Company: GFS
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001709048-25-000024
Chunk: 40

Company: GLOBALFOUNDRIES Inc.
Filing Date: 2025-03-20
Form: 20-F
Item: Item 16K
Chunk 40
---
 Legal Officer. We also have processes in place to manage cybersecurity risks associated with our third-party service providers, including our suppliers, vendors and other partners, as well as our outside consultants, legal counsel and auditors who help us with our cybersecurity risk management and strategy processes. We impose security requirements upon our suppliers, including maintaining an effective security management program, abiding by information handling and asset management requirements, and notifying us in the event of any known or suspect cyber incident. Although we continue to make significant investments in cybersecurity and data security, as well as other efforts to combat breach and misuse of our systems and unauthorized access to our and our customers’ data by third parties, there can be no assurance that we will be able to mitigate all risks of cyberattacks or data security breaches.

Governance

The governance structure for GF’s comprehensive information protection and overall cybersecurity program includes frequent reviews with GF’s senior leadership team, at least quarterly reviews by our Audit Committee and annual reviews by theBoard. These reviews include alignment on our comprehensive information security and cybersecurity strategy, risk management, and execution to program plans. As part of our cybersecurity and information protection program, GF’sChief Information Security Officer (“ CISO”)executes, enforces and maintains GF’s global information and cybersecurity strategy, policies and procedures. In addition, GF maintains a global IT security policy detailing acceptable use of GF information resources. Our CISO reports to our Chief Information Officer (“ CIO”), who reports to our COO. Our CISO and CIO have extensive experience assessing and managing cybersecurity programs and cybersecurity risk. Prior to joining GF, our CISO served in similar positions at GE Renewable Energy since 2017. Our CIO has more than two decades of experience in enterprise-wide technology transformations and digital thought leadership. Prior to joining GF, our CIO served in senior management positions leading corporate information and compliance processes and strategies.

In consultation with the Audit Committee, GF has adopted a framework for making and reporting cybersecurity materiality determinations. The materiality assessment framework has been incorporated into our overall global crisis management process and utilizes the NIST FIPS 199 Framework, in combination with other factors noted in the Commission’s cybersecurity rule-making process.

We employ certain third-party service providers for us and our affiliates worldwide with whom we need to share highly sensitive and confidential information to enable them to provide the relevant services. Some of our third-party service providers have experienced cyberattacks of which we have been made aware.

We cannot provide assurance that our business strategy, results of operations and financial conditions will not be materially affected