulations or contractual obligations, and significant costs, fees and other monetary payments for remediation. Furthermore, our clients may be reluctant to continue our services delivered through our information technology systems and networks following an actual or perceived security breach due to concerns regarding transaction security, user privacy, the reliability and quality of internet service and other reasons. The release of confidential information as a result of a security breach could also lead to litigation or other proceedings against us by affected individuals or business partners, or by regulators, and the outcome of such proceedings, which could include penalties or fines, could have a significant negative impact on our business. Additionally, in order to maintain the level of security, service and reliability that our clients require, we may be required to make significant additional investments in technology and our methods of delivering services.

In many jurisdictions, including North America and the European Union, we are subject to laws and regulations relating to the collection, use, retention, security and transfer of information including the Health