Company: LGN
Filing Date: 2025-04-30
Form Type: DRS/A
Source: 0000950123-25-003868
Chunk: 49

Company: Legence Corp.
Filing Date: 2025-04-30
Form: DRS/A
Chunk 49
---
 may result in information theft, data corruption, operational disruption and/or financial loss and cause potential liability or reputational damage or otherwise adversely affect our business.

Many of our business and operational processes are
heavily dependent on traditional and emerging technology systems, some of which are managed by us and some of which are managed by third-party service and equipment providers, to conduct day-to-day operations, improve safety and efficiency and lower costs. We also collect and retain information about our customers, stockholders, vendors, employees, contractors, business partners and other
parties, all of which expect that we will adequately protect such information. We use computerized systems to help run our financial and operations functions, including processing payment transactions, communicating with our employees and business
partners, storing confidential records and conducting operations, which may subject our business to increased risks. This risk may be particularly heightened by our lack of a centralized enterprise resource planning system. If any of our financial,
operational or other technology systems fail or have other significant shortcomings, our financial results could be adversely affected. Our financial results could also be adversely affected if an employee or other third party causes our operational
systems to fail, either by error or by deliberately tampering with or manipulating our operational systems. Malicious third parties or insiders may also attempt to fraudulently induce employees or customers into disclosing sensitive information such
as usernames, passwords or other information or otherwise compromise the security of our information systems. Additionally, our brands maintain some of their own information systems, data and service providers. While our cybersecurity risk
management program and processes, including policies, controls and procedures, are designed to cover our brands, these measures may not be fully implemented, complied with or effective in protecting all information systems and operations.

Cybersecurity incidents are evolving and are increasing in frequency and magnitude across all business types. We have experienced, and may
continue to experience, cybersecurity threats. We have implemented security measures, internal controls and testing, systems redundancy and third-party products and services that are designed to detect and protect against cyberattacks. We regularly
update and review our testing protocols; however, no security measure is infallible, and further, we may not be able to timely deploy and monitor effective measures and protocols at our brands. Despite these measures and any additional measures we
may implement or adopt in the future, our facilities and systems, and those of our third-party service providers, have been and continue to be vulnerable to cyber incidents, such as security breaches, computer viruses, other malicious or destructive
software,