Company: BRK-A
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000950170-25-025210
Chunk: 189

Company: BERKSHIRE HATHAWAY INC
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 189
---
Berkshire recognizes that maintaining processes for identifying, assessing, and managing cybersecurity threats is important in dealing with its significant business risks. As such, Berkshire has implemented a framework for cybersecurity and cyber-related information management across Berkshire’s diverse groups of businesses. The framework permits each Berkshire Business Group (“Business Group”) to tailor solutions to identify, manage, and mitigate risks based on their own assessment of their unique cybersecurity risks in conjunction with each Business Group’s overall risk management processes. At the same time, the framework helps enable consistent and appropriate compliance in reporting material cyber events and risks across Berkshire.

Each Business Group’s Chief Information Security Officer (“CISO”) on at least an annual basis is to provide a report to the Business Group’s senior management, regarding the state of their cybersecurity program and its material cyber risks. These reports are also shared with Berkshire’s internal audit group to inform and enhance the overall company’s risk management processes. In addition, each Business Group is required to maintain an incident reporting process to report significant cybersecurity events to Berkshire. Berkshire and its Business Groups engage and partner with a wide range of third parties to assess, audit, educate, implement, operate, protect, and remediate various cybersecurity related elements.