Company: CL
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0000021665-25-000008
Chunk: 84

Company: COLGATE PALMOLIVE CO
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1A
Chunk 84
---
 payments to customers, suppliers and vendors;

•hosting, processing and sharing confidential and proprietary research, intellectual property, business plans and financial information;

•summarizing and reporting results of operations, including financial reporting;

•managing our banking and other cash liquidity systems and platforms;

•complying with legal, regulatory and tax requirements;

•providing data security; and

•handling other processes involved in managing our business.

Although we have a broad array of information and operational security measures in place, our IT/OT Systems, including those of third-party service providers with whom we have contracted, have been, and will likely continue to be, subject to computer viruses or other malicious codes, unauthorized access attempts, phishing and other cyberattacks. Cyberattacks and other cyber incidents are occurring more frequently, are constantly evolving in nature, are becoming more sophisticated and are being made by different threat actors including groups, individuals and nation states with a wide range of expertise and motives. Such cyberattacks and cyber incidents can take many forms, including cyber extortion, social engineering, password theft or introduction of viruses or malware, such as ransomware. In addition, the techniques used in cyberattacks and cyber incidents continue to evolve and develop, including through the use of existing and emerging technologies, such as artificial intelligence.

We cannot guarantee that our security efforts will prevent breaches or breakdowns of our or our third-party service providers’ IT/OT Systems because the techniques used in these attacks change frequently and may be difficult to detect for periods of time. In addition, although we have policies and procedures in place to ensure that all personal information collected by us or our third-party service providers is securely maintained, data leakages due to human error or intentional or unintentional conduct have occurred and likely will occur again. Furthermore, we periodically upgrade our IT/OT Systems or adopt new technologies. If such an upgrade or new technology does not function as designed or does not go as planned or if an attacker identifies a vulnerability in our IT/OT Systems, then our exposure to a cyberattack or cyber incident may increase significantly.

A cyberattack or cyber incident may adversely impact our business, including our ability to ship products to customers, issue invoices and process payments or order raw and packaging materials. Although we have seen no material impact on our business operations from the cybersecurity incidents we have experienced to date, if we suffer a significant loss or disclosure of confidential business or stakeholder information as a result of a breach of our IT/OT Systems, including those of third-party service providers with whom we have contracted