Company: ARI
Filing Date: 2025-02-10
Form Type: 10-K
Source: 0000950170-25-017122
Chunk: 17

Company: Apollo Commercial Real Estate Finance, Inc.
Filing Date: 2025-02-10
Form: 10-K
Item: Item 1A
Chunk 17
---
 providers may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures, and thus it is impossible for us and our service providers to entirely mitigate this risk.

Remote work has become more common among the employees and personnel of the Manager, Apollo and other third-party service providers and has increased risks to the information technology systems and confidential, proprietary, and sensitive data of the Manager, Apollo and other third-party service providers as more of those employees utilize network connections, computers, and devices outside of the employer's premises or network, including working at home, while in transit, and in public locations. Those employees working remotely could expose the Manager, Apollo and other third-party service providers to additional cybersecurity risks and vulnerabilities as their systems could be negatively affected by vulnerabilities present in external systems and technologies outside of their control.

Our business depends on the communications and information systems of Apollo and other third-party service providers. Such systems may fail to operate properly or become disabled as a result of cyber incidents. Any failure or interruption of the systems of Apollo or any other counterparties that we rely on could cause delays or other problems and could have a material adverse effect on our operating results. None of us, the Manager or Apollo have experienced any material breach of cybersecurity. However, we can provide no assurance that the networks and systems that we, the Manager, Apollo or our third-party service 

 11

providers have established, or use will be effective. As our reliance on technology has increased, so have the risks posed to our communications and information systems, both internal and those provided by the Manager, Apollo and third-party service providers. Apollo's processes, procedures and internal controls that are designed to mitigate cybersecurity risks and cyber intrusions do not guarantee that a cyber incident will not occur or that our financial results, operations or confidential information will not be negatively impacted by such an incident. Despite the security policies and procedures, Apollo has implemented that were designed to safeguard our systems and confidential, proprietary, and sensitive data and to manage cybersecurity risk, there can be no assurance that these measures will be effective. Apollo takes steps to monitor and develop our information technology networks and infrastructure and invest in the development and enhancement of our controls designed to prevent, detect, respond to, and mitigate the risk of unauthorized access, misuse, computer viruses, and other events that could have a security impact.

As new technologies, including tools that harness generative artificial intelligence and other machine learning techniques, rapidly develop and become even more accessible, the use of such new technologies by us, our affiliates and our third