Company: SLGN
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000849869-25-000029
Chunk: 141

Company: SILGAN HOLDINGS INC
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1C
Chunk 141
---
ITEM 1C. CYBERSECURITY.

We are committed to protecting our critical information and data and information technology environment and defending against cybersecurity threats. We focus on relevant areas of cybersecurity risks and vulnerabilities and seek to mitigate such risks by maintaining secure environments, maintaining processes to identify cybersecurity threats and raising awareness of cybersecurity risks to our employees. We utilize a comprehensive, multi-layered approach for our cybersecurity management which is generally aligned with the National Institute on Standards and Technology Cybersecurity Framework. We have a number of controls and procedures in place to recognize potential cybersecurity threats and potential incidents and elevate such potential incidents to senior management and our outside advisors to determine the scope and materiality of such incidents. Automated tools and our third party security operation center provide alerts to our cybersecurity staff regarding potential threats. We also use an array of defenses to protect our cybersecurity environment and mitigate cybersecurity threats, including multi-factor authentication, access controls, email filtering, firewalls, intrusion prevention and detection systems, partitioning and encryption of information, backup and data recovery procedures, malware defenses, disaster recovery and incident plan responses, hardware and software updates and patching, and related programs. We regularly assess the efficacy of these defenses and mitigation measures and implement improvements, focusing on critical matters and threats. To further promote a culture of cybersecurity awareness and defense, we also have regular educational and training sessions for our relevant employee population about the importance of cybersecurity and our key information more generally. We regularly engage third parties and leverage their expertise to improve our cybersecurity environment and defenses against third party threats. Such third parties assist us in the assessment and testing of our cybersecurity environment and help us identify any potential gaps in our cybersecurity defenses. We also regularly discuss evolving cybersecurity threats with third parties and interface with software and hardware providers to manage our cybersecurity environment. We have extensive incident response plans in place that provide a documented framework to, among other things, identify the critical steps to be taken for immediate access, rescue and recovery actions when a system disruption occurs. We also have comprehensive business continuity plans in place for disruptions, including a system disruption, that include recovery actions and alternate methods including manual work arounds that allow us to continue operating and shipping products. Our incident response plans and business continuity plans are regularly reviewed and updated, with a focus on continuous improvement.While we have not had any cybersecurity incident that has materially affected or is reasonably likely to materially affect us, including our business strategy, results of operations or financial condition, future cybersecurity incidents or threats could have a material impact on our results of operations or financial condition as discussed in “Risk Factors