Company: VRT
Filing Date: 2025-02-18
Form Type: 10-K
Source: 0001628280-25-005905
Chunk: 210

Company: Vertiv Holdings Co
Filing Date: 2025-02-18
Form: 10-K
Item: Item 1
Chunk 210
---
 understand the critical importance of cybersecurity in maintaining the trust, confidence and support of customers, employees, and other stakeholders. The Company, as a supplier of products of critical digital infrastructure technologies to our customers, is reliant on technology and information systems that may comprise part of the products we sell or the services that we provide. As a worldwide business, we have also become increasingly dependent on digital technologies, including information systems, infrastructure and cloud applications and services, to operate our businesses, process and record financial and operating data (including processing customer orders, shipping products, billing our customers, and tracking inventory), communicate with our employees and business partners, and perform other activities related to our businesses. Our evolution into smart products, Internet of Things, business-to-consumer, and e-commerce subjects us to increased cyber and technology risks. The secure operation of our information technology systems and networks and ensuring that we have skilled personnel to assist in ensuring their continued security is critical to our business operations and strategy.

Our cybersecurity program aims to provide a robust, dynamic and secure environment that protects the confidentiality, integrity, and availability of this data. Our cybersecurity program has a fully defined set of documentation that is aimed at identifying, assessing and responding to cybersecurity risks. Our implementation of various internal and external controls and processes, including appropriate internal risk assessment and internal policy implementation, incorporating a risk-based cyber security framework to monitor and mitigate security threats and other strategies to increase security for our information, facilities and infrastructure, is discussed below. In addition, we provide disclosure and discussion with respect to the following facets relating to the Company’s cybersecurity program (a) our risk management processes and overall strategy for addressing cybersecurity threats and incidents within the context of our information systems (each as defined in Item 106 of Regulation S-K); (b) the potential impact of cybersecurity threats on our business strategy, results of operations, and financial condition; and (c) the respective roles of the Board in overseeing, and the Company’s management in assessing and managing, cybersecurity threats and cybersecurity incidents. 

Risk Management and Strategy

Processes for Assessing, Identifying, and Managing Cybersecurity Threats: The Company maintains a fully defined set of documentation for assessing, identifying, and managing material risks from cybersecurity threats. We recognize the risk that cybersecurity threats pose to our operations, and cybersecurity is an integral component of our overall enterprise risk management ("ERM") strategy. Our cybersecurity framework is aligned with the National Institute of Standards and Technology’s special publication 800-53 and ISO 27001 and is comprised of the following four main pillars:Risk