Company: GE
Filing Date: 2025-02-03
Form Type: 10-K
Source: 0000040545-25-000015
Chunk: 79

Company: GENERAL ELECTRIC CO
Filing Date: 2025-02-03
Form: 10-K
Item: Item 1A
Chunk 79
---
 from human or technological errors, pose risk to the security of our and our customers', partners', suppliers' and third-party service providers' infrastructure, products, systems and networks and the confidentiality, availability and integrity of GE Aerospace and customers' data, as well as associated financial and reputational risks. The perpetrators of such attacks include sophisticated malicious actors, including states and state-affiliated actors targeting critical infrastructure. The risks in this area continue to grow, and we expect cyberattacks will continue to accelerate on a global basis in frequency and impact as threat actors increasingly use artificial intelligence and other techniques to circumvent security controls, evade detection and remove forensic evidence. As a result, there can be no assurance that our cybersecurity risk management processes, 

30 2024 FORM 10-K

including our policies and controls, will be effective in promptly or effectively detecting, containing or remediating cybersecurity attacks, which may result in material harm to our systems, information or business.

We have experienced, and expect to continue to experience, cyberattacks of varying degrees of sophistication and various cybersecurity incidents, such as distributed denial of service attacks and phishing attacks. It may take considerable time for us to investigate and evaluate the full impact of incidents, particularly for sophisticated attacks. This may inhibit our ability to provide prompt, full and reliable information about the incident to our customers, suppliers, regulators and the public. A significant cyber-related attack against us, a key third-party system or a network that we use, or in our sector, such as an attack on commercial aircraft (even if such an attack does not involve our products, services or systems), could adversely affect our business. The large number of suppliers that we work with requires significant effort for the initial and ongoing verification of the effective implementation of cybersecurity requirements by suppliers. The increasing degree of interconnectedness that we have with our partners, suppliers and customers also poses a risk to the security of our network as well as the larger ecosystem in which we operate. Our risk mitigation efforts may fail to prevent, detect and limit the impact of cyber-related attacks, and we remain vulnerable to known and unknown cybersecurity threats.

The continued adoption of new technologies across our business and by our suppliers, including emerging technologies, system migrations and network transitions, also increases our exposure to cybersecurity threats. Any unknown vulnerability or compromise in our or a third-party product (for example, open source software) exposes our systems, networks, software or connected products to malicious actors that seek to misuse our products, steal intellectual property, misappropriate sensitive, confidential or personal data, or create safety