Company: DLX
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000027996-25-000051
Chunk: 51

Company: DELUXE CORP
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1C
Chunk 51
---
 breaches or other security incidents originating from these third parties.Our Enterprise Risk Management Committee, led by our Assurance and Risk Advisory Services group, Chief Financial Officer, and Chief Administrative Officer, collaborates with our executive leadership team and senior-level staff, including the Chief Compliance Officer and the CISO, to evaluate and oversee our primary enterprise risks, including cybersecurity. The CISO provides periodic updates to the board of directors, ensuring that comprehensive risk reviews are conducted and that our cyber risk assessment, practices, and policies are thoroughly discussed with management. Additionally, our Assurance and Risk Advisory Services group delivers periodic updates to the Audit and Finance committee of the board of directors covering financial and enterprise risks, including cybersecurity.In the event of a cybersecurity incident, our Cybersecurity Incident Response team will act according to our incident management plans to communicate with our executive leadership team and coordinate the response. Our Chief Executive Officer, Chief Financial Officer, General Counsel, Chief Technology and Digital Officer, CISO, and Chief Compliance Officer are responsible for assessing such incidents for materiality, ensuring that any required notification or communication occurs, and determining whether any prohibition on the trading of our common stock by insiders should be imposed before disclosing information about a material cybersecurity event. We maintain cybersecurity insurance coverage to cover costs resulting from cyberattacks, although this coverage may not reimburse us for all losses.As of the date of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition and that are required to be reported in this Form 10-K. For further discussion of the risks associated with cybersecurity incidents see Item 1A, "Operational Risks – Security breaches, computer malware, or other cyberattacks involving the confidential information we maintain could significantly damage our reputation, expose us to litigation and enforcement actions, and substantially harm our business and results of operations."