Company: UHS
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000950170-25-027785
Chunk: 76

Company: UNIVERSAL HEALTH SERVICES INC
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1B
Chunk 76
---
 risks associated with these third parties through contractual reviews, vendor risk assessments, and continual risk reviews by monitoring the cybersecurity risk exposure these third parties pose and implementing remediation where necessary.Based on the information available as of the date of this Form 10-K, during our fiscal year 2024 and through the date of this filing, we did not identify any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents (as such terms are defined in Item 106(a) of Regulation S-K), that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition. For more information on risks to us from cybersecurity threats, see “Risks Related to Information Technology - A cyber security incident could cause a violation of HIPAA, breach of patient or other persons privacy, or other negative impacts.” under “Item 1A. Risk Factors.” Governance of Cybersecurity

26

Cybersecurity is an integral part of our risk management program and is an area of focus for our Board of Directors and management.  The Audit Committee of our Board of Directors is responsible for the oversight of risks from cybersecurity threats.  Members of the Audit Committee receive updates, as warranted, including quarterly updates from our Chief Information Security Officer (“CISO”) regarding matters of cybersecurity, such as key risks facing the healthcare industry and our company, core topics, review of incidents, as well as progress against key information security initiatives. Senior executive leadership also engage in ad-hoc discussions with management on cybersecurity topics. In addition, our Board of Directors are provided with an annual report regarding cybersecurity information and related topics.Our cybersecurity risk management and strategy processes are overseen by our CISO along with leaders from our Information Security, Compliance, Legal and Internal Auditing teams. Such individuals have an average of over 20 years of prior work experience in various roles involving information technology, including security, auditing, compliance, systems and programming. These individuals monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan.  

ITEM 2.	Properties

Executive and Administrative Offices and Commercial Health Insurer

We own various office buildings in King of Prussia and Wayne, Pennsylvania, Brentwood, Tennessee, Denton, Texas and Reno, Nevada. 

Facilities 

The following tables set forth the name, location, type of facility and, for acute care hospitals and behavioral health care facilities, the