Company: APO
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0001858681-25-000034
Chunk: 492

Company: Apollo Global Management, Inc.
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 492
---
 and Awareness. The Company provides regular, mandatory training for personnel regarding cybersecurity threats to equip the Company’s personnel with effective tools to help mitigate cybersecurity threats, and to communicate the Company’s evolving information security policies, standards, processes and practices.The Company engages in the periodic assessment and testing of the Company’s policies and practices that are designed to address cybersecurity threats and incidents. These efforts include a wide range of activities, including audits, assessments, tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures. The Company regularly engages third parties, including auditors and consultants, to perform assessments on our cybersecurity measures, including information security maturity assessments, audits and independent reviews of our information security control environment and operating effectiveness. The results of such assessments, audits and reviews are reported to the Company’s risk management function, and the Company adjusts its cybersecurity policies and practices as necessary based on the information provided by these assessments, audits and reviews.

Cybersecurity threat risks have not materially affected the Company, including our business strategy, results of operations or financial condition. For further discussion of the risks we face from cybersecurity threats, including those that could materially affect the Company, see “Item 1A. Risk Factors—Operating Risks—We rely on technology and information systems, many of which are controlled by third-party vendors, to maintain the security of our information and technology networks and to conduct our businesses, and any failures or interruptions of these systems could adversely affect our businesses and results of operations.” 

Cybersecurity Governance

In our asset management business, our board of directors’ oversight of cybersecurity risk management is supported by the audit committee of the AGM Board of Directors (the “AGM Audit Committee”), the AAM Global Risk Committee (“AGRC”), the Operational Risk Forum (the “ORF”), the Cybersecurity Working Group and management. Our board of directors, the AGM Audit Committee, the AGRC, the ORF and the Cyber Security Working Group receive regular updates on Apollo’s information technology, cybersecurity risk profile and strategy, and risk mitigation plans from the Company’s risk management professionals, the Company’s Chief Security Officer (“CSO”), CISO, other members of management and relevant management committees and working groups. The Cyber Security Working Group is chaired by the CISO and has representation from Technology, Legal, Compliance, and ERM. The group meets at least once a quarter to discuss cybersecurity and risk mitigation activities, among other topics. The CISO regularly reports to the ORF regarding cyber risk, and the ORF in