CISCO SYSTEMS INC

Previous wording

The global macroeconomic environment can be challenging and inconsistent. In certain prior periods, we have seen a broad-based weakening in the global macroeconomic environment which has impacted and could impact in the future certain of our markets. Additionally, instability in the global credit markets, the impact of uncertainty regarding global central bank monetary policy, the instability in the geopolitical environment in many parts of the world (including as a result of the on-going Russia and Ukraine war, the Israel-Hamas war, and China-Taiwan relations), the current economic challenges in China, including global economic ramifications of Chinese economic difficulties, and other disruptions may continue to put pressure on global economic conditions. If global economic and market conditions, or economic conditions in key markets, were to deteriorate, we may experience material harm to our business, operating results, and financial condition.

Current wording

The global macroeconomic environment can be challenging and uncertain. For example, instability in the global credit markets, the impact of uncertainty regarding global central bank monetary policy, the instability in the geopolitical environment in many parts of the world (including as a result of the on-going Russia and Ukraine war, Middle East conflicts and wars, and China-Taiwan relations), and other disruptions may continue to put pressure on global economic conditions. If global economic and market conditions, or economic conditions in key markets, were to deteriorate, we may experience material harm to our business, operating results, and financial condition.

Previous wording

Our operating results in one or more segments may also be affected by uncertain or changing economic conditions particularly germane to that segment or to particular customer markets within that segment. In addition, reports of certain intelligence gathering methods of the U.S. government could affect customers’ perception of the products of IT companies which design and manufacture products in the United States. Trust and confidence in us as an IT supplier are critical to the development and growth of our markets. Impairment of that trust, or foreign regulatory actions taken in response to reports of certain intelligence gathering methods of the U.S. government, could affect the demand for our products from customers outside of the United States and could have a negative impact on our operating results.

Current wording

Our operating results in one or more segments may also be affected by uncertain or changing economic conditions particularly germane to that segment or to particular customer markets within that segment. In addition, previous reports of certain intelligence gathering methods of the U.S. government could affect customers’ perception of the products of IT companies which design and manufacture products in the United States.

Previous wording

As a result of a variety of factors discussed in this report, our revenue for a particular quarter is difficult to predict, which can be exacerbated during periods when the global macroenvironment is challenging and inconsistent and can result in market uncertainty. Our revenue may grow at a slower rate than in past periods, or decline as it did in the first quarter of fiscal 2025 and certain prior periods on a year-over-year basis. Our ability to meet financial expectations could also be negatively impacted if the nonlinear sales pattern seen in some of our past quarters recurs in future periods. During the first nine months of fiscal 2024, we experienced a decline in product demand resulting in a decrease of revenue as customers continued to scrutinize spend as they needed additional time to implement elevated levels of product shipments received in prior quarters. We have also experienced periods of time during which shipments have exceeded net bookings or manufacturing issues have delayed shipments, leading to nonlinearity in shipping patterns. In addition to making it difficult to predict revenue for a particular period, nonlinearity in shipping can increase costs, because irregular shipment patterns result in periods of underutilized capacity and periods in which overtime expenses may be incurred, as well as in potential additional inventory management-related costs. In addition, to the extent that manufacturing issues and any related component shortages result in delayed shipments in the future, and particularly in periods in which our contract manufacturers are operating at higher levels of capacity, it is possible that revenue for a quarter could be negatively impacted if such matters occur and are not remediated within the same quarter.

Current wording

As a result of a variety of factors discussed in this report, our revenue for a particular quarter is difficult to predict, which can be exacerbated during periods when the global macroenvironment is challenging and can result in market uncertainty. Our revenue may grow at a slower rate than in past periods, or decline as it did in the first quarter of fiscal 2025 and certain prior periods on a year-over-year basis. Our ability to meet financial expectations could also be negatively impacted if the nonlinear sales pattern seen in some of our past quarters recurs in future periods. We have also experienced periods of time during which shipments have exceeded net bookings or manufacturing issues have delayed shipments, leading to nonlinearity in shipping patterns. In addition to making it difficult to predict revenue for a particular period, nonlinearity in shipping can increase costs, because irregular shipment patterns result in periods of underutilized capacity and periods in which overtime expenses may be incurred, as well as in potential additional inventory management-related costs. In addition, to the extent that manufacturing issues and any related component shortages result in delayed shipments in the future, and particularly in periods in which our contract manufacturers are operating at higher levels of capacity, it is possible that revenue for a quarter could be negatively impacted if such matters occur and are not remediated within the same quarter.

Previous wording

A reduction or interruption in supply, including disruptions on our global supply chain, caused in part by public health emergencies, geopolitical tensions (including as a result of China-Taiwan relations) or a significant natural disaster (including as a result of climate change); a significant increase in the price of one or more components (including as a result of inflation); a failure to adequately authorize procurement of inventory by our contract manufacturers; a failure to appropriately cancel, reschedule, or adjust our requirements based on our business needs; or a decrease in demand for our products could materially harm our business, operating results, and financial condition and could materially damage customer relationships. Furthermore, as a result of binding price or purchase commitments with suppliers, we may be obligated to purchase components at prices that are higher than those available in the current market. In the event that we become committed to purchase components at prices in excess of the current market price when the components are actually used, our gross margins could decrease. In addition, vendors may be under pressure to allocate product to certain customers for business, regulatory or political reasons, and/or demand changes in agreed pricing as a condition of supply. Although we have generally secured additional supply or taken other mitigation actions when significant disruptions have occurred, if similar situations occur in the future, they could materially harm our business, results of operations, and financial condition.

Current wording

A reduction or interruption in supply, including disruptions on our global supply chain, caused in part by public health emergencies, geopolitical tensions (including as a result of China-Taiwan relations, increasing tariffs or any other trade tensions) or a significant natural disaster (including as a result of climate change); a significant increase in the price of one or more components (including as a result of inflation); a failure to adequately authorize procurement of inventory by our contract manufacturers; a failure by suppliers to deliver on our contracts; a failure to appropriately cancel, reschedule, or adjust our requirements based on our business needs; or a decrease in demand for our products could materially harm our business, operating results, and financial condition and could materially damage customer relationships. Furthermore, as a result of binding price or purchase commitments with suppliers, we may be obligated to purchase components at prices that are higher than those available in the current market. In the event that we become committed to purchase components at prices in excess of the current market price when the components are actually used, our gross margins could decrease. In addition, vendors may be under pressure to allocate product to certain customers for business, regulatory or political reasons, and/or demand changes in agreed pricing as a condition of supply. Although we have generally secured additional supply or taken other mitigation actions when significant disruptions have occurred, if similar situations occur in the future, they could materially harm our business, results of operations, and financial condition.

Previous wording

Manufacturing capacity and component supply constraints could continue to be significant issues for us. We purchase components from a variety of suppliers and use several contract manufacturers to provide manufacturing services for our products. During the normal course of business, in order to improve manufacturing lead-time performance and to help ensure adequate component supply, we enter into agreements with contract manufacturers and suppliers that either allow them to procure inventory based upon criteria as defined by us or that establish the parameters defining our requirements. In certain instances, these agreements allow us the option to cancel, reschedule, and adjust our requirements based on our business needs prior to firm orders being placed. When facing component supply-related challenges we have increased our efforts in procuring components in order to meet customer expectations, which in turn contributes to an increase in inventory and purchase commitments. In past periods, we increased our inventory and purchase commitments in light of the supply constraints seen industry-wide due to component shortages. These increases in our inventory and purchase commitments to shorten lead times could also lead to potential material excess and obsolete inventory charges or other negative impacts to our product gross margin in future periods if we fail to anticipate customer demand properly and product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are unable to continue to mitigate the remaining supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. For additional information and a further discussion of impacts and risks related to our inventory commitments and our purchase commitments with contract manufacturers and suppliers, see “Results of Operations—Product Gross Margin—Supply Chain Impacts and Risks”, “Liquidity and Capital Resources—Inventory Supply Chain” and Note 14 to the Consolidated Financial Statements.

Current wording

Manufacturing capacity and component supply constraints could continue to be significant issues for us. We purchase components from a variety of suppliers and use several contract manufacturers to provide manufacturing services for our products. During the normal course of business, in order to improve manufacturing lead-time performance and to help ensure adequate component supply, we enter into agreements with contract manufacturers and suppliers that either allow them to procure inventory based upon criteria as defined by us or that establish the parameters defining our requirements. In certain instances, these agreements allow us the option to cancel, reschedule, and adjust our requirements based on our business needs prior to firm orders being placed. When facing component supply-related challenges we have increased our efforts in procuring components in order to meet customer expectations, which in turn contributes to an increase in inventory and purchase commitments. In recent past periods, we increased our inventory and purchase commitments in light of the supply constraints seen industry-wide due to component shortages. These increases in our inventory and purchase commitments to shorten lead times could also lead to potential material excess and obsolete inventory charges or other negative impacts to our product gross margin in future periods if we fail to anticipate customer demand properly and product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are unable to continue to mitigate the remaining supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. For additional information and a further discussion of impacts and risks related to our inventory commitments and our purchase commitments with contract manufacturers and suppliers, see “Results of

Previous wording

Although our product gross margin increased in the first quarter of fiscal 2025 and in other recent periods, our level of product gross margins have declined in certain prior periods, and could decline in future periods due to adverse impacts from various factors, including:

Current wording

Our level of product gross margins has declined in certain prior periods, and could decline in future periods due to adverse impacts from various factors, including:

Previous wording

Sales activity in this industry depends upon the stage of completion of expanding network infrastructures; the availability of funding; and the extent to which service provider and cloud customers are affected by regulatory, economic, and business conditions in the country of operations. Weakness in orders from this industry, including as a result of any slowdown in capital expenditures by service providers (which may be more prevalent during a global economic downturn, or periods of economic, political or regulatory uncertainty), could materially harm our business, operating results, and financial condition. Such slowdowns may continue or recur in future periods. Orders from this industry could decline for many reasons other than the competitiveness of our products and services within their respective markets. For example, in the past, many of our service provider and cloud customers have been negatively impacted by slowdowns in the general economy, by overcapacity, by changes in the service provider and cloud market, by regulatory developments, and by constraints on capital availability, resulting in business failures and substantial reductions in spending and expansion plans. These conditions have negatively impacted our business and operating results in the past, and could materially harm our business and operating results in any future period. Finally, service provider and cloud customers typically have longer implementation cycles; require a broader range of services, including design services; demand that vendors take on a larger share of risks; often require acceptance provisions, which can lead to a delay in revenue recognition; and expect financing from vendors. All these factors can add further risk to business conducted with service providers.

Current wording

Sales to the service provider and cloud market have been characterized by large and sporadic purchases, especially relating to our router sales and sales of certain other Networking and Collaboration products, in addition to longer sales cycles. Service provider and cloud product orders significantly decreased during fiscal 2024 and we have experienced similar declines in certain prior periods. Product orders from the service provider and cloud market could continue to decline and, as has been the case in the past, such weakness could persist over extended periods of time given fluctuating market conditions. Products in the service provider and cloud market could also face a high degree of customer concentration, with bespoke product designs and features that would be difficult to sell to alternate customers should the primary customer reduce its product orders with Cisco. Sales activity in this industry depends upon the stage of completion of expanding network infrastructures; the availability of funding; and the extent to which service provider and cloud customers are affected by regulatory, economic, and business conditions in the country of operations. Weakness in orders from this industry, including as a result of any slowdown in capital expenditures by service providers (which may be more prevalent during a global economic downturn, or periods of economic, political or regulatory uncertainty), could materially harm our business, operating results, and financial condition. Such slowdowns may continue or recur in future periods. Orders from this industry could decline for many reasons other than the competitiveness of our products and services within their respective markets. For example, in the past, many of our service provider and cloud customers have been negatively impacted by slowdowns in the general economy, by overcapacity, by changes in the service provider and cloud market, by regulatory developments, and by constraints on capital availability, resulting in business failures and substantial reductions in spending and expansion plans. These conditions have negatively impacted our business and operating results in the past, and could materially harm our business and operating results in any future period. Finally, service provider and cloud customers typically have longer implementation cycles; require a broader range of services, including design services; demand that vendors take on a larger share of risks; often require acceptance provisions, which can lead to a delay in revenue recognition; and expect financing from vendors. All these factors can add further risk to business conducted with service providers.

Previous wording

Issues related to the development and use of artificial intelligence (AI) could give rise to legal and/or regulatory action, damage our reputation or otherwise materially harm of our business.

Current wording

Issues related to the development and use of artificial intelligence (AI) could give rise to legal and/or regulatory action, damage our reputation or otherwise materially harm our business.

Previous wording

We currently incorporate AI technology in certain of our products and services and in our business operations. Our research and development of such technology remains ongoing. AI presents risks and challenges and may result in unintended consequences that could affect its further development or our and our customers’ adoption and use of this technology. AI algorithms and training methodologies may be flawed. Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. Leveraging AI capabilities to potentially improve our internal functions and operations also presents further risks, costs, and challenges. While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues presented by its use, we may be unsuccessful in identifying or resolving issues before they arise. The AI-related legal and regulatory landscape remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings. AI-related issues, deficiencies and/or failures could also give rise to legal and/or regulatory action, including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new applications of existing data protection, privacy, intellectual property, and other laws; damage our reputation; or otherwise materially harm our business.

Current wording

We currently incorporate AI technology in certain of our products and services and in our business operations. Our research and development of such technology remains ongoing. AI presents risks and challenges and may result in unintended consequences that could affect its further development or our and our customers’ adoption and use of this technology. AI algorithms and training methodologies may be flawed. Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. Leveraging AI capabilities to potentially improve our internal functions and operations also presents further risks, costs, and challenges. While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues and risks presented by its use, we may be unsuccessful in identifying or resolving issues and risks before they arise. The AI-related legal and regulatory landscape remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings. AI-related issues, deficiencies and/or failures could also give rise to legal and/or regulatory action, including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new and different applications of existing and new data protection, privacy, intellectual property, and other laws; damage our reputation; or otherwise materially harm our business.

Previous wording

Adverse resolution of litigation or governmental investigations may harm our operating results or financial condition.

Current wording

Adverse resolution of claims, litigation or governmental investigations may harm our operating results or financial condition.

Previous wording

We are a party to lawsuits in the normal course of our business. Any litigation can be costly, lengthy, and disruptive to normal business operations. Moreover, the results of complex legal proceedings are difficult to predict. An unfavorable resolution of lawsuits or governmental investigations could materially harm our business, operating results, or financial condition. For additional information regarding certain of the matters in which we are involved, see Note 14 to the Consolidated Financial Statements, subsection (f) “Legal Proceedings.”

Current wording

We are a party to a variety of claims, litigation and governmental investigations in the normal course of our business. Claims, litigation and governmental investigations may arise from a wide variety of business practices and initiatives, including major new product releases, significant business transactions, warranty or product claims, employment practices, and regulation. Any claim, litigation or governmental investigation can be costly, lengthy, and disruptive to normal business operations. Moreover, the results of complex legal proceedings are difficult to predict, and management’s view of these matters may change in the future. An unfavorable resolution of claims, litigation or governmental investigations could materially harm our business, operating results, or financial condition. For additional information regarding certain of the matters in which we are involved, see Note 14 to the Consolidated Financial Statements, subsection (f) “Legal Proceedings.”

Previous wording

Our provision for income taxes is subject to volatility and could be negatively impacted by earnings being lower than anticipated in countries that have lower tax rates and higher than anticipated in countries that have higher tax rates; by changes in the valuation of our deferred tax assets and liabilities; by changes to foreign-derived intangible income, global intangible low-tax income and base erosion and anti-abuse tax, research and development capitalization and amortization, and corporate alternative minimum tax laws, regulations, or interpretations thereof; by expiration of or lapses in tax incentives; by transfer pricing adjustments, including the effect of acquisitions on our legal structure; by tax effects of nondeductible compensation; by tax costs related to intercompany realignments; by changes in accounting principles; or by changes in tax laws and regulations, treaties, or interpretations thereof, including changes to the taxation of earnings of our foreign subsidiaries, the deductibility of expenses attributable to foreign income, and the foreign tax credit rules. Significant judgment is required to determine the recognition and measurement attribute prescribed in the accounting guidance for uncertainty in income taxes. The Organisation for Economic Co-operation and Development (OECD), an international association comprised of 38 countries, including the United States, has made changes, including a Pillar Two framework that imposes a minimum tax rate of 15% in each taxing jurisdiction, and is contemplating additional changes to numerous long-standing tax principles. There can be no assurance that these changes and any contemplated changes if finalized, once adopted by countries, will not have an adverse impact on our provision for income taxes. Further, as a result of certain of our ongoing employment and capital investment actions and commitments, our income in certain countries was subject to reduced tax rates. Our failure to meet these commitments could adversely impact our provision for income taxes. In addition, we are subject to the continuous examination of our income tax returns by the Internal Revenue Service and other tax authorities. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes. There can be no assurance that the outcomes from these continuous examinations will not have an adverse effect on our operating results and financial condition.

Current wording

Our provision for income taxes is subject to volatility and could be negatively impacted by earnings being lower than anticipated in countries that have lower tax rates and higher than anticipated in countries that have higher tax rates; by changes in the valuation of our deferred tax assets and liabilities; by changes to foreign-derived intangible income, global intangible low-tax income and base erosion and anti-abuse tax, research and development capitalization and amortization, and corporate alternative minimum tax laws, regulations, or interpretations thereof; by expiration of or lapses in tax incentives; by transfer pricing adjustments, including the effect of acquisitions on our legal structure; by tax effects of nondeductible compensation; by tax costs related to intercompany realignments; by changes in accounting principles; or by changes in tax laws and regulations, treaties, or interpretations thereof, including changes to the taxation of earnings of our foreign subsidiaries, the deductibility of expenses attributable to foreign income, and the foreign tax credit rules. Significant judgment is required to determine the recognition and measurement attribute prescribed in the accounting guidance for uncertainty in income taxes. The Organisation for Economic Co-operation and Development (OECD), an international association comprised of 38 countries, including the

Previous wording

The continued threat of terrorism and heightened security and military action in response thereto, or any other current or future acts of terrorism, war (such as the on-going Russia-Ukraine war and the Israel-Hamas war), and other events (such as economic sanctions, trade restrictions and reactions of the governments, markets and the general public, including the sanctions and restrictions related to the on-going Russia-Ukraine war) may cause further disruptions to the economies of the United States and other countries and create further uncertainties or could otherwise negatively impact our business, operating results, and financial condition. Likewise, events such as loss of infrastructure and utilities services such as energy, transportation, or telecommunications could have similar negative impacts. To the extent that such disruptions or uncertainties result in delays or cancellations of customer orders or the manufacture or shipment of our products, our business, operating results, and financial condition could be materially harmed.

Current wording

The continued threat of terrorism and heightened security and military action in response thereto, or any other current or future acts of terrorism, war (such as the on-going Russia-Ukraine war and Middle East conflicts and wars), and other events (such as economic sanctions, trade restrictions and reactions of the governments, markets and the general public, including the sanctions and restrictions related to the on-going Russia-Ukraine war) may cause further disruptions to the economies of the United States and other countries and create further uncertainties or could otherwise negatively impact our business, operating results, and financial condition. Likewise, events such as loss of infrastructure and utilities services such as energy, transportation, or telecommunications could have similar negative impacts. To the extent that such disruptions or uncertainties result in delays or cancellations of customer orders or the manufacture or shipment of our products, our business, operating results, and financial condition could be materially harmed.

Previous wording

As of the end of the first quarter of fiscal 2025, we have senior unsecured notes outstanding in an aggregate principal amount of $20.3 billion that mature at specific dates from calendar year 2025 through 2064. We have also established a commercial paper program under which we may issue short-term, unsecured commercial paper notes on a private placement basis up to a maximum aggregate amount outstanding at any time of $15.0 billion, and we had $11.9 billion in commercial paper notes outstanding under this program as of October 26, 2024. There can be no assurance that our incurrence of this debt or any future debt, including any additional debt to refinance maturing debt, will be a better means of providing liquidity to us than would our use of our existing cash resources. Further, we cannot be assured that our maintenance of this indebtedness or incurrence of future indebtedness will not negatively impact our operating results or financial condition. In addition, changes by any rating agency to our credit rating can negatively impact the value and liquidity of both our debt and equity securities, as well as the terms upon which we may borrow under our commercial paper program or future debt issuances.

Current wording

As of the end of the second quarter of fiscal 2025, we have senior unsecured notes outstanding in an aggregate principal amount of $20.3 billion that mature at specific dates from calendar year 2025 through 2064. We have also established a commercial paper program under which we may issue short-term, unsecured commercial paper notes on a private placement basis up to a maximum aggregate amount outstanding at any time of $15.0 billion, and we had $10.9 billion in commercial paper notes outstanding under this program as of January 25, 2025. There can be no assurance that our incurrence of this debt or any future debt, including any additional debt to refinance maturing debt, will be a better means of providing liquidity to us than would our use of our existing cash resources. Further, we cannot be assured that our maintenance of this indebtedness or incurrence of future indebtedness will not negatively impact our operating results or financial condition. In addition, changes by any rating agency to our credit rating can negatively impact the value and liquidity of both our debt and equity securities, as well as the terms upon which we may borrow under our commercial paper program or future debt issuances.

Previous wording

There is an increasing focus from regulators, certain investors, and other stakeholders concerning environmental, social, and governance (“ESG”) matters, both in the United States and internationally. We communicate certain ESG-related initiatives, goals, and/or commitments regarding environmental matters, diversity and inclusion, responsible sourcing and social investments, and other matters, in our annual Purpose Report, on our website, in our filings with the SEC, and elsewhere. These initiatives, goals, or commitments involve risks and uncertainties and could be difficult to achieve and costly to implement. For example, in September 2021, we announced our goal to achieve net zero across all scopes of greenhouse gas emissions by 2040, the achievement of which relies, in large part, on the accuracy of our estimates and assumptions around the enhanced power efficiency of our products, the adoption of renewable energy at customer and supplier sites, and the adoption of certain of our products and services by our customers. We could fail to achieve, or be perceived to fail to achieve, our 2040 net zero goal or other ESG-related initiatives, goals, or commitments. In addition, we could be criticized for the timing, scope or nature of these initiatives, goals, or commitments, or for any revisions to them. To the extent that our required and voluntary disclosures about ESG matters increase, we could be criticized for the accuracy, adequacy, or completeness of such disclosures. Our actual or perceived failure to achieve our ESG-related initiatives, goals, or commitments could negatively impact our reputation or otherwise materially harm our business.

Current wording

There is an increasing focus from regulators, certain investors, and other stakeholders concerning environmental, social, and governance (“ESG”) matters, both in the United States and internationally. We communicate certain ESG-related initiatives, goals, and/or commitments regarding environmental matters, inclusion, responsible sourcing and social investments, and other matters, in our annual Purpose Report, on our website, in our filings with the SEC, and elsewhere. These initiatives, goals, or commitments involve risks and uncertainties and could be difficult to achieve and costly to implement. For example, in September 2021, we announced our goal to achieve net zero across all scopes of greenhouse gas emissions by 2040, the achievement of which relies, in large part, on the accuracy of our estimates and assumptions around the enhanced power efficiency of our products, the adoption of renewable energy at customer and supplier sites, and the adoption of certain of our products and services by our customers. We could fail to achieve, or be perceived to fail to achieve, our 2040 net zero goal or other ESG-related initiatives, goals, or commitments. In addition, we could be criticized for the timing, scope or nature of these initiatives, goals, or commitments, or for any revisions to them. To the extent that our required and voluntary disclosures about ESG matters increase, we could be criticized for the accuracy, adequacy, or completeness of such disclosures. Our actual or perceived failure to achieve our ESG-related initiatives, goals, or commitments could negatively impact our reputation or otherwise harm our business.

Previous wording

We experience cyber attacks and other attempts to gain unauthorized access on a regular basis to (i) our products and services (together, our “solutions”) and (ii) the servers, data centers, networks, systems, and cloud-based services operated or enabled by us, or by third parties upon which we rely, on or through which our and third-party data are stored, processed, or can be accessed (collectively, our “IT environment”). We anticipate continuing to be increasingly subject to such attempts as cyber attacks become more sophisticated and difficult to predict and protect against. Despite our active implementation of security and other measures, our solutions and IT environment have been, and continue to be, vulnerable to cyber attacks, incidents, data breaches, malware, inadvertent error, disruptions, failures, physical security breaches, tampering or other theft or misuse, including by employees, contingent workers, and malicious actors. Additionally, nation-state actors or their agents have in the past successfully attacked our IT environment and have also exploited vulnerabilities in our solutions to carry out attacks, and we anticipate that these attacks and the exploitation of vulnerabilities in our solutions will continue and may intensify during periods of diplomatic or armed conflict. Further, a cyber attack or other incident could go undetected and persist in our environments for extended periods. Cyber-related events have caused, and in the future could result in, compromise to, the disruption of access to, or the operation of our solutions and IT environment or those of our customers or third-party providers upon which we rely, or result in confidential information stored on our systems or our customers’ or other third-party systems being improperly accessed, processed, disclosed now (or in the future), or be lost or stolen. Efforts to limit the ability of malicious actors to disrupt the operations of the Internet or undermine our security efforts are costly to implement and may not be successful. Breaches of security in our IT environment, our customers’ or third-party providers’ networks, or in third-party products we use, regardless of whether the breach is attributable to a vulnerability in our solutions, a failure by us to timely mitigate or apply a security fix for products we use that are found vulnerable, or a failure to maintain the digital security infrastructure or security tools that protect the integrity of our solutions and IT environment, could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business. The occurrence of a cyber attack, data breach or other incident could subject us to liability to our customers, data subjects, suppliers, business partners, employees, and others, give rise to legal and/or regulatory action, could damage our reputation or could otherwise negatively impact our business, any of which could materially harm our b…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We experience cyber attacks and other attempts to gain unauthorized access on a regular basis to (i) our products and services (together, our “solutions”) and (ii) the servers, data centers, networks, systems, and cloud-based services operated or enabled by us, or by third parties upon which we rely, on or through which our and third-party data are stored, processed, or can be accessed (collectively, our “IT environment”). We anticipate continuing to be increasingly subject to such attempts as cyber attacks become more sophisticated and difficult to predict and protect against. Furthermore, the emergence and maturation of AI capabilities has led to new and/or more effective methods of cyber attacks. Despite our active implementation of security and other measures, our solutions and IT environment have been, and continue to be, vulnerable to cyber attacks, incidents, data breaches, malware, inadvertent error, disruptions, failures, physical security breaches, tampering or other theft or misuse, including by employees, contingent workers, and malicious actors. Additionally, nation-state actors or their agents have in the past successfully attacked our IT environment and have also exploited vulnerabilities in our solutions to carry out attacks, and we anticipate that these attacks and the exploitation of vulnerabilities in our solutions will continue and may intensify during periods of diplomatic or armed conflict. Further, a cyber attack or other incident could go undetected and persist in our environments for extended periods. Cyber-related events have caused, and in the future could result in, compromise to, or the disruption of access to, the operation of our solutions and IT environment or those of our customers or third-party providers upon which we rely, or result in confidential information stored on our systems or our customers’ or other third-party systems being improperly accessed, processed, disclosed now (or in the future), or being lost or stolen. Efforts to limit the ability of malicious actors to disrupt the operations of the Internet or undermine our security efforts are costly to implement and may not be successful. Breaches of security in our IT environment, our customers’ or third-party providers’ networks, or in third-party products we use, regardless of whether the breach is attributable to a vulnerability in our solutions, a failure by us to timely mitigate or apply a security fix for products we use that are found vulnerable, or a failure to maintain the digital security infrastructure or security tools that protect the integrity of our solutions and IT environment, could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business. The occurrence of a cyber attack, data breach or other incident could subject us to liability to our customers, data subjects, suppliers, business partners, employees, and others, give rise to legal and/or regulatory …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

The products and services (together, our “solutions”) we sell to customers, and the cloud-based services operated or enabled by us, or by third parties upon which we rely, inevitably contain vulnerabilities or security defects (despite our efforts to prevent and detect them through secure development lifecycle practices, testing, and other means), which have not been remedied or cannot be disclosed without compromising security. We also make prioritization decisions in determining which vulnerabilities or security defects to fix and the timing of these fixes. Even when we prioritize a vulnerability or security defect, in certain instances it has taken, and in the future could take, time for us to develop a remedy and the remedy may ultimately be insufficient to fully fix the issue. In addition, workarounds or other mitigation efforts in certain instances have not been, and in the future may not be, available or sufficient to protect customers prior to a security update being made available. Vulnerabilities can persist even after we have issued security updates if we have not identified and addressed the root cause of a particular vulnerability, if customers have not installed the most recent updates, if the attackers exploited the vulnerabilities before a security update is applied to install additional malware to further compromise customers’ systems, or if a previously patched vulnerability is inadvertently reintroduced due to a security regression during future development. Additionally, customers may also need to test security updates before they can be deployed which can delay implementation. When customers do not deploy security updates in a timely manner, use solutions that are end of life and no longer receive security updates, decide not to upgrade to the latest versions of our solutions containing the security update, or configure our solutions in insecure ways, they are left vulnerable. In addition, we rely on third-party providers of software and cloud-based services on which our and third-party data is stored or processed, and we cannot control the timing at which third-party providers remedy vulnerabilities, which could leave us vulnerable. Failure to comply with internal security policies and standards, including secure development lifecycle practices, failure to prevent or promptly mitigate vulnerabilities and security defects, prioritization errors in remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner, deciding not to upgrade solutions, or configuring our solutions in insecure ways could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially harm our business.

Current wording

The products and services (together, our “solutions”) we sell to customers, and the cloud-based services operated or enabled by us, or by third parties upon which we rely, inevitably contain vulnerabilities or security defects (despite our efforts to prevent and detect them through secure development lifecycle practices, testing, and other means), which have not been remedied or cannot be disclosed without compromising security. We also make prioritization decisions in determining which vulnerabilities or security defects to fix and the timing of these fixes. Even when we prioritize a vulnerability or security defect, in certain instances it has taken, and in the future could take, time for us to develop a remedy and the remedy may ultimately be insufficient to fully fix the issue. In addition, workarounds or other mitigation efforts in certain instances have not been, and in the future may not be, available or sufficient to protect customers prior to a security update being made available. Vulnerabilities can persist even after we have issued security updates if we have not identified and addressed the root cause of a particular vulnerability, if customers have not installed the most recent updates, if the attackers exploited the vulnerabilities before a security update is applied to install additional malware to further compromise customers’ systems, or if a previously patched vulnerability is inadvertently reintroduced due to a security regression during future development. Additionally, customers may also need to test security updates before they can be deployed which can delay implementation. When customers do not deploy security updates in a timely manner, use solutions that are end of life and no longer receive security updates, decide not to upgrade to the latest versions of our solutions containing the security update, or configure our solutions in insecure ways, they are left vulnerable. In addition, we rely on third-party providers of software (including open source) and cloud-based services on which our and third-party data is stored or processed, and we cannot control the timing at which third-party providers remedy vulnerabilities, which could leave us vulnerable. Failure to comply with internal security policies and standards, including secure development lifecycle practices, failure to prevent or promptly mitigate vulnerabilities and security defects, prioritization errors in remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner, deciding not to upgrade solutions, or configuring our solutions in insecure ways could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially harm our business.

Previous wording

Our actual or perceived failure to adequately protect personal data could result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business.

Current wording

Our actual or perceived failure to adequately protect and appropriately use data could result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially harm our business.

Previous wording

Global privacy and data protection-related laws and regulations are evolving, extensive, and complex. Compliance with these laws and regulations is difficult and costly. In addition, evolving legal requirements restricting or controlling the collection, processing, or cross-border transmission of data, including regulation of cloud-based services, could materially affect our customers’ ability to use, and our ability to sell, our products and services. The interpretation and application of these laws in some instances is uncertain, and our legal and regulatory obligations are subject to frequent changes. For example, the European Union’s (“EU”) General Data Protection Regulation (“GDPR”) applies to our activities conducted from an establishment in the EU or related to products and services offered in the EU and imposes a range of compliance obligations regarding the handling of personal data for both ourselves and our customers. Additionally, we are subject to California’s Consumer Privacy Act, Singapore’s Personal Data Protection Act, and other laws, regulations, and obligations around the world that govern the handling of personal data. Our actual or perceived failure to comply with applicable laws and regulations or other obligations relating to personal data, or to protect personal data from unauthorized access, use, or other processing, could subject us to claims of liability to our customers, data subjects, suppliers, business partners, employees, and others, give rise to legal and/or regulatory action, could damage our reputation, or could otherwise negatively impact our business, any of which could materially harm our operating results and financial condition.

Current wording

Global privacy and data protection-related laws and regulations are evolving, extensive, and complex. Compliance with these laws and regulations is difficult and costly. In addition, evolving legal requirements restricting or controlling the collection, processing, use or cross-border transmission of data, including regulation of cloud-based services, could materially affect our customers’ ability to use, and our ability to sell, our products and services. The interpretation and application of these laws in some instances is uncertain, and our legal and regulatory obligations are subject to frequent changes. For example, the European Union’s (“EU”) General Data Protection Regulation (“GDPR”) applies to our activities conducted from an establishment in the EU or related to products and services offered in the EU and imposes a range of compliance obligations regarding the handling of personal data for both ourselves and our customers. Additionally, we are subject to California’s Consumer Privacy Act, Singapore’s Personal Data Protection Act, and other laws, regulations, and obligations around the world that govern the handling of personal data. Our actual or perceived failure to comply with applicable laws and regulations or other obligations relating to the use of data and protecting data from unauthorized access, use, or other processing, could subject us to claims of liability, or give rise to legal and/or regulatory action, damage our reputation, and/or otherwise negatively impact our business, any of which could materially harm our operating results and financial condition.

Previous wording

Changes in regulatory requirements applicable to the industries and sectors in which we operate, in the United States and in other countries, could materially affect the sales and use of our products and services. In particular, economic sanctions and changes to export and import control requirements have impacted and may continue to impact our ability to sell and support our products and services in certain jurisdictions. In addition, changes in telecommunications regulations could impact our service provider customers’ purchase of our products and services, and they could also impact sales of our own regulated offerings. Government and other customers’ procurement policies, priorities, regulations, technology initiatives and/or other obligations often give rise to evolving privacy, cybersecurity, operational resilience, data governance, or other requirements; the failure or delay in meeting and maintaining compliance with such requirements could negatively impact our business, including by limiting our ability to sell products and services, directly or indirectly, to public sector, critical infrastructure, and other customers. Additional areas of uncertainty that could impact sales of our products and services include laws, regulations, or customer procurement requirements related to encryption technology, data, artificial intelligence, privacy, cybersecurity, operational resilience, environmental sustainability (including climate change), human rights, product certification, product accessibility, country of origin, and national security controls applicable to our offerings and supply chain. Changes in regulatory requirements or our actual or perceived failure to comply (or to enable our customers to comply when using our offerings) with applicable laws, regulations, or other obligations could materially harm our business, operating results, and financial condition.

Current wording

Changes in regulatory requirements applicable to the industries and sectors in which we operate, in the United States and in other countries, could materially affect the sales and use of our products and services. In particular, economic sanctions and changes to export and import control requirements have impacted and may continue to impact our ability to sell and support our products and services in certain jurisdictions. In addition, changes in telecommunications regulations could impact our service provider customers’ purchase of our products and services, and they could also impact sales of our own regulated offerings. Government and other customers’ procurement policies, priorities, regulations, technology initiatives and/or other obligations often give rise to evolving privacy, cybersecurity, operational resilience, data governance, or other requirements; the failure or delay in meeting and maintaining compliance with such requirements could negatively impact our business, including by limiting our ability to sell products and services, directly or indirectly, to public sector, critical infrastructure, and other customers. Additional areas of uncertainty that could impact sales of our products and services include laws, regulations, or customer procurement requirements related to encryption technology, data, artificial intelligence, privacy, cybersecurity, operational resilience, environmental sustainability (including climate change), human rights, product certification, product accessibility, country of origin, and national security and other security controls applicable to our offerings and supply chain. Changes in regulatory requirements or our actual or perceived failure to comply (or to enable our customers to comply when using our offerings) with applicable laws, regulations, or other obligations could materially harm our business, operating results, and financial condition.

Previous wording

On September 13, 2001, we announced that our Board of Directors had authorized a stock repurchase program. As of October 26, 2024, the remaining authorized amount for stock repurchases under this program is approximately $3.2 billion with no termination date.

Current wording

On September 13, 2001, we announced that our Board of Directors had authorized a stock repurchase program. On February 12, 2025, our Board of Directors authorized a $15 billion increase to the stock repurchase program. The remaining authorized amount for stock repurchases under this program, including the additional authorization, is approximately $17 billion with no termination date.