The Audit Committee oversees management’s implementation of our cybersecurity risk 31 management program, including reviewing risk assessments from management with respect to our information technology systems and procedures, and overseeing our cybersecurity risk management processes.
The Audit Committee oversees management’s implementation of our cybersecurity risk management program, including reviewing risk assessments from management with respect to our information technology systems and procedures, and overseeing our cybersecurity risk management processes.
In addition, we own an office building in Fort Collins, Colorado that is occupied by Waterpik and an office building in Princeton, New Jersey that is occupied by our research and development department. We own or lease manufacturing facilities, warehouses and other offices in 16 different U.S. states and 12 different countries outside of the U.S.
In addition, we own an office building in Fort Collins, Colorado that is occupied by Waterpik and an office building in Princeton, New Jersey that is occupied by our research and development department. We own or lease manufacturing facilities, warehouses and other offices in 16 different U.S. states and 10 different countries outside of the U.S.
Our cybersecurity incident response plan is part of our overall Information Security Program, which is led by the Company’s Vice President, Global Chief Information Security Officer ("CISO") and overseen by the Company’s Executive Vice President, Global Chief Information Officer, and is designed to protect and preserve the confidentiality, integrity and continued availability of all information owned by, or in the care of, the Company, and the Company’s ability to operate.
Our cybersecurity incident response plan is part of our overall Information Security Program, which is led by the Company’s Vice President, Global Chief Information Security Officer (“CISO”) and overseen by the Company’s Executive Vice President, Chief Technology & Analytics Officer , and is designed to protect and preserve the confidentiality, integrity and continued availability of all information owned by, or in the care of, the Company, and the Company’s ability to operate.
The Audit Committee, which is tasked with oversight of certain risk issues, including cybersecurity, receives reports from the Executive Vice President, Global Chief Information Officer and the Vice President, Chief Information Security Officer each quarter .
The Audit Committee, which is tasked with oversight of certain risk issues, including cybersecurity, receives reports from the Executive Vice President, Chief Technology & Analytics Officer and the Vice President, Chief Information Security Officer each quarter .
In addition, management will update the Audit Committee, as necessary, regarding cybersecurity incidents, that we may experience. Our management team, including our Global Chief Information Officer , is responsible for assessing and managing our material risks from cybersecurity threats.
In addition, management will update the Audit Committee, as necessary, regarding cybersecurity incidents that we may experience. Our management team, including our Executive Vice President, Chief Technology & Analytics Officer , is responsible for assessing and managing our material risks from cybersecurity threats.
We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or cash flows.
We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or cash flows. 31 Cybersecurity Governance Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks.
Our cybersecurity risk management program includes: • risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our global enterprise IT environment; • a security team responsible for managing our (1) cybersecurity risk assessment processes, (2) security controls, and (3) response to security breaches and cyberattacks; • the use of external service providers, where appropriate, to assess, perform tabletop exercises or otherwise assist with aspects of our security controls and designed to anticipate cyberattacks and respond to breaches, including a biennial maturity assessment of our program by an external third-party; • cybersecurity awareness training of our employees and contractors, incident response personnel, and senior management to help them better understand the issues and risks relative to cybersecurity, as well as data privacy (for our employees); • Periodically throughout the year, our IT department performs phishing and other exercises to both test our systems and reinforce training of our personnel; • a cybersecurity incident response plan managed by our CISO that includes procedures for responding to cybersecurity incidents and is designed to protect and preserve the confidentiality, integrity and continued availability of all information possessed by the Company; • policies to establish requirements for protecting information assets and defining acceptable behaviors to ensure compliance, mitigate risks, prevent unauthorized access, and foster a culture of security awareness and accountability, thereby enhancing the organization's overall security posture; and • a third-party risk management process for service providers, suppliers, and vendors.
We have also conducted training programs for our Board of Directors to enhance Directors’ literacy on information security issues; • periodically throughout the year, our IT department performs phishing and other exercises to both test our systems and reinforce training of our personnel; • a cybersecurity incident response plan managed by our CISO that includes procedures for responding to cybersecurity incidents and is designed to protect and preserve the confidentiality, integrity and continued availability of all information possessed by the Company; • policies to establish requirements for protecting information assets and defining acceptable behaviors to ensure compliance, mitigate risks, prevent unauthorized access, and foster a culture of security awareness and accountability, thereby enhancing the organization's overall security posture; and • a third-party risk management process for service providers, suppliers, and vendors.