Company: BCO
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000078890-25-000059
Chunk: 103

Company: BRINKS CO
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 103
---
 the Brink’s Ethics Hotline. We believe providing ongoing training and real-world learnings to the Company’s workforce is a crucial part of ensuring security and defending against future attacks.The Company internally assesses its cybersecurity regularly and engages a third-party external auditor to conduct annual cybersecurity risk assessments, both of which allow us to identify key cybersecurity and data protection risks and develop plans, policies, and procedures to mitigate such risks. We also have a vulnerability management program in place that is designed to protect our external and internal networks and critical assets. In addition, we have designed policies and procedures so that our Disclosure Committee, which is composed of members of management and is co-chaired by the Company’s CFO and General Counsel, is appropriately informed of significant cybersecurity matters to ensure compliance with applicable cybersecurity disclosure requirements for our public filings. The Disclosure Committee meets on a quarterly basis and more often as necessary. 

15

We maintain cybersecurity insurance and regularly consult with third-party cybersecurity experts during our review of existing cybersecurity controls. We also perform periodic assessments of our key vendors, which allow the Company to identify vendor cybersecurity risks and develop reasonable mitigation plans.Impacts of Cybersecurity Threats and Prior IncidentsWe have experienced and expect to continue to experience cybersecurity attacks and have expended human and financial resources to respond to such attacks. Although we have taken significant steps to mitigate cybersecurity risk across a range of functions, such measures can never eliminate the risk entirely or provide absolute security. As of December 31, 2024, management has determined that none of the cyberattacks we have experienced, individually or in the aggregate, have had a material adverse effect on our business, financial condition, or results of operations, but we cannot provide assurance that we will not be materially affected in the future by such risks or any future material incidents. For more information about these risks, see the risk factor titled “Risks associated with information technology can expose Brink’s to business disruptions, cybersecurity breaches and regulatory violations” under Item 1A of this Annual Report on Form 10-K and incorporated by reference herein.

Cybersecurity Governance 

Board’s Oversight of Risks from Cybersecurity Threats

The Board oversees our ERM program, including the review of cybersecurity and IT risks. The Board is also regularly briefed by the Global CIO, with the support of the Global CISO, on our cybersecurity risk management framework and completed, ongoing and planned actions relating managing to cybersecurity risks. These reports also include updates on the status of projects to strengthen our information security systems, recent assessments of the information security program and