Company: BCO
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000078890-25-000059
Chunk: 197

Company: BRINKS CO
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1C
Chunk 197
---
ITEM 1C.  CYBERSECURITY 

Overview

The Company’s Global Chief Information Officer (“Global CIO”) leads all aspects of the Company’s IT strategy, including digital capabilities and information systems. The Company’s Global Chief Information Security Officer (“Global CISO”), who reports to the Global CIO, is responsible for leading our enterprise-wide cybersecurity strategy, policy, standards, architecture and processes, including the Brink’s GIS Program. The Global CIO, with support from the Global CISO, provides periodic reports to the Board, the Chief Executive Officer, the Chief Financial Officer (“CFO”) (to whom the Global CIO reports) and other members of our senior management. These reports include updates on our cybersecurity risks and threats, the status of projects to strengthen our information security systems, assessments of the information security program and the emerging threat landscape. The GIS Program is regularly evaluated internally and externally, including by third-party experts, and the results of those evaluations are reported to senior management and the Board. The Company also actively engages with key vendors, industry participants and intelligence and law enforcement communities as part of its continuing efforts to evaluate and enhance the effectiveness of its information security program, policies and procedures.

Cybersecurity Risk Management and Strategy

The Company’s Processes for Assessing, Identifying, and Managing Material Cybersecurity RisksThe Company's processes for assessing, identifying, and managing cybersecurity risks generally follow frameworks established by the International Organization for Standardization (ISO) and the U.S. National Institute of Standards and Technology (NIST). The Company relies on its IT infrastructure, including the GIS Program, which is designed to reduce cybersecurity risks by ensuring that computer systems are secure through protecting networks, systems, applications, hardware, and data to mitigate cyber attacks. Our business includes managing, processing, storing and transmitting proprietary and confidential data, including personally identifiable information and other confidential information. The Company’s IT infrastructure and GIS Program are critical to its business activities, and any unauthorized access to, unplanned disruptions or failures of, or cybersecurity attacks, on these systems pose risks to our business, financial condition and results of operations.The Company has an enterprise risk management ("ERM") program, for which the Board has oversight responsibility. Under the ERM program, senior leaders from across the Company’s global footprint annually evaluate risks according to likelihood, significance and velocity to identify and prioritize the most significant risks facing the Company. "IT and Cybersecurity risk" has been identified as part of the ERM program as a significant risk, and the CFO is assigned to