Company: LBTYK
Filing Date: 2025-02-18
Form Type: 10-K
Source: 0001570585-25-000021
Chunk: 276

Company: Liberty Global Ltd.
Filing Date: 2025-02-18
Form: 10-K
Item: Item 1C
Chunk 276
---
 been with the company or its subsidiaries for over five years. 

I-42

Cybersecurity incidents detected by our cybersecurity team are evaluated internally based on their severity, with more serious incidents being escalated, as appropriate, to the highest levels of management, including our CTO, General Counsel and, ultimately, our CEO. These members of our executive leadership team are provided with details of the type and severity of the attack, the company’s planned response to the incident and are briefed on what information was accessed and the impact such incident has had or is expected to have on our operations, as well as any financial or regulatory implications resulting from the incident. 

Our Audit Committee is responsible for oversight of our cybersecurity measures, incident response management and risks related to cybersecurity and technology as well as the steps taken by management to mitigate such risks. Our CSO provides periodic updates to the Audit Committee on the state of our cybersecurity posture, new threats or threat actors that we are monitoring or developing defenses against and any potential areas of improvement. Our CEO, CTO, CSO and General Counsel will also provide ad hoc updates to the Audit Committee and full board of directors, as appropriate, in the case of a material cybersecurity incident, providing them a full briefing of the type and scope of the incident as well as our current and planned mitigation efforts. The Audit Committee has several members with significant direct and indirect cybersecurity experience, including Anthony Werner, the former CTO of Comcast Cable and the company, Paul Gould and Miranda Curtis CMG. Cybersecurity and the effectiveness of our cybersecurity strategy are regular topics of discussion at meetings of our Audit Committee and board of directors.In 2024, there were no cybersecurity threats, including as a result of any previous cybersecurity incidents, that materially affected or are reasonably likely to materially affect the company, including its business strategy, results of operations or financial condition.