CISCO SYSTEMS, INC.

Previous wording

•Fluctuations in demand for our products and services, especially with respect to service providers and internet businesses, in part due to changes in the global economic environment

Current wording

•Fluctuations in demand for our products and services, especially with respect to service providers and cloud customers, in part due to changes in the global economic environment

Previous wording

•The introduction and market acceptance of new technologies and products, and our success in new and evolving markets, and in emerging technologies, as well as the adoption of new standards

Current wording

•The introduction and market acceptance of new technologies and products, and our success in new and evolving markets, and in emerging technologies, including AI, as well as the adoption of new standards

Previous wording

•Variations in sales channels, product costs, mix of products sold, or mix of direct sales and indirect sales

Current wording

•Variations in sales channels, product costs, or mix of products sold (e.g., hardware and software sales, including mix of cloud-based and on-premise software sales)

Previous wording

•The ability of our customers, channel partners, contract manufacturers and suppliers to obtain financing or to fund capital expenditures, especially during a period of global credit market disruption or in the event of customer, channel partner, contract manufacturer or supplier financial problems

Current wording

•The ability of our direct sale customers, channel partners, contract manufacturers and suppliers to obtain financing or to fund capital expenditures, especially in the event of direct sale customers, channel partner, contract manufacturer or supplier financial problems

Previous wording

Challenging economic conditions, including tariffs or other trade barriers, rising inflation, or other changes, worldwide have from time to time contributed, and may continue to contribute, to slowdowns in the communications and networking industries at large, as well as in specific segments and markets in which we operate, resulting in: reduced demand for our products as a result of continued constraints on IT-related capital spending by our customers, particularly service provider and cloud as well as enterprise and other customer markets; increased price competition for our products, not only from our competitors but also as a consequence of customers disposing of unutilized products; risk of excess and obsolete inventories; risk of supply constraints; risk of excess facilities and manufacturing capacity; and higher overhead costs as a percentage of revenue and higher interest expense.

Current wording

Challenging global economic conditions, including tariffs or other trade barriers, rising inflation, or other changes, have from time to time contributed, and may continue to contribute, to slowdowns in the communications and networking industries at large, as well as in specific segments and markets in which we operate, resulting in: reduced demand for our products as a result of continued constraints on IT-related capital spending by our customers, particularly service provider and cloud as well as enterprise and other customer markets; increased price competition for our products, not only from our competitors but also as a consequence of customers disposing of unutilized products; risk of excess and obsolete inventories; risk of supply constraints; risk of excess facilities and manufacturing capacity; and higher overhead costs as a percentage of revenue and higher interest expense.

Previous wording

The global macroeconomic environment can be challenging and uncertain. For example, instability in the global credit markets, the impact of uncertainty regarding global central bank monetary policy, the instability in the geopolitical environment in many parts of the world (including as a result of the on-going Russia and Ukraine war, Middle East conflicts and wars, and China-Taiwan relations), and other disruptions may continue to put pressure on global economic conditions. If global economic and market conditions, or economic conditions in key markets, were to deteriorate, we may experience material harm to our business, operating results, and financial condition.

Current wording

The global macroeconomic environment can be challenging and uncertain. For example, the impact of uncertainty regarding global central bank monetary policy, the instability in the geopolitical environment in many parts of the world (including as a result of the on-going Russia and Ukraine war, Middle East conflicts and wars, and China-Taiwan relations), and other disruptions may continue to put pressure on global economic conditions. If global economic and market conditions were to deteriorate, we may experience material harm to our business, operating results, and financial condition.

Previous wording

As a result of a variety of factors discussed in this report, our revenue for a particular quarter is difficult to predict, which can be exacerbated during periods when the global macroenvironment is challenging and can result in market uncertainty. Our revenue may grow at a slower rate than in past periods, or decline as it did in the first quarter of fiscal 2025 and certain prior periods on a year-over-year basis. Our ability to meet financial expectations could also be negatively impacted if the nonlinear sales pattern seen in some of our past quarters recurs in future periods. We have also experienced periods of time during which shipments have exceeded net bookings or manufacturing issues have delayed shipments, leading to nonlinearity in shipping patterns. In addition to making it difficult to predict revenue for a particular period, nonlinearity in shipping can increase costs, because irregular shipment patterns result in periods of underutilized capacity and periods in which overtime expenses may be incurred, as well as in potential additional inventory management-related costs. In addition, to the extent that manufacturing issues and any related component shortages result in delayed shipments in the future, and particularly in periods in which our contract manufacturers are operating at higher levels of capacity, it is possible that revenue for a quarter could be negatively impacted if such matters occur and are not remediated within the same quarter.

Current wording

As a result of a variety of factors discussed in this report, our revenue for a particular quarter is difficult to predict, which can be exacerbated during periods when the global macroenvironment is challenging and can result in market uncertainty. Our revenue may grow at a slower rate than in past periods, or decline as it did in certain prior periods on a year-over-year basis. Our ability to meet financial expectations could also be negatively impacted if the nonlinear sales pattern seen in some of our past quarters recurs in future periods. We have also experienced periods of time during which shipments have exceeded net bookings or manufacturing issues have delayed shipments, leading to nonlinearity in shipping patterns. In addition to making it difficult to predict revenue for a particular period, nonlinearity in shipping can increase costs, because irregular shipment patterns result in periods of underutilized capacity and periods in which overtime expenses may be incurred, as well as in potential additional inventory management-related costs. In addition, to the extent that manufacturing issues and any related component shortages result in delayed shipments in the future, and particularly in periods in which our contract manufacturers are operating at higher levels of capacity, it is possible that revenue for a quarter could be negatively impacted if such matters occur and are not remediated within the same quarter.

Previous wording

The timing of large orders can also have a significant impact on our business and operating results from quarter to quarter. From time to time, we receive large orders that have a significant effect on our operating results in the period in which the order is recognized as revenue. The timing of such orders is difficult to predict, and the timing of revenue recognition from such orders may affect period to period changes in revenue. As a result, our operating results could vary materially from quarter to quarter based on the receipt of such orders and their ultimate recognition as revenue. Longer than normal manufacturing lead times in the past have caused, and in the future could cause, some customers to place the same or a similar order multiple times within our various sales channels and to cancel the duplicative orders upon shipment or receipt of the product, or to also place orders with other vendors with shorter manufacturing lead times. Such multiple ordering (along with other factors) or risk of order cancellation may cause difficulty in predicting our revenue. Further, our efforts to improve manufacturing lead-time performance may result in more variability and less predictability in our revenue and operating results. In addition, when facing component supply-related challenges, we have in the past and may in the future increase our efforts in procuring components in order to meet customer expectations, which in turn contributes to an increase in inventory and purchase commitments. These increases in our inventory and purchase commitments to shorten lead times could also lead to potential material excess and obsolete inventory charges or other negative impacts to our product gross margin in future periods if product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are unable to continue to mitigate the remaining supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. We plan our operating expense levels based primarily on forecasted revenue levels. These expenses and the impact of long-term commitments are relatively fixed in the short term. A shortfall in revenue could lead to operating results being below expectations because we may not be able to quickly reduce these fixed expenses in response to short-term business changes. Any of the above factors could materially harm our operations and financial results. For additional information and a further discussion of impacts and risks related to our inventory commitments and our purchase commitments with contract manufacturers and suppliers, see “Results of Operations—Product Gross Margin—Supply Chain Impacts and Risks”, “Liquidity and Capital Resources—Inventory Supply Chain” and Note 14 to the Consolidated Financial Statements.

Current wording

The timing of large orders can also have a significant impact on our business and operating results from quarter to quarter. From time to time, we receive large orders that have a significant effect on our operating results in the period in which the order is recognized as revenue. The timing of such orders is difficult to predict, and the timing of revenue recognition from such orders may affect period to period changes in revenue. As a result, our operating results could vary materially from quarter to quarter based on the receipt of such orders and their ultimate recognition as revenue. Longer than normal manufacturing lead times in the past have caused, and in the future could cause, some customers to place the same or a similar order multiple times within our various sales channels and to cancel the duplicative orders upon shipment or receipt of the product, or to also place orders with other vendors with shorter manufacturing lead times. Such multiple ordering (along with other factors) or risk of order cancellation may cause difficulty in predicting our revenue. Further, our efforts to improve manufacturing lead-time performance may result in more variability and less predictability in our revenue and operating results. In addition, when facing component supply-related challenges, we have in the past and may in the future increase our efforts in procuring components in order to meet customer expectations, which in turn contributes to an increase in inventory and purchase commitments. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. We plan our operating expense levels based primarily on forecasted revenue levels. These expenses and the impact of long-term commitments are relatively fixed in the short term. A shortfall in revenue could lead to operating results being below expectations because we may not be able to quickly reduce these fixed expenses in response to short-term business changes. Any of the above factors could materially harm our operations and financial results.

Previous wording

A reduction or interruption in supply, including disruptions on our global supply chain, caused in part by public health emergencies, geopolitical tensions (including as a result of China-Taiwan relations, increasing tariffs or any other trade tensions) or a significant natural disaster (including as a result of climate change); a significant increase in the price of one or more components (including as a result of inflation); a failure to adequately authorize procurement of inventory by our contract manufacturers; a failure by suppliers to deliver on our contracts; a failure to appropriately cancel, reschedule, or adjust our requirements based on our business needs; or a decrease in demand for our products could materially harm our business, operating results, and financial condition and could materially damage customer relationships. Furthermore, as a result of binding price or purchase commitments with suppliers, we may be obligated to purchase components at prices that are higher than those available in the current market. In the event that we become committed to purchase components at prices in excess of the current market price when the components are actually used, our gross margins could decrease. In addition, vendors may be under pressure to allocate product to certain customers for business, regulatory or political reasons, and/or demand changes in agreed pricing as a condition of supply. Although we have generally secured additional supply or taken other mitigation actions when significant disruptions have occurred, if similar situations occur in the future, they could materially harm our business, results of operations, and financial condition.

Current wording

A reduction or interruption in supply, including disruptions on our global supply chain, caused in part by public health emergencies, geopolitical tensions (including as a result of China-Taiwan relations, increasing tariffs or any other trade tensions) or a significant natural disaster (including as a result of climate change); a significant increase in the price of one or more components (including as a result of inflation); a failure to adequately authorize procurement of inventory by our contract manufacturers; a failure by suppliers to deliver on our contracts; IT-related failure or disruption; a failure to appropriately cancel, reschedule, or adjust our requirements based on our business needs; or a decrease in demand for our products could materially harm our business, operating results, and financial condition and could materially damage customer relationships. Furthermore, as a result of binding price or purchase commitments with suppliers, we may be obligated to purchase components at prices that are higher than those available in the current market. In the event that we become committed to purchase components at prices in excess of the current market price when the components are actually used, our gross margins could decrease. In addition, vendors may be under pressure to allocate product to certain customers for business, regulatory or political reasons, and/or demand changes in agreed pricing as a condition of supply. Although we have generally secured additional supply or taken other mitigation actions when significant disruptions have occurred, if similar situations occur in the future, they could materially harm our business, results of operations, and financial condition.

Previous wording

Our growth and ability to meet customer demands depend in part on our ability to obtain timely deliveries of parts from our suppliers and contract manufacturers. We have experienced component shortages in the past, including shortages caused by manufacturing process issues, that have affected our operations, including longer than normal lead times. For example, in recent periods, there was a market shortage of semiconductor and other component supply which affected lead times, the cost of that supply, and our ability to meet customer demand for our products. Additionally, we may in the future experience a shortage of certain component parts as a result of our own manufacturing issues, manufacturing issues at our suppliers or contract manufacturers, capacity problems experienced by our suppliers or contract manufacturers including capacity or cost problems resulting from industry consolidation, or strong demand for those parts. Growth in the economy is likely to create greater pressures on us and our suppliers to accurately project overall component demand and component demands within specific product categories and to establish optimal component levels and manufacturing capacity, especially for labor-intensive components, components for which we purchase a substantial portion of the supply, or the re-ramping of manufacturing capacity for highly complex products. During periods of shortages or delays the price of components may increase, or the components may not be available at all, and we may also encounter shortages if we do not accurately anticipate our needs. We may not be able to secure enough components at reasonable prices or of acceptable quality to build new products in a timely manner in the quantities or configurations needed. Accordingly, our revenue and gross margins could suffer until other sources can be developed.

Current wording

Our growth and ability to meet customer demands depend in part on our ability to obtain timely deliveries of parts from our suppliers and contract manufacturers. We have experienced component shortages in the past, including shortages caused by manufacturing process issues, that have affected our operations, including longer than normal lead times. Additionally, we may in the future experience a shortage of certain component parts as a result of our own manufacturing issues, manufacturing issues at our suppliers or contract manufacturers, capacity problems experienced by our suppliers or contract manufacturers including capacity or cost problems resulting from industry consolidation, or strong demand for those parts. Growth in the economy is likely to create greater pressures on us and our suppliers to accurately project component demand and to establish optimal component levels and manufacturing capacity, especially for labor-intensive components, components for which we purchase a substantial portion of the supply, or the re-ramping of manufacturing capacity for highly complex products. During periods of shortages or delays the price of components may increase, or the components may not be available at all, and we may also encounter shortages if we do not accurately anticipate our needs. We may not be able to secure enough components at reasonable prices or of acceptable quality to build new products in a timely manner in the quantities or configurations needed. Accordingly, our revenue and gross margins could suffer until other sources can be developed.

Previous wording

Manufacturing capacity and component supply constraints could continue to be significant issues for us. We purchase components from a variety of suppliers and use several contract manufacturers to provide manufacturing services for our products. During the normal course of business, in order to improve manufacturing lead-time performance and to help ensure adequate component supply, we enter into agreements with contract manufacturers and suppliers that either allow them to procure inventory based upon criteria as defined by us or that establish the parameters defining our requirements. In certain instances, these agreements allow us the option to cancel, reschedule, and adjust our requirements based on our business needs prior to firm orders being placed. When facing component supply-related challenges we have increased our efforts in procuring components in order to meet customer expectations, which in turn contributes to an increase in inventory and purchase commitments. In recent past periods, we increased our inventory and purchase commitments in light of the supply constraints seen industry-wide due to component shortages. These increases in our inventory and purchase commitments to shorten lead times could also lead to potential material excess and obsolete inventory charges or other negative impacts to our product gross margin in future periods if we fail to anticipate customer demand properly and product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are unable to continue to mitigate the remaining supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. For additional information and a further discussion of impacts and risks related to our inventory commitments and our purchase commitments with contract manufacturers and suppliers, see “Results of Operations—Product Gross Margin—Supply Chain Impacts and Risks”, “Liquidity and Capital Resources—Inventory Supply Chain” and Note 14 to the Consolidated Financial Statements.

Current wording

Manufacturing capacity and component supply constraints, as we saw with memory in the first quarter of fiscal 2026, could be significant issues for us as they have been in certain prior periods. We purchase components from a variety of suppliers and use several contract manufacturers to provide manufacturing services for our products. During the normal course of business, in order to improve manufacturing lead-time performance and to help ensure adequate component supply, we enter into agreements with contract manufacturers and suppliers that either allow them to procure inventory based upon criteria as defined by us or that establish the parameters defining our requirements. In certain instances, these agreements allow us the option to cancel, reschedule, and adjust our requirements based on our business needs prior to firm orders being placed. In recent periods, we have increased our efforts in procuring components in order to meet customer expectations, such as we have done in past periods due to supply constraints, which in turn contributes to an increase in inventory and purchase commitments. For example, in fiscal 2025 and in the first quarter of fiscal 2026, we entered into additional purchase commitments with contract manufacturers and suppliers related to manufacturing Cisco Silicon One and other products to meet demand from hyperscalers and other customers. We expect to continue entering into these additional purchase commitments in fiscal 2026. These past efforts and additional purchase commitments significantly increased our supply chain exposure, which resulted in negative impacts to our product gross margin in recent periods and may result in further negative impacts in future periods. For example, on August 26, 2025, we settled a legal dispute with a supplier relating to purchase obligations arising under long-term supply arrangements, which resulted in a charge to product cost of sales in the fourth quarter of fiscal 2025. These supply chain exposures include potential material excess and obsolete or other charges if product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are otherwise unable to mitigate these supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. For additional information and a further discussion of impacts and risks related to our inventory commitments and our purchase commitments with contract manufacturers and suppliers, see “Results of Operations—Product Gross Margin—Supply Chain Impacts and Risks”, “Liquidity and Capital Resources—Inventory Supply Chain” and Note 14 to the Consolidated Financial Statements.

Previous wording

Our level of product gross margins has declined in certain prior periods, and could decline in future periods due to adverse impacts from various factors, including:

Current wording

Our product gross margin decreased in the first quarter of fiscal 2026 year over year, and our level of product gross margins has also declined in certain prior periods, and could decline in future periods due to adverse impacts from various factors, including:

Previous wording

•Changes in customer, geographic, or product mix, including the mix of hardware and software

Current wording

•Changes in customer, geographic, or product mix, including the mix of hardware and software sales (including mix of cloud-based and on-premise software sales)

Previous wording

•Increases in material, labor or other manufacturing-related costs (i.e. component costs, broker fees, expedited freight and overtime) or higher supply chain logistics costs, any of which could be significant, especially during periods of supply constraints for certain costs, such as those that have impacted the market for components, including semiconductors and memory in past periods, and which costs have in the past and may continue to be exacerbated by inflation

Current wording

•Increases in material, labor or other manufacturing-related costs (i.e. component costs, broker fees, expedited freight and overtime) or higher supply chain logistics costs, any of which could be significant, especially during periods of supply constraints for certain costs, such as those that have impacted the market for components, including semiconductors (as we have seen in past periods) and memory (as we saw in the first quarter of fiscal 2026 and expect to continue seeing), and which costs have in the past and may continue to be exacerbated by inflation

Previous wording

Sales to the service provider and cloud market have been characterized by large and sporadic purchases, especially relating to our router sales and sales of certain other Networking and Collaboration products, in addition to longer sales cycles. Service provider and cloud product orders significantly decreased during fiscal 2024 and we have experienced similar declines in certain prior periods. Products in the service provider and cloud market could also face a high degree of customer concentration, with bespoke product designs and features that would be difficult to sell to alternate customers should the primary customer reduce its product orders with Cisco. Sales activity in this industry depends upon the stage of completion of expanding network infrastructures; the availability of funding; and the extent to which service provider and cloud customers are affected by regulatory, economic, and business conditions in the country of operations. Weakness in orders from this industry, including as a result of any slowdown in capital expenditures by service providers (which may be more prevalent during a global economic downturn, or periods of economic, political or regulatory uncertainty), could materially harm our business, operating results, and financial condition. Such slowdowns may continue or recur in future periods. Orders from this industry could decline for many reasons other than the competitiveness of our products and services within their respective markets. For example, in the past, many of our service provider and cloud customers have been negatively impacted by slowdowns in the general economy, by overcapacity, by changes in the service provider and cloud market, by regulatory developments, and by constraints on capital availability, resulting in business failures and substantial reductions in spending and expansion plans. These conditions have negatively impacted our business and operating results in the past, and could materially harm our business and operating results in any future period. Finally, service provider and cloud customers typically have longer implementation cycles; require a broader range of services, including design services; demand that vendors take on a larger share of risks; often require acceptance provisions, which can lead to a delay in revenue recognition; and expect financing from vendors. All these factors can add further risk to business conducted with service providers.

Current wording

Sales to the service provider and cloud market have been characterized by large and sporadic purchases. Although service provider and cloud product orders increased during the first quarter of fiscal 2026, at various times in the past we have experienced significant weakness in product orders from the service provider and cloud market. Product orders from the service provider and cloud market could decline in the future and, as has been the case in the past, such weakness could persist over extended periods of time given fluctuating market conditions. Products in the service provider and cloud market could also face a high degree of customer concentration, with bespoke product designs and features that would be difficult to sell to alternate customers should the primary customer reduce its product orders with Cisco. Sales activity in this industry depends upon the stage of completion of expanding network infrastructures; the availability of funding; and the extent to which service provider and cloud customers are affected by regulatory, economic, and business conditions in the country of operations. Weakness in orders from this industry, including as a result of any slowdown in capital expenditures by service providers (which may be more prevalent during a global economic downturn, or periods of economic, political or regulatory uncertainty), could materially harm our business, operating results, and financial condition. Such slowdowns may continue or recur in future periods. Orders from this industry could decline for many reasons other than the competitiveness of our products and services within their respective markets. For example, in the past, many of our service provider and cloud customers have been negatively impacted by slowdowns in the general economy, by overcapacity, by changes in the service provider and cloud market, by regulatory developments, and by constraints on capital availability, resulting in business failures and substantial reductions in spending and expansion plans. These conditions have negatively impacted our business and operating results in the past, and could materially harm our business and operating results in any future period. Finally, service provider and cloud customers typically have longer implementation cycles; require a broader range of services, including design services; demand that vendors take on a larger share of risks; often require acceptance provisions, which can lead to a delay in revenue recognition; and expect financing from vendors. All these factors can add further risk to business conducted with service providers.

Previous wording

If we fail to manage distribution of our products and services properly, or if our distributors’ financial condition or operations weaken, our revenue and gross margins could be negatively impacted. A substantial portion of our products and services is sold through our channel partners, and the remainder is sold through direct sales. Our channel partners include systems integrators, service providers, other third-party resellers, and distributors. Systems integrators and service providers typically sell directly to end users and often provide system installation, technical support, professional services, and other support services in addition to network equipment sales. Systems integrators also typically integrate our products into an overall solution, and a number of service providers are also systems integrators. Distributors stock inventory and typically sell to systems integrators, service providers, and other third-party resellers. We refer to sales through distributors as our two-tier system of sales to the end customer. If sales through indirect channels increase, this may lead to greater difficulty in forecasting the mix of our products and, to a degree, the timing of orders from our customers.

Current wording

If we fail to manage distribution of our products and services properly, or if our distributors’ financial condition or operations weaken, our revenue and gross margins could be negatively impacted. A substantial portion of our products and services is sold through our channel partners, and the remainder is sold through direct sales. Our channel partners include systems integrators, service providers, other third-party resellers, and distributors. Systems integrators and service providers typically sell directly to end users and often provide system installation, technical support, professional services, and other support services in addition to network equipment sales. Systems integrators also typically integrate our products into an overall solution, and a number of service providers are also systems integrators. Distributors stock inventory and typically sell to systems integrators, service providers, and other third-party resellers. We refer to sales through distributors as our two-tier system of sales to the end user. If sales through indirect channels increase, this may lead to greater difficulty in forecasting the mix of our products and, to a degree, the timing of orders from our customers.

Previous wording

We must manage inventory relating to sales to our distributors effectively, because inventory held by them could affect our results of operations. Our distributors may increase orders during periods of product shortages, cancel orders if their inventory is too high, or delay orders in anticipation of new products. They also may adjust their orders in response to the supply of our products and the products of our competitors that are available to them, and in response to seasonal fluctuations in end-user demand. Our distributors are generally given business terms that allow them to return a portion of inventory, receive credits for changes in selling price, and participate in various cooperative marketing programs. Inventory management remains an area of focus as we balance the need to maintain strategic inventory levels to ensure competitive lead times against the risk of inventory obsolescence because of rapidly changing technology and customer requirements. When facing component supply-related challenges, we have increased our efforts in procuring components in order to meet customer expectations. If we ultimately determine that we have excess inventory, we may have to reduce our prices and write down inventory, which in turn could result in lower gross margins.

Current wording

We must manage inventory relating to sales to our distributors effectively, because inventory held by them could affect our results of operations. Our distributors may increase orders during periods of product shortages, cancel orders if their inventory is too high, or delay orders in anticipation of new products. They also may adjust their orders in response to the supply of our products and the products of our competitors that are available to them, and in response to seasonal fluctuations in end-user demand. Our distributors are generally given business terms that allow them to return a portion of inventory, receive credits for changes in selling price, and participate in various cooperative marketing programs. Inventory management remains an area of focus as we balance the need to maintain strategic inventory levels to ensure competitive lead times against the risk of inventory obsolescence because of rapidly changing technology and customer requirements. When facing component supply-related challenges, we have in the past and may in the future increase our efforts in procuring components or enter additional purchase commitments with contract manufacturers and suppliers in order to meet customer expectations. If we ultimately determine that we have excess inventory, we may have to reduce our prices and write down inventory, which in turn could result in lower gross margins.

Previous wording

We currently incorporate AI technology in certain of our products and services and in our business operations. Our research and development of such technology remains ongoing. AI presents risks and challenges and may result in unintended consequences, including inadvertent disclosure of, or misuse of, intellectual property, confidential, personal, and/or competitive information, that could affect our reputation, its further development or our and our customers’ adoption and use of this technology. AI algorithms and training methodologies may be flawed. Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. Leveraging AI capabilities to potentially improve our internal functions and operations also presents further risks, costs, and challenges. While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues and risks presented by its use, we may be unsuccessful in identifying or resolving issues and risks before they arise. The AI-related legal and regulatory landscape remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings. AI-related issues, deficiencies and/or failures could also give rise to legal and/or regulatory action, including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new and different applications of existing and new data protection, privacy, intellectual property, and other laws; damage our reputation; or otherwise materially harm our business.

Current wording

We currently incorporate AI technology in certain of our commercial offerings and in our business operations. Our research and development of AI technology remains ongoing. AI presents risks and challenges and may result in unintended consequences, including inadvertent disclosure or misuse of intellectual property, confidential, personal, and/or competitive information, that could affect our reputation, our further AI development or our and our customers’ adoption and use of this technology. AI algorithms and training methodologies may be flawed. Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. Leveraging AI capabilities to potentially improve our internal functions and operations also presents risks, costs, and challenges. While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues and risks presented by its use, we may be unsuccessful in identifying or resolving issues and risks before they arise. The AI-related legal and regulatory landscape is constantly evolving and therefore remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings. AI-related issues, deficiencies and/or failures could also give rise to legal and/or regulatory action (including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new and different applications of existing and new data protection, privacy, intellectual property, and other laws); damage our reputation; or otherwise materially harm our business.

Previous wording

The process of developing new technology, including more programmable, flexible and virtual networks, and technology related to other market transitions— such as artificial intelligence, security, observability, and cloud— is complex and uncertain, and if we fail to accurately predict customers’ changing needs and emerging technological trends our business could be harmed. We must commit significant resources, including the investments we have been making in our strategic priorities to developing new products and services before knowing whether our investments will result in products and services the market will accept. In particular, if our model of the evolution of networking, security, or observability does not emerge as we believe it will, or these industries do not evolve as we believe they will, or if our strategy for addressing this evolution is not successful, many of our strategic initiatives and investments may be of no or limited value. For example, if we do not introduce products related to these markets in a timely fashion, or if product offerings in this market that ultimately succeed are based on technology, or an approach to technology, that differs from ours, our business could be harmed. Similarly, our business could be harmed if we fail to develop, or fail to develop in a timely fashion, offerings to address other transitions, or if the offerings addressing these other transitions that ultimately succeed are based on technology, or an approach to technology, different from ours. In addition, our business could be negatively impacted in periods surrounding our new product introductions if customers delay purchasing decisions to qualify or otherwise evaluate the new product offerings. We have also been seeking to meet the evolving needs of customers which include offering our products and solutions in the manner in which customers wish to consume them. As a part of these efforts, we continue to make changes to how we are organized and how we build and deliver our technology, including changes in our business models with customers. If our strategy for addressing our customer needs, or the architectures and solutions we develop do not meet those needs, or the changes we are making in how we are organized and how we build and deliver or technology is incorrect or ineffective, our business could be harmed.

Current wording

The process of developing new technology, including more programmable, flexible and virtual networks, and technology related to other market transitions— such as AI, security, observability, and cloud— is complex and uncertain, and if we fail to accurately predict customers’ changing needs and emerging technological trends our business could be harmed. We must commit significant resources, including the investments we have been making in our strategic priorities to developing new products and services before knowing whether our investments will result in products and services the market will accept. In particular, if our model of the evolution of networking, security, or observability does not emerge as we believe it will, or these industries do not evolve as we believe they will, or if our strategy for addressing this evolution is not successful, many of our strategic initiatives and investments may be of no or limited value. For example, if we do not timely introduce products related to these markets, or if such products or offerings that ultimately succeed in these markets are based on technology, or an approach to technology, that differs from ours, our business could be harmed. In addition, our business could be negatively impacted in periods surrounding our new product introductions if customers delay purchasing decisions to qualify or otherwise evaluate the new product offerings. We have also been seeking to meet the evolving needs of customers which include offering our products and solutions in the manner in which customers wish to consume them. As a part of these efforts, we continue to make changes to how we are organized and how we build and deliver our technology, including changes in our business models with customers. If our strategy for addressing our customer needs, or the architectures and solutions we develop do not meet those needs, or the changes we are making in how we are organized and how we build and deliver or technology is incorrect or ineffective, our business could be harmed.

Previous wording

As of the end of the third quarter of fiscal 2025, we have senior unsecured notes outstanding in an aggregate principal amount of $25.3 billion that mature at specific dates from calendar year 2025 through 2064. We have also established a commercial paper program under which we may issue short-term, unsecured commercial paper notes on a private placement basis up to a maximum aggregate amount outstanding at any time of $15.0 billion, and we had $4.2 billion in commercial paper notes outstanding under this program as of April 26, 2025. There can be no assurance that our incurrence of this debt or any future debt, including any additional debt to refinance maturing debt, will be a better means of providing liquidity to us than would our use of our existing cash resources. Further, we cannot be assured that our maintenance of this indebtedness or incurrence of future indebtedness will not negatively impact our operating results or financial condition. In addition, changes by any rating agency to our credit rating can negatively impact the value and liquidity of both our debt and equity securities, as well as the terms upon which we may borrow under our commercial paper program or future debt issuances.

Current wording

As of the end of the first quarter of fiscal 2026, we have senior unsecured notes outstanding in an aggregate principal amount of $24.8 billion that mature at specific dates from calendar year 2026 through 2064. We have also established a commercial paper program under which we may issue short-term, unsecured commercial paper notes on a private placement basis up to a maximum aggregate amount outstanding at any time of $15.0 billion, and we had $3.5 billion in commercial paper notes outstanding under this program as of October 25, 2025. There can be no assurance that our incurrence of this debt or any future debt, including any additional debt to refinance maturing debt, will be a better means of providing liquidity to us than would our use of our existing cash resources. Further, we cannot be assured that our maintenance of this indebtedness or incurrence of future indebtedness will not negatively impact our operating results or financial condition. In addition, changes by any rating agency to our credit rating can negatively impact the value and liquidity of both our debt and equity securities, as well as the terms upon which we may borrow under our commercial paper program or future debt issuances.

Previous wording

Our reputation and/or business could be negatively impacted by ESG matters and/or our reporting of such matters.

Current wording

Our reputation and/or business could be negatively impacted by matters relating to environmental, social, and governance and/or our reporting of such matters.

Previous wording

There is an increasing focus from regulators, certain investors, and other stakeholders concerning environmental, social, and governance (“ESG”) matters, both in the United States and internationally. We communicate certain ESG-related initiatives, goals, and/or commitments regarding environmental matters, inclusion, responsible sourcing and social investments, and other matters, in our annual Purpose Report, on our website, in our filings with the SEC, and elsewhere. These initiatives, goals, or commitments involve risks and uncertainties and could be difficult to achieve and costly to implement. For example, in September 2021, we announced our goal to achieve net zero across all scopes of greenhouse gas emissions by 2040, the achievement of which relies, in large part, on the accuracy of our estimates and assumptions around the enhanced power efficiency of our products, the adoption of renewable energy at customer and supplier sites, and the adoption of certain of our products and services by our customers. We could fail to achieve, or be perceived to fail to achieve, our 2040 net zero goal or other ESG-related initiatives, goals, or commitments. In addition, we could be criticized for the timing, scope or nature of these initiatives, goals, or commitments, or for any revisions to them. To the extent that our required and voluntary disclosures about ESG matters increase, we could be criticized for the accuracy, adequacy, or completeness of such disclosures. Our actual or perceived failure to achieve our ESG-related initiatives, goals, or commitments could negatively impact our reputation or otherwise harm our business.

Current wording

We are subject to evolving and sometimes conflicting, laws, regulations, policies, and investor and other stakeholder expectations concerning environmental, social, and governance matters, such as environmental sustainability and climate change, both in the United States and internationally. Any initiatives, goals, or commitments we disclose in this regard involve risks and uncertainties and could be difficult to achieve and costly to implement. For example, in September 2021, we announced our goal to achieve net zero across all scopes of greenhouse gas emissions by 2040, the achievement of which relies, in large part, on the accuracy of our estimates and assumptions around the enhanced power efficiency of our products, the adoption of renewable energy at customer and supplier sites, and the adoption of certain of our products and services by our customers. We could fail to achieve, or be perceived to fail to achieve, our 2040 net zero goal or other initiatives, goals, or commitments. In addition, in a climate where there are changing and increasingly divergent views on where our focus should be on these matters, our initiatives, goals, or commitments, or any revisions to them, are often criticized and the accuracy, adequacy, or completeness of such disclosures challenged. Our actual or perceived failure to achieve our initiatives, goals, or commitments, or otherwise successfully manage investor or other stakeholder expectations on these matters, could negatively impact our reputation or otherwise harm our business.

Previous wording

We generally rely on patents, copyrights, trademarks, and trade secret laws to establish and maintain proprietary rights in our technology and products. Although we have been issued numerous patents and other patent applications are currently pending, there can be no assurance that any of these patents or other proprietary rights will not be challenged, invalidated, or circumvented or that our rights will, in fact, provide competitive advantages to us. Furthermore, many key aspects of networking technology are governed by industry-wide standards, which are usable by all market entrants. In addition, there can be no assurance that patents will be issued from pending applications or that claims allowed on any patents will be sufficiently broad to protect our technology. In addition, the laws of some foreign countries may not protect our proprietary rights to the same extent as do the laws of the United States. The outcome of any actions taken in these foreign countries may be different than if such actions were determined under the laws of the United States. Although we are not dependent on any individual patents or group of patents for particular segments of the business for which we compete, if we are unable to protect our proprietary rights to the totality of the features (including aspects of products protected other than by patent rights) in a market, we may find ourselves at a competitive disadvantage to others who need not incur the substantial expense, time, and effort required to create innovative products that have enabled us to be successful.

Current wording

We generally rely on patents, copyrights, trademarks, and trade secret laws to establish and maintain proprietary rights in our technology and products. Although we have been issued numerous patents and other patent applications are currently pending, there can be no assurance that any of these patents or other proprietary rights will not be challenged, invalidated, or circumvented or that our rights will, in fact, provide competitive advantages to us. Furthermore, many key aspects of our technology are governed by industry-wide standards, which are usable by all market entrants. In addition, there can be no assurance that patents will be issued from pending applications or that claims allowed on any patents will be sufficiently broad to protect our technology. Additionally, some U.S. governmental entities and courts have expressed a position that U.S. copyright and patent protection should be limited to protecting inventions and works of authorship created by humans. Therefore, U.S. copyright or patent protection for inventions or works developed in part or wholly by generative AI tools may be limited, or not available at all. In addition, the laws of some foreign countries may not protect our proprietary rights to the same extent as do the laws of the United States. The outcome of any actions taken in these foreign countries may be different than if such actions were determined under the laws of the United States. Although we are not dependent on any individual patents or group of patents for particular segments of the business in which we compete, if we are unable to protect our proprietary rights to the totality of the features (including aspects of products protected other than by patent rights) in a market, we may find ourselves at a competitive disadvantage to others who need not incur the substantial expense, time, and effort required to create innovative products that have enabled us to be successful.

Previous wording

Third parties, including customers, have in the past and may in the future assert claims or initiate litigation related to exclusive patent, copyright, trademark, and other intellectual property rights to technologies and related standards that are relevant to us. These assertions have increased over time as a result of our growth and the general increase in the pace of patent claims assertions, particularly in the United States. Because of the existence of a large number of patents in the networking field, the secrecy of some pending patents, and the rapid rate of issuance of new patents, it is not economically practical or even possible to determine in advance whether a product or any of its components infringes or will infringe on the patent rights of others. The asserted claims and/or initiated litigation can include claims against us or our manufacturers, suppliers, or customers, alleging infringement of their proprietary rights with respect to our existing or future products or components of those products. Regardless of the merit of these claims, they can be time-consuming, result in costly litigation and diversion of technical and management personnel, or require us to develop a non-infringing technology or enter into license agreements. Where claims are made by customers, resistance even to unmeritorious claims could damage customer relationships. There can be no assurance that licenses will be available on acceptable terms and conditions, if at all, or that our indemnification by our suppliers will be adequate to cover our costs if a claim were brought directly against us or our customers. Furthermore, because of the potential for high court awards, including injunctive relief, that are not necessarily predictable, it is not unusual to find even arguably unmeritorious claims settled for significant amounts. If any infringement or other intellectual property claim made against us by any third party is successful, if we are required to indemnify a customer with respect to a claim against the customer, or if we fail to develop non-infringing technology or license the proprietary rights on commercially reasonable terms and conditions, our business, operating results, and financial condition could be materially harmed. For additional information regarding our indemnification obligations, see Note 14(e) to the Consolidated Financial Statements contained in this report. Our exposure to risks associated with the use of intellectual property may be increased as a result of acquisitions, as we have a lower level of visibility into the development process with respect to such technology or the care taken to safeguard against infringement risks. Further, in the past, third parties have made infringement and similar claims after we have acquired technology that had not been asserted prior to our acquisition.

Current wording

Third parties, including customers, have in the past and may in the future assert claims or initiate litigation related to exclusive patent, copyright, trademark, and other intellectual property rights to technologies and related standards that are relevant to us. These assertions have increased over time as a result of our growth and the general increase in the pace of patent claims assertions, particularly in the United States. Because of the existence of a large number of patents in the information technology field, the secrecy of some pending patents, and the rapid rate of issuance of new patents, it is not economically practical or even possible to determine in advance whether a product or any of its components infringes or will infringe on the patent rights of others. The asserted claims and/or initiated litigation can include claims against us or our manufacturers, suppliers, or customers, alleging infringement of their proprietary rights with respect to our existing or future products or components of those products. Regardless of the merit of these claims, they can be time-consuming, result in costly litigation and diversion of technical and management personnel, or require us to develop a non-infringing technology or enter into license agreements. Where claims are made by customers, resistance even to unmeritorious claims could damage customer relationships. There can be no assurance that licenses will be available on acceptable terms and conditions, if at all, or that our indemnification by our suppliers will be adequate to cover our costs if a claim were brought directly against us or our customers. Furthermore, because of the potential for high court awards, including injunctive relief, that are not necessarily predictable, it is not unusual to find even arguably unmeritorious claims settled for significant amounts. If any infringement or other intellectual property claim made against us by any third party is successful, if we are required to indemnify a customer with respect to a claim against the customer, or if we fail to develop non-infringing technology or license the proprietary rights on commercially reasonable terms and conditions, our business, operating results, and financial condition could be materially harmed. For additional information regarding our indemnification obligations, see Note 14(e) to the Consolidated Financial Statements contained in this report. Our exposure to risks associated with the use of intellectual property may be increased as a result of acquisitions, as we have a lower level of visibility into the development process with respect to such technology or the care taken to safeguard against infringement risks. Further, in the past, third parties have made infringement and similar claims after we have acquired technology that had not been asserted prior to our acquisition.

Previous wording

Many of our products are designed to include software or other intellectual property licensed from third parties. It may be necessary in the future to seek or renew licenses relating to various aspects of these products. There can be no assurance that the necessary licenses would be available on acceptable terms, if at all. The inability to obtain certain licenses or other rights or to obtain such licenses or rights on favorable terms, or the need to engage in litigation regarding these matters, could materially harm our business, operating results, and financial condition. Moreover, the inclusion in our products of software or other intellectual property licensed from third parties on a nonexclusive basis could limit our ability to protect our proprietary rights in our products.

Current wording

Many of our commercial offerings are designed to include software or other intellectual property licensed from third parties. It may be necessary in the future to seek or renew licenses relating to various aspects of these products. There can be no assurance that the necessary licenses would be available on acceptable terms, if at all. The inability to obtain certain licenses or other rights or to obtain such licenses or rights on favorable terms, or the need to engage in litigation regarding these matters, could materially harm our business, operating results, and financial condition. Moreover, the inclusion in our commercial offerings of software or other intellectual property licensed from third parties on a nonexclusive basis could limit our ability to protect our proprietary rights in our products.

Previous wording

We experience cyber attacks and other attempts to gain unauthorized access on a regular basis to (i) our products and services (together, our “solutions”) and (ii) the servers, data centers, networks, systems, and cloud-based services operated or enabled by us, or by third parties upon which we rely, on or through which our and third-party data are stored, processed, or can be accessed (collectively, our “IT environment”). We anticipate continuing to be increasingly subject to such attempts as cyber attacks become more sophisticated and difficult to predict and protect against. Furthermore, the emergence and maturation of AI capabilities has led to new and/or more effective methods of cyber attacks. Despite our active implementation of security and other measures, our solutions and IT environment have been, and continue to be, vulnerable to cyber attacks, incidents, data breaches, malware, inadvertent error, disruptions, failures, physical security breaches, tampering or other theft or misuse, including by employees, contingent workers, and malicious actors. Additionally, nation-state actors or their agents have in the past successfully attacked our IT environment and have also exploited vulnerabilities in our solutions to carry out attacks, and we anticipate that these attacks and the exploitation of vulnerabilities in our solutions will continue and may intensify during periods of diplomatic or armed conflict. Further, a cyber attack or other incident could go undetected and persist in our environments for extended periods. Cyber-related events have caused, and in the future could result in, compromise to, or the disruption of access to, the operation of our solutions and IT environment or those of our customers or third-party providers upon which we rely, or result in confidential information stored on our systems or our customers’ or other third-party systems being improperly accessed, processed, disclosed now (or in the future), or being lost or stolen. Efforts to limit the ability of malicious actors to disrupt the operations of the Internet or undermine our security efforts are costly to implement and may not be successful. Breaches of security in our IT environment, our customers’ or third-party providers’ networks, or in third-party products we use, regardless of whether the breach is attributable to a vulnerability in our solutions, a failure by us to timely mitigate or apply a security fix for products we use that are found vulnerable, or a failure to maintain the digital security infrastructure or security tools that protect the integrity of our solutions and IT environment, could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business. The occurrence of a cyber attack, data breach or other incident could subject us to liability to our customers, data subjects, suppliers, business partners, employees, and others, give rise to legal and/or regulatory …

Excerpt shortened here; the source contains the full paragraph.

Current wording

We experience cyber attacks and other attempts to gain unauthorized access on a regular basis to (i) our products and services (together, our “solutions”) and (ii) the servers, data centers, networks, systems, and cloud-based services operated or enabled by us, or by third parties upon which we rely, on or through which our and third-party data are stored, processed, or can be accessed (collectively, our “IT environment”). We anticipate continuing to be increasingly subject to such attempts as cyber attacks become more sophisticated and difficult to predict and protect against. Furthermore, the emergence and maturation of AI capabilities has led to new and/or more effective methods of cyber attacks. Despite our active implementation of security and other measures, our solutions and IT environment have been, and continue to be, vulnerable to cyber attacks, incidents, data breaches, malware, inadvertent error, disruptions, failures, physical security breaches, tampering or other theft or misuse, including by employees, contingent workers, and malicious actors. Additionally, nation-state actors or their agents have in the past successfully attacked our IT environment and have also exploited vulnerabilities in our solutions to carry out attacks, and we anticipate that these attacks and the exploitation of vulnerabilities in our solutions will continue and may intensify during periods of diplomatic or armed conflict or other geopolitical tensions. Further, a cyber attack, vulnerability exploitation, or other incident could go undetected and persist in our environments, or those of our customers or third-party providers upon which we rely, for extended periods. Cyber-related events have caused, and in the future could result in, compromise to, or the disruption of access to, the operation of our solutions and IT environment or those of our customers or third-party providers upon which we rely, or result in confidential information stored on our systems or our customers’ or other third-party systems being improperly accessed, processed, disclosed now (or in the future), or being lost or stolen. Efforts to limit the ability of malicious actors to disrupt the operations of the Internet or undermine our security efforts are costly to implement and may not be successful. Breaches of security in our IT environment, our customers’ or third-party providers’ networks, or in third-party products we use, regardless of whether the breach is attributable to a vulnerability in our solutions, a failure by us to timely mitigate or apply a security fix for products we use that are found vulnerable, or a failure to maintain the digital security infrastructure or security tools that protect the integrity of our solutions and IT environment, could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business. The occurrence of a cyber attack, data breach or other incident could subject us to d…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Vulnerabilities and critical security defects, prioritization decisions regarding remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner or deciding not to upgrade our solutions could result in claims of liability against us, damage our reputation, or otherwise materially harm our business.

Current wording

Vulnerabilities and critical security defects, prioritization decisions regarding remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner or deciding not to upgrade our solutions to those with security updates or security enhancements applied could result in claims of liability against us, damage our reputation, or otherwise materially harm our business.

Previous wording

The products and services (together, our “solutions”) we sell to customers, and the cloud-based services operated or enabled by us, or by third parties upon which we rely, inevitably contain vulnerabilities or security defects (despite our efforts to prevent and detect them through secure development lifecycle practices, testing, or other means), which have not been remedied or cannot be disclosed without compromising security. We also make prioritization decisions in determining which vulnerabilities or security defects to fix and the timing of these fixes. Even when we prioritize a vulnerability or security defect, in certain instances it has taken, and in the future could take, time for us to develop a remedy and the remedy may ultimately be insufficient to fully fix the issue. In addition, workarounds or other mitigation efforts in certain instances have not been, and in the future may not be, available or sufficient to protect customers prior to a security update being made available. Vulnerabilities can persist even after we have issued security updates if we have not identified and addressed the root cause of a particular vulnerability, if customers have not installed the most recent updates, if the attackers exploited the vulnerabilities before a security update is applied to install additional malware to further compromise customers’ systems, or if a previously patched vulnerability is inadvertently reintroduced due to a security regression during future development. Additionally, customers may also need to test security updates before they can be deployed which can delay implementation. When customers do not deploy security updates in a timely manner, use solutions that are end of life and no longer receive security updates, decide not to upgrade to the latest versions of our solutions containing the security update, or configure our solutions in insecure ways, they are left vulnerable. In addition, we rely on third-party providers of software (including open source) and cloud-based services on which our and third-party data is stored or processed, and we cannot control the timing at which third-party providers remedy vulnerabilities, which could leave us vulnerable. Failure to comply with internal security policies and standards, including secure development lifecycle practices, failure to prevent or promptly mitigate vulnerabilities and security defects, prioritization errors in remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner, deciding not to upgrade solutions, or configuring our solutions in insecure ways could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially harm our business.

Current wording

The products and services (together, our “solutions”) we sell to customers, and the cloud-based services operated or enabled by us, or by third parties upon which we rely, inevitably contain vulnerabilities or security defects (despite our efforts to prevent and detect them through secure development lifecycle practices, testing, or other means), which have not been remedied or cannot be disclosed without compromising security. We also make prioritization decisions in determining which vulnerabilities or security defects to fix and the timing of these fixes. Even when we prioritize a vulnerability or security defect, in certain instances it has taken, and in the future could take, time for us to develop and test a remedy and the remedy may ultimately be insufficient to fully fix the issue or may be found to create other issues. In addition, workarounds or other mitigation efforts in certain instances have not been, and in the future may not be, available or sufficient to protect customers prior to a security update being made available. Vulnerabilities can persist even after we have issued security updates if we have not identified and addressed the root cause of a particular vulnerability, if customers have not installed the most recent updates, if the attackers exploited the vulnerabilities before a security update is applied (such as to install additional malware to further compromise customers’ systems), or if a previously patched vulnerability is inadvertently reintroduced due to a security regression during future development or a changed deployment. Additionally, customers may also desire to test security updates before they can be deployed which can delay implementation. When customers do not deploy security updates in a timely manner, use solutions that are end of life and no longer receive security updates, decide not to upgrade to the latest versions of our solutions containing security updates or security enhancements, configure our solutions in insecure ways, or fail to sufficiently monitor activity on those solutions, they are left vulnerable. In addition, we rely on third-party providers of software (including open source) and cloud-based services on which our and third-party data is stored or processed, and we cannot control the timing at which third-party providers remedy vulnerabilities, which could leave us vulnerable. Failure to comply with internal security policies and standards, including secure development lifecycle practices, failure to prevent or promptly mitigate vulnerabilities and security defects, prioritization errors in remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner, deciding not to upgrade solutions, or configuring our solutions in insecure ways could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Global privacy and data protection-related laws and regulations are evolving, extensive, and complex. Compliance with these laws and regulations is difficult and costly. In addition, evolving legal requirements restricting or controlling the collection, processing, use or cross-border transmission of data, including regulation of cloud-based services, could materially affect our customers’ ability to use, and our ability to sell, our products and services. The interpretation and application of these laws in some instances is uncertain, and our legal and regulatory obligations are subject to frequent changes. For example, the European Union’s (“EU”) General Data Protection Regulation (“GDPR”) applies to our activities conducted from an establishment in the EU or related to products and services offered in the EU and imposes a range of compliance obligations regarding the handling of personal data for both ourselves and our customers. Additionally, we are subject to California’s Consumer Privacy Act, Singapore’s Personal Data Protection Act, and other laws, regulations, and obligations around the world that govern the handling of personal data. Our actual or perceived failure to comply with applicable laws and regulations or other obligations relating to the use of data and protecting data from unauthorized access, use, or other processing, could subject us to claims of liability, or give rise to legal and/or regulatory action, damage our reputation, and/or otherwise negatively impact our business, any of which could materially harm our operating results and financial condition.

Current wording

Global privacy and data related laws and regulations, including cybersecurity laws, are evolving, extensive, and complex. Compliance with these laws and regulations is difficult and costly. In addition, evolving legal requirements restricting or controlling the collection, processing, use, sharing, access or cross-border transmission of data, including regulation of cloud-based services, could materially affect our customers’ ability to use, and our ability to sell, our products and services. The interpretation and application of these laws in some instances is uncertain, and our legal obligations and customer requirements are subject to frequent changes. For example, the European Union’s (“EU”) General Data Protection Regulation (“GDPR”) and Data Act apply to our activities conducted from an establishment in the EU or related to products and services offered in the EU and imposes a range of compliance obligations regarding the handling of personal and industrial data for both ourselves and our customers. Additionally, we are subject to the California Privacy Rights Act, Singapore’s Personal Data Protection Act, and other laws, regulations, and obligations around the world that govern the handling of data. Our actual or perceived failure to comply with applicable laws and regulations or other obligations relating to the use of data and protecting data from unauthorized access, use, or other processing, could subject us to claims of liability, give rise to legal and/or regulatory action, damage our reputation, and/or otherwise negatively impact our business, any of which could materially harm our operating results and financial condition.

Previous wording

Changes in regulatory requirements applicable to the industries and sectors in which we operate, in the United States and in other countries, could materially affect the sales and use of our products and services. In particular, economic sanctions and changes to export and import control requirements have impacted and may continue to impact our ability to sell and support our products and services in certain jurisdictions. In addition, changes in telecommunications regulations could impact our service provider customers’ purchase of our products and services, and they could also impact sales of our own regulated offerings. Government and other customers’ procurement policies, priorities, regulations, technology initiatives and/or other obligations often give rise to evolving privacy, cybersecurity, operational resilience, data governance, or other requirements; the failure or delay in meeting and maintaining compliance with such requirements could negatively impact our business, including by limiting our ability to sell products and services, directly or indirectly, to public sector, critical infrastructure, and other customers. Additional areas of uncertainty that could impact sales of our products and services include laws, regulations, or customer procurement requirements related to encryption technology, data, artificial intelligence, privacy, cybersecurity, operational resilience, environmental sustainability (including climate change), human rights, product certification, product and digital accessibility, country of origin, and national security and other security controls applicable to our offerings and supply chain. Changes in regulatory requirements or our actual or perceived failure to comply (or to enable our customers to comply when using our offerings) with applicable laws, regulations, or other obligations could materially harm our business, operating results, and financial condition.

Current wording

Changes in regulatory requirements applicable to the industries and sectors in which we operate, in the United States and in other countries, could materially affect our operations and the sales and use of our products and services. In particular, economic sanctions and changes to export and import control requirements have impacted and may continue to impact our ability to sell and support our products and services in certain jurisdictions. In addition, changes in telecommunications regulations could impact our service provider customers’ purchase of our products and services, and they could also impact sales of our own regulated offerings. Government and other customers’ procurement policies, priorities, regulations, technology initiatives and/or other obligations often give rise to evolving privacy, cybersecurity, operational resilience, data governance, sourcing or other requirements; the failure or delay in meeting and maintaining compliance with such requirements could negatively impact our business, including by limiting our ability to sell products and services, directly or indirectly, to public sector, critical infrastructure, and other customers. Additional areas of uncertainty that could impact sales of our products and services include laws, regulations, or customer procurement requirements related to encryption technology, data, AI, privacy, cybersecurity, sovereignty, localization, operational resilience, environmental sustainability (including climate change), human rights, product certification, product and digital accessibility, country of origin, sourcing and national security and other security controls applicable to our offerings and supply chain. Changes in regulatory requirements or our actual or perceived failure to comply (or to enable our customers to comply when using our offerings) with applicable laws, regulations, or other obligations could materially harm our business, operating results, and financial condition.

Previous wording

On September 13, 2001, we announced that our Board of Directors had authorized a stock repurchase program. The remaining authorized amount for stock repurchases under this program is approximately $15.4 billion with no termination date.

Current wording

On September 13, 2001, we announced that our Board of Directors had authorized a stock repurchase program. As of October 25, 2025, the remaining authorized amount for stock repurchases under this program is approximately $12.2 billion with no termination date.