Company: ACA
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001739445-25-000026
Chunk: 53

Company: Arcosa, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 53
---
 to prevent, detect, and mitigate these threats, there is no guarantee such efforts will be successful in preventing a cyber event or that any third parties with which we do business will be successful in preventing a cyber event. We have invested and continue to invest in risk management, information security, and data protection measures, including technical, administrative, and organizational safeguards, in order to protect our systems and data. The cost and operational consequences of implementing, maintaining, and enhancing further data or system safeguards could increase significantly to keep pace with increasingly frequent, complex, and sophisticated global cyber threats. Any material breaches of cybersecurity, including the accidental loss, inadvertent disclosure or unapproved dissemination of proprietary information or sensitive or confidential data, or media reports of perceived security vulnerabilities to our systems, products, and services or those of our third parties could cause us to experience reputational harm, loss of customers and revenue, fines, regulatory actions and scrutiny, sanctions, or other statutory penalties, litigation, liability for failure to safeguard our customers' information, or financial losses that are either not insured against or not fully covered through any insurance maintained by us. Any of the foregoing may have a material adverse effect on our business, operating results, and financial condition.

Arcosa is subject to complex and evolving laws and regulations regarding privacy and cybersecurity.

The laws and regulations governing cybersecurity, data privacy and protection, and the unauthorized disclosure of confidential or protected information pose increasingly complex compliance challenges and potentially elevate costs, and any actual or perceived failure to adequately address privacy and cybersecurity concerns or comply with applicable laws and regulations could result in significant penalties, legal liability, judgments and negative publicity; require us to change our business practices; increase the costs and complexity of compliance; and adversely affect our business. If we are not able to adjust to changing laws, regulations and standards relating to privacy or cybersecurity, our business may be materially harmed. As noted above, we are also subject to the possibility of cyber events, which themselves may result in a violation of these privacy and data security laws.

Arcosa’s inability to sufficiently protect Arcosa’s intellectual property rights could adversely affect Arcosa’s business.

Arcosa’s patents, copyrights, trademarks, trade secrets, and other intellectual property rights are important to Arcosa’s success. Arcosa relies on patent, copyright, and trademark law, and trade secret protection and confidentiality and/or license agreements with others to protect Arcosa’s intellectual property rights. Arcosa’s trademarks, service marks, copyrights, patents, and trade secrets may be exposed to market confusion, commercial abuse, infringement, or