Company: HCKT
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000950170-25-030037
Chunk: 11

Company: HACKETT GROUP, INC.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 11
---
 hire enough skilled employees or train, motivate, retain and manage the employees we hire. This could hinder our ability to complete existing client engagements and bid for new ones. Hiring, training, motivating, retaining and managing employees with the skills we need is time-consuming and expensive.

We rely on information technology and security systems and any damage, interruption or compromise of our information technology and security systems or data could disrupt and harm our business. 

We use information technology and security systems to process, transmit, and store electronic information in connection with the operation of our business. We also use such systems to protect proprietary and confidential information, including that of our customers, suppliers and employees. We face risks associated with cybersecurity incidents and other significant disruptions of such systems, including denial of service or other similar attacks, to our facilities or systems; unauthorized access to or acquisition of personal information, confidential information or other data we process or maintain; or viruses, loggers, or other malfeasant code, including ransomware, in our data or software. These cybersecurity incidents or other significant disruptions could be caused by persons inside our organization, persons outside our organization with authorized access to systems inside our organization, or by individuals outside our organization. The risk of a cybersecurity incident or disruption, particularly through cyber-attack or cyber-intrusion, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. Although the cybersecurity incidents that we have experienced to date, as well as those reported to us by our third-party partners, have not had a material effect on our business, financial condition or results of operations, such incidents could have a material adverse effect on us in the future.

We also rely on a number of third-party service providers to host, store or otherwise process information for us, or to provide other facilities or infrastructure that we make use of, including “cloud-based” providers of corporate infrastructure services relating to, among other things, human resources, communication services, financial functions, as well as proprietary digital technology platforms, and we are therefore dependent on the security systems of these providers. These third-party entities are subject to similar risks as it relates to cybersecurity, business interruption, and systems. Employee failures and a cybersecurity incident or other significant disruption affecting such third parties could have a material adverse effect on our business. 

Because the techniques used to obtain unauthorized access to or sabotage security systems change frequently and are often not recognized until after an attack, we and our third-party service providers may be unable to anticipate the techniques or implement adequate preventative measures,