Company: LBTYK
Filing Date: 2025-02-18
Form Type: 10-K
Source: 0001570585-25-000021
Chunk: 275

Company: Liberty Global Ltd.
Filing Date: 2025-02-18
Form: 10-K
Item: Item 1C
Chunk 275
---
Item 1C.  CYBERSECURITY

Liberty Global and its subsidiaries are subject to risks from cyber-attacks that have the potential to cause significant interruptions to the operation of their businesses. The frequency of these attempted intrusions has increased in recent years and the sources, motivations and techniques of attack continue to evolve and change rapidly. We have developed a cybersecurity program that is designed to scan for, monitor and identify risks to our confidential or non-public information, protect such information, detect threats and events and maintain an appropriate response and recovery capability to help ensure resilience against cyber-attacks and other information security incidents. We have adopted a variety of measures to monitor and address cyber-related risks and continue to implement and explore additional cybersecurity measures. Our strategy for managing cyber-related risks is risk-based and, where appropriate, integrated within our comprehensive enterprise risk management processes. Our Chief Security Officer (CSO), who reports directly to our Chief Technology Officer (CTO), leads a dedicated cybersecurity team and is responsible for the design, implementation and execution of our cyber-risk management strategy. Our CSO and cybersecurity team actively monitor our systems, regularly review our policies, compliance, regulations and best practices, perform penetration testing, conduct incident response exercises and internal ethical phishing campaigns and provide periodic training and communication across our organization to strengthen security focused behavior and foster a culture of digital safety. Our cybersecurity team also routinely participates in industry-wide programs to further information sharing, intelligence gathering and unity of effort in responding to potential or actual attacks. We also periodically review our business continuity plan to develop an effective recovery strategy that seeks to decrease incident response times, limit financial impacts and maintain customer confidence during any business interruption. Our cybersecurity team also administers a third-party risk governance program that identifies potential risks introduced through third-party relationships, such as vendors, software and hardware manufacturers or professional service providers. We seek to obtain certain contractual security guarantees and assurances with these third-party relationships to help ensure the security and safety of our information. The cybersecurity team works closely with a broad range of departments, including legal, regulatory, corporate communications, audit services, information technology and operational technology functions critical to our operations, as well as engaging external vendors to help ensure our cybersecurity program operates effectively.

Our current CSO has significant experience leading cybersecurity efforts at large enterprises, having held top information security positions at a number of international large- and mega-cap companies during her career. She also holds a master of science in security risk management and is qualified as a certified information security manager with the Information Systems Audit and Control Association. Our CSO has