Company: JLL
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001037976-25-000006
Chunk: 61

Company: JONES LANG LASALLE INC
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 61
---
ITEM 1C. CYBERSECURITY

Our cybersecurity program, led by our Global Chief Information Officer (“CIO”) and Chief Information Security Officer (“CISO”), is designed to protect and preserve the confidentiality, integrity and availability of all information and systems owned by us or in our care. The Audit and Risk Committee of our Board of Directors oversees cybersecurity, as outlined in its charter and disclosed in our proxy statement.In addition, cybersecurity is reviewed as part of our enterprise risk management program led by our Director of Enterprise Risk Management, which assesses our significant enterprise risks, provides a summary of those risks and primary mitigations, identifies control improvement projects for our significant risks, and regularly reports on the progress of control improvement projects for those risks to our GEB and the Audit and Risk Committee of our Board of Directors.Our cybersecurity strategy implements layered controls aligned with the National Institute of Standards and Technology (NIST) cybersecurity framework to minimize both the likelihood and potential impact of cybersecurity events.Our CISO, who holds advanced qualifications and has extensive experience in cybersecurity, leads a global team of cybersecurity professionals. Our CISO reports to our CIO who is responsible for the Company's technology, data and information management strategy, and brings over two decades of relevant experience to the role.We engage third-party consultants for assessing, identifying and managing material cybersecurity risks, including those associated with certain third-party providers. We maintain a cyber incident response plan and regularly conduct simulations and tabletop exercises.In 2023, we established an executive management group responsible for determining the materiality of cybersecurity incidents and necessary disclosures. This group consists of our CISO, Chief Financial Officer, Chief Legal Officer and Chief Accounting Officer.Like other companies with a large technology footprint and high-profile client base, we are regularly subject to cyberattacks. While certain attacks have been successful, thus far none have had a material impact on our or our clients' operations. In addition, we acknowledge that cybersecurity threats could significantly impact our business strategy, operations, or financial condition. As such, we continue to enhance our infrastructure, monitor for threats, and evaluate our response capabilities as we deploy additional mobile and cloud technologies. Also refer to our discussion of material cybersecurity risks in the "Operational Risk Factors" section of Item 1A, Risk Factors, of this report.

Our Management and the Board of Directors provide significant oversight of cybersecurity risks. In May 2022, the Board expanded the Audit Committee’s charter to include cybersecurity and information technology readiness. In addition, the Audit Committee was renamed to the “Audit and Risk Committee” to more