Company: DHR
Filing Date: 2025-03-26
Form Type: ARS
Source: 0000313616-25-000085
Chunk: 65

Company: DANAHER CORP /DE/
Filing Date: 2025-03-26
Form: ARS
Chunk 65
---
 developing and implementing countermeasures for key risks. Information technology/cybersecurity is one of five topical areas required to be addressed as part of the annual ERM program. IT and cybersecurity risks are required to be scored using the same methodology applied to all other risk categories, which facilitates an evaluation of the significance and prioritization of cyber-related risks relative to wider business risks. In addition, Danaher policy requires the reporting of certain cybersecurity incident data to Danaher’s Risk Committee (comprising senior members of the legal, finance, internal audit and compliance functions) for consideration as part of the ERM process. Members of the Danaher Risk Committee present annually to the Danaher Board of Directors a report on the results of the ERM process, including with respect to information technology and cybersecurity risks. As part of our cybersecurity risk management program, we also maintain cyber insurance in amounts and subject to coverage terms that are typical for companies of our type and size. However, such insurance may not be sufficient in type or amount to cover us against damages incurred or claims related to security breaches, cyber-attacks and other related breaches. We periodically engage external consultants to assess our cybersecurity program. In addition, management’s annual assessment of the effectiveness of the Company’s internal control over financial reporting assesses the effectiveness of certain controls relating to cybersecurity, and the Company’s independent registered public accounting firm audits the effectiveness of the Company’s internal control over financial reporting. Cybersecurity Governance and Oversight At the management level, Danaher’s cybersecurity program is led by the Company’s Chief Information Security Officer (“CISO”), who reports to Danaher’s Chief Information Officer (“CIO”), who in turn reports to Danaher’s Chief Financial Officer. Danaher’s CIO has served as a technology leader for over 25 years, leading cybersecurity, engineering, and operational functions as the CIO for two multi-billion dollar businesses prior to assuming the Danaher CIO role. Danaher’s CISO has served for more than 20 years in various information security roles, including serving as the Chief Information Security Officer of two large, publicly-traded companies prior to joining Danaher. The CISO is supported by the Information Risk Steering Committee (“IRSC”), a management committee comprising senior members of the information technology, legal, privacy, finance, internal audit and communications functions. The IRSC supports the CISO and CIO in overseeing and managing information security risks and in the event of a cybersecurity incident provides oversight and leadership with respect to incident investigation, mitigation