Company: CNS
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0001284812-25-000087
Chunk: 15

Company: COHEN & STEERS, INC.
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 15
---
 and are becoming increasingly sophisticated, including the use of “ransomware” and phishing attacks, and may not be recognized 

8

until launched. Highly publicized security breaches continue to expose failures of companies to keep pace with the threats posed by cyber-attackers and have led to increased government, regulatory and media scrutiny. 

Cybersecurity has become a top priority of regulators around the world. Many jurisdictions in which we operate have, or are considering adopting, laws and regulations relating to data privacy, cybersecurity and protection of personal information. Our potential liability remains a concern, particularly given the continued and rapid development of privacy laws and regulations around the world, the lack of harmonization of such laws and regulations, and increased criminal and civil enforcement actions and private litigation. As new privacy-related laws and regulations are implemented, the time and resources needed for us to comply with such laws and regulations continues to increase and become a significant compliance workstream. Any inability, or perceived inability, by us to adequately address privacy concerns, or comply with applicable laws, regulations, policies, industry standards and guidance, contractual obligations or other legal obligations, even if unfounded, could result in significant regulatory and third-party liability, increased costs, disruption of our business and operations and a loss of client (including investor) confidence and other reputational damage. 

We cannot assure you that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages, breaches in our systems, or those of our third-party vendors and other contractors and consultants, or other cyber incidents that could have a material adverse effect upon our reputation, business, operations or financial condition. Although we take precautions to password-protect and encrypt all authorized electronic devices, if such devices are stolen, misplaced or left unattended, they may become vulnerable to hacking or other unauthorized use, creating a possible security risk. Our or our third-party service providers’ systems may also be affected by, or fail as a result of, catastrophic events, such as fires, floods, hurricanes, tornadoes, acts of terrorism or power disruptions. Like other companies, we have experienced and will likely continue to experience cyber incidents, security threats and attacks. There can be no assurance that our efforts to maintain and monitor the security and integrity of our information technology systems will be effective at all times.

Any breach or other failure of our or certain other parties’ technology or security systems, including but not limited to those systems of our third-party intermediaries, service providers, key vendors and third parties with whom we do business,