Company: BCO
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000078890-25-000059
Chunk: 25

Company: BRINKS CO
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 25
---
 its IT infrastructure, including the GIS Program, which is designed to reduce cybersecurity risks by ensuring that computer systems are secure through protecting networks, systems, applications, hardware, and data to mitigate cyber attacks. Our business includes managing, processing, storing and transmitting proprietary and confidential data, including personally identifiable information and other confidential information. The Company’s IT infrastructure and GIS Program are critical to its business activities, and any unauthorized access to, unplanned disruptions or failures of, or cybersecurity attacks, on these systems pose risks to our business, financial condition and results of operations.The Company has an enterprise risk management ("ERM") program, for which the Board has oversight responsibility. Under the ERM program, senior leaders from across the Company’s global footprint annually evaluate risks according to likelihood, significance and velocity to identify and prioritize the most significant risks facing the Company. "IT and Cybersecurity risk" has been identified as part of the ERM program as a significant risk, and the CFO is assigned to this risk area to ensure the development of mitigation plans, monitor progress against those plans, and maintain and measure against a set of key risk indicators. In addition, the Company’s Global Security Operations Center (the “GSOC”), an internal monitoring and reporting center that is a part of the GIS Program, provides 24/7 monitoring, detection and response capabilities for cybersecurity events. The GSOC also analyzes cyber threat intelligence from a variety of paid and non-paid sources.Cybersecurity Risk Management and MitigationThe Global CISO manages our risk monitoring and mitigation processes and is responsible for cybersecurity risk management. The Company has adopted physical, technological and administrative cybersecurity controls and has defined procedures for incident detection, containment, response and remediation. The Global CISO works with business units and IT to ensure the appropriate policies are in place and to improve efficiency. Our global IT governance, risk and compliance team, which is a part of the GIS Program, manages IT general controls and cybersecurity best practices. We have an internal cybersecurity incident response plan designed to minimize the impact of cyber incidents and ensure consistent responses to any such incident. This plan undergoes regular reviews and updates.The Company builds information security awareness among our employees by conducting regular training on our cybersecurity and data protection policies and executing vulnerability testing with employee simulated email threats. The Company also regularly updates employees on cybersecurity issues, assesses for susceptibility to email phishing and provides tools to alert the global information security team to potential phishing activity. Our employees have multiple mechanisms for reporting cybersecurity and data privacy concerns to the Company, including the Brink’s GSOC and