Company: GEHC
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0001932393-25-000005
Chunk: 73

Company: GE HealthCare Technologies Inc.
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1C
Chunk 73
---
, consultants, auditors, and other third parties to review our cybersecurity program to help identify areas for continued focus, improvement, and compliance.

35

To date, the Company is not aware of any cybersecurity incident that has had or is reasonably likely to have a material impact on the Company, including its business strategy, results of operations, or financial condition. However, despite our security measures, there can be no assurance that the Company, or the third parties with which we interact, will not experience a cybersecurity incident in the future that may materially affect us. We describe whether and how cybersecurity-related risks could materially affect our business in item 1A. “Risk Factors” under the heading “Increased cybersecurity requirements, vulnerabilities, threats, and more sophisticated and targeted cyber crimes pose a risk to our systems, networks, products, solutions, services, and data, as well as our reputation, which could adversely affect our business.” 

CYBERSECURITY GOVERNANCE.

Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management. The Audit Committee of our Board is responsible for the oversight of cybersecurity-related risks. The Audit Committee regularly receives reports from management on our cybersecurity threat risk management and strategy processes, including on topics such as our data security posture, results from third-party assessments, progress towards pre-determined risk-mitigation-related goals, incident response plans, and cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to these risks. The Audit Committee received reports from our Chief Information Officer (“CIO”) and/or CISO five times in 2024.

Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by our CISO. The CISO works closely with the CIO, Chief Privacy Officer (“CPO”), and other members of the legal team who report to the General Counsel, to review the cybersecurity program while monitoring global data protection regulations and cyber security laws. The CISO, CIO, and CPO, collectively, have over 35 years of work experience in various roles involving managing information security, developing cybersecurity strategy, and implementing effective information and cybersecurity programs. Our CISO is currently a board member for the National Technology Security Coalition, a non-profit, non-partisan trade association serving as the voice of CISOs to help improve national cybersecurity and has served on the board of advisors of many security technology companies.