Company: OC
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0001370946-25-000077
Chunk: 185

Company: Owens Corning
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1A
Chunk 185
---
 technology systems could materially affect our operations and financial results.

We rely on information technology systems, including information technology systems of our third-party business partners, across our operations, including for management, supply chain and financial information and various other processes and transactions. Our ability to effectively manage our business depends on the security, reliability and capacity of these systems. Our information technology systems, some of which are dependent on services provided by third parties, may be vulnerable to damage, interruption, or shutdown due to any number of causes outside of our control such as catastrophic events, natural disasters, fires, power outages, systems failures, telecommunications failures, employee error or malfeasance, security breaches, computer viruses or other malicious codes, ransomware, unauthorized access attempts, denial of service attacks, phishing or other social engineering attempts, hacking, and other cybersecurity incidents. Cybersecurity threat actors also may attempt to exploit vulnerabilities in software that is commonly used by companies in cloud-based services and bundled software. In addition, our operations in certain geographic locations may be particularly vulnerable to cybersecurity incidents or other problems. Any such damage, interruption, or shutdown could cause delays or cancellation of customer orders or impede the manufacture or shipment of products, processing of transactions or reporting of financial results. A cybersecurity incident or other problem with our systems could also result in the disclosure of proprietary information about our business or confidential information concerning our customers, suppliers or employees, which could result in significant damage to our business and our reputation.

We have established a range of security measures that are designed to protect against the unauthorized access to and misappropriation of our information, corruption or alteration of data, intentional or unintentional disclosure of confidential information, or disruption of operations. However, advanced cybersecurity threats, such as malware, ransomware, and phishing attacks, attempts to access information, and other security breaches, are persistent and continue to evolve, making them increasingly difficult to identify and prevent. Protecting against these threats requires significant resources, and is expected to continue to require significant resources, and we may not be able to implement measures that will protect against all of the significant risks to our information technology systems. In addition, we rely on a number of third-party business partners to execute certain business processes and maintain certain information technology systems and infrastructure, evaluate defenses and implement recommendations and any breach of security on their part could impair our ability to effectively operate. 

Although we experience cybersecurity incidents from time to time as part of our operations, we have not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that have had