Company: ZM
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001585521-25-000042
Chunk: 101

Company: Zoom Communications, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1C
Chunk 101
---
 may do so, see the risk factor titled "Our security measures, and those of the third parties with whom we work, have been compromised in the past and may be compromised in the future. If our security measures are compromised in the future or if our information technology fails, this could harm our reputation, expose us to significant fines and liability, impair our sales, and harm our business. In addition, our products and services may be perceived as not being secure. This perception may result in customers and users curtailing or ceasing their use of our products, us incurring significant liabilities, and our business being harmed" in Part I, Item 1A. Risk Factors of this Annual Report on Form 10-K.

Governance

Our Board addresses our cybersecurity risk management as part of its general oversight function. As outlined in its committee charter, the Cybersecurity Risk Management Committee of the Board (“Cybersecurity Risk Committee”) assists the Board in fulfilling its oversight responsibility. Our CISO, Michael Adams, leads the team responsible for implementing and maintaining our information security program and reports directly to the Chief Operating Officer (“COO”), who reports directly to our Chief Executive Officer (“CEO”). Mr. Adams is a graduate of the United States Naval Academy and brings nearly 30 years of security and leadership experience, including serving as Deputy General Counsel of NATO's International Security Assistance Force Joint Command, Deputy General Counsel of the United States' Military's Pacific Command, and Deputy 

49

Table of Contents

General Counsel for two Chairmen of the Joint Chiefs of Staff of the United States, as well as an executive at a leading technology company. Mr. Adams previously served as Zoom's Chief Counsel to the COO and CISO.The CISO provides regular briefings to our senior management and the Cybersecurity Risk Committee concerning relevant cybersecurity risks and the processes we have implemented to address them. The Cybersecurity Risk Committee and the Board also receive various reports, summaries, and presentations related to cybersecurity threats, risks, and mitigations.