Company: AOS
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0000091142-25-000036
Chunk: 37

Company: SMITH A O CORP
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1C
Chunk 37
---
 Standards and Technology Cybersecurity Framework (NIST CSF), although we also look to other standards to help us identify, assess, and manage cybersecurity risks relevant to our business.The Company has a robust cybersecurity program to assess, identify and manage material risk from cybersecurity threats and to prevent, detect and respond to cybersecurity threats, including those associated with the use of third-party service providers. Our approach to cybersecurity risk management includes:•Cybersecurity awareness training, including interactive simulations and tabletop exercises for our employees, incident response personnel, senior management, and our Board;•Periodic risk assessments designed to help identify significant or potentially material cybersecurity risks to our critical systems, information, and our broader enterprise information technology (IT) environment;•The use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;•A multi-layered defense and continuous monitoring strategy employing various tools and testing, and incorporating lessons learned from our defense and monitoring efforts to help prevent future attacks;•Regular testing by our Internal Audit function of controls related to our financial information systems; and•Information security assessments conducted on third parties with whom we share sensitive electronic data against established cybersecurity frameworks;

While we have experienced cybersecurity incidents in the past, to-date none have materially affected the Company or our financial position, results of operations and/or cash flows. We continue to invest in cybersecurity and the resiliency of our networks, including our controls and processes, all of which are designed in an effort to protect our IT systems and infrastructure, and the information they contain. For more information regarding the risks we face from cybersecurity threats, please see Item 1A - Risk Factors.

13