Company: ACIW
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000935036-25-000006
Chunk: 111

Company: ACI WORLDWIDE, INC.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1C
Chunk 111
---
  Our cybersecurity policies, standards, processes, controls, and practices are periodically assessed by third-party consultants. These assessments address a variety of activities including information security maturity assessments, audits, regulatory compliance assessments, and independent reviews of our information security control environment and operating effectiveness. The results of assessments are reported to the Board and Audit Committee. Cybersecurity processes are adjusted based on the information provided from these assessments.As of the date of this filing, we do not believe that any risks from cybersecurity threats, including as a result of past cybersecurity incidents, have had, or are reasonably likely to have, a material effect on our business strategy, results of operations or financial condition, but we cannot assure that our business strategy, results of operations and financial condition will not be materially affected in the future by cybersecurity risks or future cybersecurity incidents.

Governance

Our Chief Information Security Officer (“CISO”) leads GIS, and together with our Chief Compliance Officer (“CCO”) are responsible for managing and assessing cybersecurity risk and strategy. They oversee our cybersecurity program and are responsible for identifying, assessing, monitoring, managing and communicating our cybersecurity risks. GIS is comprised of information security professionals with a variety of cybersecurity certifications and accreditations. GIS is aided by the Executive Risk Management Committee, which is comprised of senior leaders and subject matter experts throughout our company, including our CISO and CCO, who serve on the committee to assess and mitigate specific business unit risks, promote an understanding of potential issues, and provide risk resolution and prevention support. GIS and the Executive Risk Management Committee are responsible for keeping the Audit Committee apprised of developments with respect to our cybersecurity strategy and risks.  

25

Table of Contents

Our CISO has served in various roles in information technology and information security for more than 30 years, including 20 years in Financial Services, along with serving as the Deputy Head of Global Information Security at ACI prior to being designated as CISO and has been with ACI since 2008. Our CCO has served in various risk and compliance roles in both global and regulated entities within financial services technology organizations, along with serving as the Head of Enterprise Risk at ACI prior to being designated as CCO and has been with ACI since 2022. The CCO’s expertise focuses on designing, maturing, and embedding risk and compliance frameworks; credentials also include a Juris Doctor, a Masters of Business Administration with a focus in Finance and emphasis in consulting, and a Bachelors of Science in Business Administration.The Audit Committee oversees our cybersecurity strategy and risks.