Snapshot 22534
Normalized text
Scripts and page chrome removed; this is what change detection compares.
{
"cik": "1015922",
"name": "CHECK POINT SOFTWARE TECHNOLOGIES LTD",
"reports": [
{
"accession": "0001178913-26-001932",
"document": "https://www.sec.gov/Archives/edgar/data/1015922/000117891326001932/zk2634942.htm",
"filed": "2026-03-31",
"form": "20-F",
"index": "https://www.sec.gov/Archives/edgar/data/1015922/000117891326001932/0001178913-26-001932-index.htm",
"period": "2025-12-31",
"text": "Cyber security Risk Management and Strategy\nAs a public security company, we prioritize robust cyber security measures to protect our assets, operations, and stakeholders. We have established policies and processes for assessing, identifying, and managing material risks from cyber security threats (as defined below), and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cyber security threats, including any potential cyber security incidents (as defined below).\nWe conduct periodic risk assessments to identify cyber security threats, as well as additional assessments in the event of a material change in our business practices that may affect information systems (as defined below) that are vulnerable to such cyber security threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.\nFollowing these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate high-level personnel, including our Chief Security \u0026 Trust Officer, our Chief Information Security Officer (“CISO”) and our Chief Information Officer (“CIO”), to manage the risk assessment and mitigation process.\nAs part of our overall risk management process, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management. Personnel at all levels and departments receive training on our cyber security policies.\nWe engage our internal auditors and other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cyber security policies and procedures in accordance with common best practices and methodologies, as well as to monitor and test our security controls.\nWe maintain a third-party risk management process with regard to third-party service providers, pursuant to which third-party service providers that store, process, or have access to our data, integrate with our systems, or provide certain services to us are required to undergo a security assessment prior to approval. Approved service providers are subject to ongoing monitoring, and we conduct periodic reviews of critical and high-risk service providers to help ensure continued compliance with our security requirements.\nWe have not identified any risks from known cyber security threats, including as a result of any prior cyber security incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.\nWe regularly experience attempts by third parties to gain unauthorized access to, or to introduce malicious software into, our information technology systems. While a limited number of these attempts have resulted in minor and isolated incidents, they were promptly identified, investigated and remediated in real time by our cyber security and information technology teams. Based on our investigations, these incidents did not affect our customers, did not involve any leakage of customer or company data, and did not result in any material impact on our operations. For additional information regarding whether any risks from cyber security threats, including as a result of any previous cyber security incidents, have materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, please refer to Item 3D, “Key Information – Risk Factors”, in this Annual Report on Form 20-F, including the risk factors entitled “Other General Risks and Risks Related to the Ownership of Our Ordinary Shares - Our information technology systems, networks and products and services have been, and may continue to be, subject to various security threats and cyber security incidents”.\nCyber Security Governance\nOur Board of Directors considers cyber security risk as part of its risk oversight function and has delegated oversight of cyber security and other information technology risks to the Audit Committee. As such, the Audit Committee oversees management’s implementation of our cyber security risk management program.\nThe Audit Committee receives quarterly reports from our Chief Information Officer and CISO on cyber security regarding our company’s cyber security risks and activities, including any recent cyber security incidents and related responses, cyber security systems testing, activities of third parties, as well as any incidents with lesser impact potential.\nOur Audit Committee provides updates to the board of directors on such reports.\nOur management team, particularly our CIO, oversees our cyber security policies and processes, including those described in “Cyber security Risk Management and Strategy” above, and is responsible for assessing and managing our material risks from cyber security threats. Our CIO and his team have primary responsibility for our overall cyber security risk management program and supervise both our internal cyber security personnel and our retained external cyber security consultants. Our management team’s experience includes our CIO’s 18 years of experience in IT services, since 2008.\nOur CIO supervises efforts to prevent, detect, mitigate, and remediate cyber security risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.\nFor purposes of this Item 16K:\n-\nA “cyber security incident” means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through our information systems that jeopardizes the confidentiality, integrity, or availability of a registrant’s information systems or any information residing therein.\n-\nA “cyber security threat” means any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.\n-\n“Information systems” means electronic information resources, owned or used by us, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of our information to maintain or support our operations."
},
{
"accession": "0001178913-25-000867",
"document": "https://www.sec.gov/Archives/edgar/data/1015922/000117891325000867/zk2532836.htm",
"filed": "2025-03-17",
"form": "20-F",
"index": "https://www.sec.gov/Archives/edgar/data/1015922/000117891325000867/0001178913-25-000867-index.htm",
"period": "2024-12-31",
"text": "Cyber security Risk Management and Strategy\nAs a public security company, we prioritize robust cyber security measures to protect our assets, operations, and stakeholders. We have established policies and processes for assessing, identifying, and managing material risk from cyber security threats (as defined below), and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cyber security threats, including any potential cyber security incidents (as defined below).\nWe conduct periodic risk assessments to identify cyber security threats, as well as assessments in the event of a material change in our business practices that may affect information systems (as defined below) that are vulnerable to such cyber security threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.\nFollowing these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. We devote significant resources and designate high-level personnel, including our Chief Information Security Officer (CISO) who reports to our Chief Information Officer, to manage the risk assessment and mitigation process.\nAs part of our overall risk management process, we monitor and test our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management. Personnel at all levels and departments are made aware of our cyber security policies through trainings.\nWe engage our internal auditors and other third parties in connection with our risk assessment processes. These service providers assist us to design and implement our cyber security policies and procedures in accordance with common best practices and methodologies, as well as to monitor and test our security controls.\nWe have not identified risks from known cyber security threats, including as a result of any prior cyber security incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.\nFor additional information regarding whether any risks from cyber security threats, including as a result of any previous cyber security incidents, have materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, please refer to Item 3D, “Key Information – Risk Factors,” in this Annual Report on Form 20-F, including the risk factors entitled “Other General Risks and Risks Related to the Ownership of Our Ordinary Shares - Our information technology systems, networks and products and services have been, and may continue to be, subject to various security threats and cyber security incidents.”\nCyber security Governance\nOur Board of Directors considers cyber security risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cyber security and other information technology risks. The Audit Committee oversees management’s implementation of our cyber security risk management program.\nThe Audit Committee receives quarterly reports from our Chief Information Officer and CISO on cyber security regarding our company’s cyber security risks and activities, including any recent cyber security incidents and related responses, cyber security systems testing, activities of third parties, as well as any incidents with lesser impact potential.\nOur Audit Committee provides updates to the board of directors on such reports.\nOur management team, particularly our Chief Information Officer, oversees our cyber security policies and processes, including those described in “Cyber security Risk Management and Strategy” above, and is responsible for assessing and managing our material risks from cyber security threats. Our Chief Information Officer and his team have primary responsibility for our overall cyber security risk management program and supervise both our internal cyber security personnel and our retained external cyber security consultants. Our management team’s experience includes our Chief Information Officer’s 17 years of experience in IT services, who has been with Check Point since 2008.\nOur Chief Information Officer supervises efforts to prevent, detect, mitigate, and remediate cyber security risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.\nFor purposes of this Item 16K:\n-\nA “cyber security incident” means an unauthorized occurrence, or a series of related unauthorized occurrences, on or conducted through Check Point’s information systems that jeopardizes the confidentiality, integrity, or availability of a registrant’s information systems or any information residing therein.\n-\nA “cyber security threat” means any potential unauthorized occurrence on or conducted through a registrant’s information systems that may result in adverse effects on the confidentiality, integrity, or availability of Check Point’s information systems or any information residing therein.\n-\n“Information systems” means electronic information resources, owned or used by Check Point, including physical or virtual infrastructure controlled by such information resources, or components thereof, organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of Check Point’s information to maintain or support Check Point’s operations."
}
]
}