Company: WW
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000950170-25-029511
Chunk: 127

Company: WW INTERNATIONAL, INC.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1B
Chunk 127
---
None.

Item 1C. CybersecurityIn the ordinary course of business, we provide proprietary content and we collect, store and use confidential information (including, but not limited to, personal customer information and data) in connection with providing our products and engaging our employees and contractors. We have developed systems and processes designed to protect such content and information and we maintain cybersecurity insurance coverage. Our Board of Directors (the “Board”) and management recognize the critical importance of protecting the confidentiality and integrity of such information and data and maintaining the trust and confidence of our members, business partners, employees, contractors and shareholders, as well as complying with applicable regulatory requirements and contractual obligations.The Board and its committees actively oversee the Company’s risk management program. Cybersecurity threats and related risks are an important component of the Company’s overall approach to enterprise risk management (“ERM”). We annually examine our cybersecurity program with third parties, evaluating its effectiveness in part by considering industry standards and established frameworks, such as the National Institute of Standards and Technology (NIST), as guidelines. Cybersecurity risk management is a Company-wide initiative. In general, the Company seeks to address cybersecurity risks through a comprehensive, multi-disciplinary approach that is focused on preserving the confidentiality, security, and availability of the information that the Company collects and stores by identifying, preventing, and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.Risk Management and StrategyAs one of the elements of the Company’s overall ERM program, the Company’s cybersecurity program includes the following key areas:•Governance: As discussed in more detail under the heading “Governance,” the Board’s oversight of cybersecurity risk management is supported by the Audit Committee of the Board (the “Audit Committee”), which is regularly updated on cybersecurity matters by the Company’s Chief Information Security Officer (“CISO”), other members of management, and relevant representatives from management’s committees and the Company’s Internal Audit function.•Collaborative Approach: The Company has implemented a comprehensive, multi-disciplinary approach to identifying, preventing and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.•Technical Safeguards: The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments by internal and third-party experts, and cybersecurity threat