Company: UAA
Filing Date: 2025-05-22
Form Type: 10-K
Source: 0001336917-25-000078
Chunk: 78

Company: Under Armour, Inc.
Filing Date: 2025-05-22
Form: 10-K
Item: Item 1C
Chunk 78
---
 Board has delegated primary responsibility to oversee the management of risks related to information technology use and protection, including cybersecurity and data privacy, to the Audit Committee, while retaining oversight of management's overall approach to risk management. The Audit Committee receives regular reports regarding our cybersecurity risks through two annual briefings by senior management, including our Chief Information Security Officer ("CISO") and head of data privacy, and additional periodic updates as appropriate. At each Board meeting, the chairperson of the Audit Committee and the Corporate Secretary report on the Audit Committee’s activities, including risk management, which provides an opportunity to discuss significant cybersecurity risks with the full Board. Our CISO leads our global cybersecurity team and is responsible for our cybersecurity program. Our current CISO has served in various roles in information technology and information security for over twenty years, including at our Company since 2013. He holds an MBA and a Certified Information Systems Security Professional certification. Our CISO reports to our Chief Technology Officer, who reports to our Chief Executive Officer.

Impact of Cybersecurity Risks on Strategy and Results

As of the date of this Annual Report on Form 10-K, we have not identified any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business, including our business strategy, results of operations or financial condition. However, we and our third-party service providers continue to experience cyberattacks, including phishing, ransomware and other attempts to gain unauthorized access to our and their systems, that could materially affect us in the future. For additional information regarding the threats we face, see "Risk Factors—Business and Operational Risks—If we encounter problems with our distribution system, our ability to deliver our products to the market could be adversely affected"; "—We rely significantly on information technology and any failure, inadequacy or interruption of that technology could harm our ability to effectively operate our business"; and "—Legal, Regulatory and Compliance Risks—Data security or privacy breaches could damage our reputation, cause us to incur additional 

24

Table of Contents            

expense, expose us to litigation and adversely affect our business and results of operations" included in Part I, Item 1A of this Annual Report on Form 10-K.