Company: ISRG
Filing Date: 2025-01-31
Form Type: 10-K
Source: 0001035267-25-000017
Chunk: 201

Company: INTUITIVE SURGICAL INC
Filing Date: 2025-01-31
Form: 10-K
Item: Item 1A
Chunk 201
---
 third-party service providers, strategic partners, or other contractors or consultants may input inappropriate or confidential information into an AI system (in particular, a system that is managed, owned, or controlled by a third party), thereby compromising our business operations. Even if the vulnerabilities that may lead to the foregoing are identified, we may be unable to adequately investigate or remediate due to attackers increasingly using tools and techniques that are designed to circumvent controls, avoid detection, and remove or obfuscate forensic evidence. The occurrence of any of these events may cause business operation disruptions, diversion of the attention of management and key information technology resources, and possibly lead to security breaches of, or the unauthorized access to, our confidential information or other business data. If the unauthorized persons successfully hack into or interfere with our connected products or services, they may create issues with product functionality that could pose a risk of the loss of data, a risk to patient safety, and a risk of product recall or field action, which could adversely impact our business and reputation. We may also face increased cybersecurity risks due to our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities.

33

As described above, we also rely on external vendors to supply and/or support certain aspects of our information technology systems. The systems of these external vendors may contain defects in design or manufacture or other problems that could unexpectedly compromise the security of our own information technology systems, and we are dependent on these third parties to deploy appropriate security programs to protect their systems. In addition to potential exposure to data breaches, security and cybersecurity incidents, or other actions that may compromise the security of or interfere with the function of our systems, defects or vulnerabilities in the software or systems of our external vendors may expose failures in our internal controls and risk management processes, which may adversely impact our business, financial condition, or results of operations and may also harm our reputation, brand, and customer relationships.

While we devote significant resources to network security, data encryption, and other security measures to protect our systems and data, these security measures cannot provide absolute security. We and certain of our service providers are, from time to time, subject to cyberattacks and security breaches and incidents. We consider such cyberattacks or security breaches and incidents to be in the ordinary course of business for a company of our size in our industry. While we do not believe that we have experienced any significant system failure, accident, or security breach to date, if such an event were to occur, it