Company: LPSN
Filing Date: 2025-03-14
Form Type: 10-K
Source: 0001102993-25-000018
Chunk: 46

Company: LIVEPERSON INC
Filing Date: 2025-03-14
Form: 10-K
Item: Item 1A
Chunk 46
---
 and administrative or privileged access controls, intentional malfeasance and other third-party acts, and system errors or vulnerabilities, including vulnerabilities of our third-party service providers, our customers, partners, or otherwise. We have announced plans to move our technology infrastructure to the public cloud, which will require us to rely on third-party cloud providers to maintain appropriate safeguards. 

Additionally, following the COVID-19 pandemic, we elected to maintain a globally distributed, substantially remote workforce. Remote working arrangements may increase the risk of cybersecurity incidents or data breaches. Our use of employees and contractors from countries with higher rates of cybercrime and whose privacy laws reduce our ability to perform full background checks may increase risk of a cybersecurity incident or data breach, including insider risk.  

A breach or unauthorized access, or attempts by outside parties to fraudulently induce employees, users, vendors, or customers to disclose sensitive information in order to gain access to our data or data of our customers, users, experts, or consumers, including, but not limited to, individual personal information and financial credit or debit card data that is protected by law or contract, could result in significant legal and financial exposure, damage to our reputation, and a loss of confidence in the security of our products and services that could potentially have an adverse effect on our business. 

While we continue to take measures to enhance our information security program and safeguard our products and services, cybersecurity threats and vulnerabilities in desktop computers, mobile phones, smartphones and handheld devices, as well as cyber-attacks, cybersecurity threats, malicious actors and other security incidents continue to evolve in sophistication and frequency industry-wide, and there can be no assurance that we can prevent all security risks. Furthermore, while the Company has designed an information security program to protect our information systems from cybersecurity threats, and to ensure the confidentiality, integrity and availability of systems and information used, owned or managed by the Company related to our 

19

employees, our customers and their users, implementation of the supporting controls has coverage gaps and weaknesses and potential for human error that could provide threat actors a window of time to exploit such weaknesses before they are identified and/or addressed. The goal of the information security program is to manage risks in a prioritized fashion; however, control gaps and/or effectiveness, resource constraints, and execution failure can pose cybersecurity risk to LivePerson. In addition, although we work to continuously improve our internal controls and procedures on cybersecurity incident management, prevention, detection, mitigation, response, and recovery, we may be unsuccessful in detecting, reporting or responding to these events in a timely