Company: BCO
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000078890-25-000059
Chunk: 198

Company: BRINKS CO
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 198
---
 this risk area to ensure the development of mitigation plans, monitor progress against those plans, and maintain and measure against a set of key risk indicators. In addition, the Company’s Global Security Operations Center (the “GSOC”), an internal monitoring and reporting center that is a part of the GIS Program, provides 24/7 monitoring, detection and response capabilities for cybersecurity events. The GSOC also analyzes cyber threat intelligence from a variety of paid and non-paid sources.Cybersecurity Risk Management and MitigationThe Global CISO manages our risk monitoring and mitigation processes and is responsible for cybersecurity risk management. The Company has adopted physical, technological and administrative cybersecurity controls and has defined procedures for incident detection, containment, response and remediation. The Global CISO works with business units and IT to ensure the appropriate policies are in place and to improve efficiency. Our global IT governance, risk and compliance team, which is a part of the GIS Program, manages IT general controls and cybersecurity best practices. We have an internal cybersecurity incident response plan designed to minimize the impact of cyber incidents and ensure consistent responses to any such incident. This plan undergoes regular reviews and updates.The Company builds information security awareness among our employees by conducting regular training on our cybersecurity and data protection policies and executing vulnerability testing with employee simulated email threats. The Company also regularly updates employees on cybersecurity issues, assesses for susceptibility to email phishing and provides tools to alert the global information security team to potential phishing activity. Our employees have multiple mechanisms for reporting cybersecurity and data privacy concerns to the Company, including the Brink’s GSOC and the Brink’s Ethics Hotline. We believe providing ongoing training and real-world learnings to the Company’s workforce is a crucial part of ensuring security and defending against future attacks.The Company internally assesses its cybersecurity regularly and engages a third-party external auditor to conduct annual cybersecurity risk assessments, both of which allow us to identify key cybersecurity and data protection risks and develop plans, policies, and procedures to mitigate such risks. We also have a vulnerability management program in place that is designed to protect our external and internal networks and critical assets. In addition, we have designed policies and procedures so that our Disclosure Committee, which is composed of members of management and is co-chaired by the Company’s CFO and General Counsel, is appropriately informed of significant cybersecurity matters to ensure compliance with applicable cybersecurity disclosure requirements for our public filings. The Disclosure Committee meets on a quarterly basis and more often as necessary. 

15

We maintain cybersecurity insurance and regularly consult with third-party cybersecurity experts during our review of