DOVER Corp

Previous wording

Approximately 44% and 43% of our revenues for 2023 and 2022, respectively, were derived outside the United States and we expect international sales to continue to represent a significant portion of our revenues given our global growth strategy. As a result of our international operations and our global expansion strategy, we are subject to various risks, including:

Current wording

Approximately 46% and 48% of our revenues for 2024 and 2023, respectively, were derived outside the United States and we expect international sales to continue to represent a significant portion of our revenues given our global growth strategy. As a result of our international operations and our global expansion strategy, we are subject to various risks, including:

Previous wording

The impacts of any such unexpected event are difficult to predict but could have a material adverse effect on our

Current wording

The impacts of any such unexpected event are difficult to predict but could have a material adverse effect on our businesses, financial condition, or operations.

Previous wording

Although we have several processes and procedures in place designed to manage and mitigate cybersecurity risk, our business is still subject to certain risks. We depend on our own and third party information systems, including cloud-based systems and managed service providers, to store, process and protect our information and support our business activities. We also use third party systems to support employee data processing for our global workforce and to support customer business activities, such as transmitting payment information, providing mobile monitoring services, and capturing operational data. Additionally, some of our products contain integrated hardware and software and offer the ability to connect to networks. While we have measures in place that are designed to protect these systems, these systems have been and are expected to continue to be the target of cyber attacks. Although we conduct security assessments and periodic re-assessments of third party partners and other service providers, our systems may also experience vulnerabilities from third-party or open source software code that may be incorporated into our own or our vendors’ systems. Any prolonged system disruption in our systems or third-party services could negatively impact the coordination of our sales, planning, and manufacturing activities, which could harm our business.

Current wording

Although we have processes and procedures in place designed to manage and mitigate cybersecurity risk, our business is still subject to certain risks. We depend on our own and third party information systems, including cloud-based systems and managed service providers, to store, process and protect our information and support our business activities. We also use third party systems to support employee data processing for our global workforce and to support customer business activities, such as transmitting payment information, providing mobile monitoring services, and capturing operational data. Additionally, some of our products contain integrated hardware and software and offer the ability to connect to networks. While we have measures in place that are designed to protect our systems and provide oversight for third party system cybersecurity risks, these systems have been and are expected to continue to be the target of cyber attacks. Although we conduct security assessments and periodic re-assessments of third party partners and other service providers, these systems have in the past and may in the future experience vulnerabilities, including from third-party or open source software code that may be incorporated into our own or our vendors’ systems. Any prolonged system disruption in our systems or third-party services could negatively impact the coordination of our sales, planning, and manufacturing activities, which could harm our business.

Previous wording

Our business has both an increasing reliance on systems and an increasing digital footprint as a result of changing technologies, connected devices and digital offerings, as well as expanded remote work policies. If these technologies, systems, products or services are damaged, cease to function properly, are compromised due to employee or third-party contractor error, user error, malfeasance, system errors, or other vulnerabilities, or are subject to cybersecurity attacks, such as those involving denial of service attacks, unauthorized access, malicious software, ransomware, or other intrusions, including by criminals, nation states or insiders, our business may be adversely impacted. The impacts could include production downtimes, operational delays, and other impacts on our operations and ability to provide products and services to our customers; compromise of confidential, proprietary or otherwise protected information, including personal information and customer confidential data; destruction, corruption, or theft of data or intellectual property; manipulation, disruption, or improper use of these technologies, systems, products or services; financial losses from fraudulent transactions, remedial actions, loss of business or potential liability; adverse media coverage; legal claims or legal proceedings, including regulatory investigations, actions and fines; and damage to our reputation. We regularly assess our threat landscape and monitor our systems and other technical security controls, maintain information security policies and procedures, including a breach response plan, ensure maintenance of backup and protective systems, and have a team of security personnel managing our efforts and initiatives. However, there has been a rise in the number of cyberattacks targeting confidential business information generally and in the manufacturing industry specifically, as well as an increase in cyberattacks targeting managed service providers, by both state-sponsored and criminal organizations. Moreover, there has been a rise in the number of cyberattacks that depend on human error or manipulation, including phishing attacks or schemes that use social engineering to gain access to systems or perpetuate wire transfer or other frauds.

Current wording

Our business has both an increasing reliance on systems and an increasing digital footprint as a result of changing technologies, connected devices and digital offerings, as well as expanded remote work policies. If these technologies, systems, products or services are damaged, cease to function properly, are compromised due to employee or third-party contractor error, user error, malfeasance, system errors, or other vulnerabilities, or are subject to cybersecurity attacks, such as those involving denial of service attacks, unauthorized access, malicious software, ransomware, or other intrusions, misuse or malicious use of artificial intelligence, including by criminals, nation states or insiders, our business may be adversely impacted. The impacts could include production downtimes, operational delays, and other impacts on our operations and ability to provide products and services to our customers; compromise of confidential, proprietary or otherwise protected information, including personal information and customer confidential data; destruction, corruption, or theft of data or intellectual property; manipulation, disruption, or improper use of these technologies, systems, products or services; financial losses from fraudulent transactions, remedial actions, loss of business or potential liability; adverse media coverage; legal claims or legal proceedings, including regulatory investigations, actions and fines; and damage to our reputation. We regularly assess our threat landscape and monitor our systems and other technical security controls, maintain information security policies and procedures, including a breach response plan, ensure maintenance of backup and protective systems, and have a team of security personnel managing our efforts and initiatives. However, there has been a rise in the number of cyberattacks targeting confidential business information generally and in the manufacturing industry specifically, as well as an increase in cyberattacks targeting managed service providers, by both state-sponsored and criminal organizations. Moreover, there has been a rise in the number of cyberattacks that depend on human error or manipulation, including phishing attacks or schemes that use social engineering to gain access to systems or perpetuate wire transfer or other frauds.

Previous wording

These trends increase the likelihood of such events occurring as well as the costs associated with protecting against such events. It is possible for vulnerabilities in our systems to remain undetected for an extended period of time up to and including several years. We attempt to mitigate these risks by employing a number of measures, including employee training, systems monitoring and other technical security controls, vulnerability scanning, risk assessments, a breach response plan, maintenance of backup and protective systems, and security personnel. Notwithstanding those measures, our systems, networks, products and services remain potentially vulnerable to known or unknown cybersecurity attacks and other threats, any of which could have a material adverse effect on our consolidated results of operations, financial condition and cash flows. We continuously monitor and develop our systems to protect our technology infrastructure and data from misappropriation or corruption. However, a cybersecurity attack could persist for an extended period of time before being detected, and, following detection, it could take considerable time for us to obtain full and reliable information about the extent, amount and type of information compromised. During the course of an investigation, we may not know the full impact of the event and how to remediate it, and actions, decisions and mistakes that are taken or made may further increase the negative effects of the event on our business, results of operations and reputation. While we maintain insurance coverage that is intended to address certain aspects of cybersecurity risks, such insurance coverage may not cover all losses or all types of claims that arise. As cyber threats continue to evolve, cybersecurity and data protection laws and regulations continue to develop in the U.S. and globally, and our business continues to move towards increased online connectivity within our information systems and through more Internet-enabled products and offerings, we expect to expend additional resources to continue to build out our compliance programs, strengthen our information security, data protection and business continuity measures, and investigate and remediate vulnerabilities. For additional information on our cybersecurity risk management, strategy and governance, see Item 1C. "Cybersecurity."

Current wording

These trends increase the likelihood of such events occurring as well as the costs associated with protecting against such events. It is possible for vulnerabilities in our systems to remain undetected for an extended period of time up to and including several years. We attempt to mitigate these risks by employing a number of measures, including employee training, systems monitoring and other technical security controls, vulnerability scanning, risk assessments, a breach response plan, maintenance of backup and protective systems, and security personnel. Notwithstanding those measures, our systems, networks, products and services remain potentially vulnerable to known or unknown cybersecurity attacks and other threats, any of which could have a material adverse effect on our consolidated results of operations, financial condition and cash flows. We continuously monitor and develop our systems to protect our technology infrastructure and data from misappropriation or corruption. However, a cybersecurity attack could persist for an extended period of time before being detected, and, following detection, it could take considerable time for us to obtain full and reliable information about the extent, amount and type of information compromised. During the course of an investigation, we may not know the full impact of the event and how to remediate it, and actions, decisions and mistakes that are taken or made may further increase the negative effects of the event on our business, results of operations and reputation. While we maintain insurance coverage that is intended to address certain aspects of cybersecurity risks, such insurance coverage may not cover all losses or all types of claims that arise. As cyber threats continue to evolve, cybersecurity and data protection laws and regulations continue to develop in the U.S. and globally, and our business continues to move toward increased online connectivity within our information systems and through more Internet-enabled products and offerings, we expect to expend additional resources to continue to build out our compliance programs, strengthen our information security, data protection and business continuity measures, and investigate and remediate vulnerabilities. For additional information on our cybersecurity risk management, strategy and governance, see Item 1C. "Cybersecurity."

Previous wording

We use a wide range of raw materials and components in our manufacturing operations that come from numerous suppliers. While we believe that sources of supply for raw materials and components are generally adequate, it is difficult to predict what effects of extended lead times or shortages may have in the future. In addition, some of the raw materials and components may be available only from limited or single source suppliers. If a single source or limited source supplier were to cease or interrupt production for any reason or otherwise fail to supply those raw materials or components to us on favorable purchase terms, including at favorable prices, in sufficient quantities and with adequate lead times needed for efficient manufacturing, our ability to meet customer commitments, and satisfy market demands for affected products could be negatively affected. The disruption of our global supply chain for any reason, including for issues such as COVID-19 or other health epidemics or pandemics, labor disputes, loss of single source or limited source supplier, inability to procure sufficient raw materials, quality control issues, ethical sourcing issues, a supplier's financial distress, natural disasters, looting, vandalism or acts of war or terrorism, trade sanctions or other external factors over which we have no control, could interrupt product supply and, if not effectively managed and remedied, have a material adverse impact on our business operations, financial condition and results of operations.

Current wording

We use a wide range of raw materials and components in our manufacturing operations that come from numerous suppliers. While we believe that sources of supply for raw materials and components are generally adequate, it is difficult to predict what effects of extended lead times or shortages may have in the future. In addition, some of the raw materials and components may be available only from limited or single source suppliers. If a single source or limited source supplier were to cease or interrupt production for any reason or otherwise fail to supply those raw materials or components to us on favorable purchase terms, including at favorable prices, in sufficient quantities and with adequate lead times needed for efficient manufacturing, our ability to meet customer commitments, and satisfy market demands for affected products could be negatively affected. The disruption of our global supply chain for any reason, including for issues such as COVID-19 or other health epidemics or pandemics, labor disputes, loss of single source or limited source supplier, inability to procure sufficient raw materials, quality control issues, ethical sourcing issues, discontinuity or disruption in our internal information and data systems or those of our suppliers, cybersecurity incidents including but not limited to ransomware attacks, misuse of artificial intelligence and machine learning technologies, a supplier's financial distress, natural disasters, looting, vandalism or acts of war or terrorism, trade sanctions or other external factors over which we have no control, could interrupt product supply and, if not effectively managed and remedied, have a material adverse impact on our business operations, financial condition and results of operations.

Previous wording

Our businesses' domestic and international sales and operations must comply with a wide variety of laws, regulations and policies (including environmental, employment and health and safety regulations, data security laws, data privacy laws, export/import laws, tax policies such as export subsidy programs and research and experimentation credits, carbon emission regulations, energy efficiency and design regulations and other similar programs). These laws, regulations and policies are complex, change frequently, have tended to become more stringent over time and may be inconsistent across jurisdictions. Failure to comply (or any alleged or perceived failure to comply) with any of the foregoing could result in civil and criminal, monetary and non-monetary penalties as well as potential damage to our reputation and disruption to our business. We cannot provide assurance that our costs of complying with new and evolving regulatory reporting requirements and current or future laws will not exceed our estimates. Any of these factors could adversely affect customer demand, our relationships with customers and suppliers, and our business and financial position.

Current wording

Our businesses' domestic and international sales and operations must comply with a wide variety of laws, regulations and policies (including environmental, employment and health and safety regulations, data security laws, data privacy laws, export/import laws, tax policies such as export subsidy programs and research and experimentation credits, sustainability regulations, energy efficiency and design regulations and other similar programs). These laws, regulations and policies are complex, change frequently, have tended to become more stringent over time and may be inconsistent across jurisdictions. Failure to comply (or any alleged or perceived failure to comply) with any of the foregoing could result in civil and criminal, monetary and non-monetary penalties as well as potential damage to our reputation and disruption to our business. We cannot provide assurance that our costs of complying with new and evolving regulatory reporting requirements and current or future laws will not exceed our estimates. Any of these factors could adversely affect customer demand, our relationships with customers and suppliers, and our business and financial position.