Company: BA
Filing Date: 2025-02-03
Form Type: 10-K
Source: 0000012927-25-000015
Chunk: 19

Company: BOEING CO
Filing Date: 2025-02-03
Form: 10-K
Item: Item 1
Chunk 19
---
Contracts in the commercial satellite industry and certain government satellite contracts include in-orbit incentive payments. These in-orbit payments may be paid over time after final satellite acceptance or paid in full prior to final satellite acceptance. In both cases, the in-orbit incentive payment is at risk if the satellite does not perform to specifications for up to 15 years after acceptance. The net present value of in-orbit incentive fees we ultimately expect to realize is recognized as revenue in the construction period. If the satellite fails to meet contractual performance criteria, customers will not be obligated to continue making in-orbit payments and/or we may be required to provide refunds to the customer and incur significant charges.

Risks Related to Technology, Security and Business Disruptions

Managing a complex, global IT infrastructure exposes us to a variety of risks that could negatively impact our business.

Our company runs on a complex global technology infrastructure consisting of millions of physical and digital systems dispersed around the world and managed by different parts of the business. This decentralized model exposes us to a variety of risks. For example, integrating and maintaining interoperability across numerous, geographically dispersed systems may result in inefficiencies, increased costs, and operational disruptions. Further, ineffective monitoring or inconsistent policies across systems may result in errors, fraud, or noncompliance with regulatory requirements. Decentralized systems also may increase the risk of unauthorized access, data breaches, or 

14

noncompliance with data privacy laws and other regulatory requirements governing the handling and control of sensitive data.

Compromised or unauthorized access of our, our customers’ and/or our suppliers’ systems or data could negatively impact our business.

We face various cybersecurity threats, including attempts to gain unauthorized access to our systems and networks, denial-of-service attacks, threats to our information technology infrastructure, ransomware and phishing attacks, and attempts to gain unauthorized access to our company-, customer- and employee-sensitive information. These threats come from a variety of actors some of which are highly organized and sophisticated such as nation-state actors and criminal enterprises. In addition, the techniques used in cyberattacks evolve rapidly, including from emerging technologies, such as advanced forms of automation and artificial intelligence. As cyber threats increase in volume and sophistication, the risk to the security of these systems and networks – and to the confidentiality, integrity, and availability of the data they house – continues to evolve, requiring constant vigilance and concerted, company-wide risk management efforts.

A cyber-related attack or security breach, whether experienced directly or through our supply chain or third party-service providers, could