Company: CZR
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0001590895-25-000068
Chunk: 551

Company: Caesars Entertainment, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 551
---
 desirable for the operation of our products, or support for such licensed products and technologies, will be available to us on commercially reasonable terms, if at all. If we are unable to renew and/or expand existing licenses or obtain new licenses, including as a result of reluctance of third parties to subject themselves to regulatory review that may be required to operate as our supplier, we may be required to discontinue or limit our use of the products that include or incorporate the licensed intellectual property, which could adversely impact our business, results of operations and prospects.

We are or may become involved in legal proceedings that, if adversely adjudicated or settled, could impact our business and financial condition.

From time to time, we are named in lawsuits or other legal proceedings relating to our respective businesses. Some of these matters involve commercial or contractual disputes, intellectual property claims, legal compliance, personal injury claims, and employment claims. As a result of the Data Incident (defined below), numerous putative class action lawsuits have been filed against us purporting to represent various classes of persons whose personal information was affected by the Data Incident. As with all legal proceedings, no assurances can be given as to the outcome of these matters. Moreover, legal proceedings can be expensive and time consuming, and we may not be successful in defending or prosecuting these lawsuits, which could result in settlements or damages that could significantly impact our business, financial condition and results of operations.

Item 1B.    Unresolved Staff Comments

None.

Item 1C.    Cybersecurity

Risk management and strategy

We maintain a cybersecurity team responsible for the development and implementation of a program intended to protect the confidentiality, integrity and availability of our critical systems and information. A component of our program is a cybersecurity Incident Response Plan (“IRP”) which has been built by the team utilizing current and historical industry knowledge and experience.Key elements of our risk management procedures and processes include: •risk assessments to help mitigate material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;•a team composed of IT security, IT infrastructure, and IT compliance personnel principally responsible for directing (1) our cybersecurity risk assessment processes, (2) our security processes, and (3) our response to cybersecurity incidents;•the use of external cybersecurity service providers, where appropriate, to assess, test or otherwise assist with aspects of our security processes;•formal information security training program for all team members as well as supplemental training on specific matters such as phishing and email security best practices;•a cybersecurity