CISCO SYSTEMS, INC.
For the period ended Jul 26, 2025. Filed Sep 3, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Sep 3, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2024-07-27; filed 2024-09-05.
0000858877-24-000017
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2025-07-26; filed 2025-09-03.
0000858877-25-000111
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 147 previous paragraphs and 147 current paragraphs.
114 unchanged; 33 reworded; 0 added; 0 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 1 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Reworded paragraphs (33)
Previous wording
•The introduction and market acceptance of new technologies and products, and our success in new and evolving markets, and in emerging technologies, as well as the adoption of new standards
Current wording
•The introduction and market acceptance of new technologies and products, and our success in new and evolving markets, and in emerging technologies, including AI, as well as the adoption of new standards
Previous wording
•The ability of our customers, channel partners, contract manufacturers and suppliers to obtain financing or to fund capital expenditures, especially during a period of global credit market disruption or in the event of customer, channel partner, contract manufacturer or supplier financial problems
Current wording
•The ability of our direct sale customers, channel partners, contract manufacturers and suppliers to obtain financing or to fund capital expenditures, especially in the event of direct sale customers, channel partner, contract manufacturer or supplier financial problems
Previous wording
Challenging economic conditions, including rising inflation, or other changes, worldwide have from time to time contributed, and may continue to contribute, to slowdowns in the communications and networking industries at large, as well as in specific segments and markets in which we operate, resulting in: reduced demand for our products as a result of continued constraints on IT-related capital spending by our customers, particularly service provider and cloud as well as enterprise and other customer markets; increased price competition for our products, not only from our competitors but also as a consequence of customers disposing of unutilized products; risk of excess and obsolete inventories; risk of supply constraints; risk of excess facilities and manufacturing capacity; and higher overhead costs as a percentage of revenue and higher interest expense.
Current wording
Challenging global economic conditions, including tariffs or other trade barriers, rising inflation, or other changes, have from time to time contributed, and may continue to contribute, to slowdowns in the communications and networking industries at large, as well as in specific segments and markets in which we operate, resulting in: reduced demand for our products as a result of continued constraints on IT-related capital spending by our customers, particularly service provider and cloud as well as enterprise and other customer markets; increased price competition for our products, not only from our competitors but also as a consequence of customers disposing of unutilized products; risk of excess and obsolete inventories; risk of supply constraints; risk of excess facilities and manufacturing capacity; and higher overhead costs as a percentage of revenue and higher interest expense.
Previous wording
The global macroeconomic environment can be challenging and inconsistent. In certain prior periods, we have seen a broad-based weakening in the global macroeconomic environment which has impacted and could impact in the future certain of our markets. Additionally, instability in the global credit markets, the impact of uncertainty regarding global central bank monetary policy, the instability in the geopolitical environment in many parts of the world (including as a result of the on-going Russia and Ukraine war, the Israel-Hamas war, and China-Taiwan relations), the current economic challenges in China, including global economic ramifications of Chinese economic difficulties, and other disruptions may continue to put pressure on global economic conditions. If global economic and market conditions, or economic conditions in key markets, were to deteriorate, we may experience material harm to our business, operating results, and financial condition.
Current wording
The global macroeconomic environment can be challenging and uncertain. For example, the impact of uncertainty regarding global central bank monetary policy, the instability in the geopolitical environment in many parts of the world (including as a result of the on-going Russia and Ukraine war, Middle East conflicts and wars, and China-Taiwan relations), and other disruptions may continue to put pressure on global economic conditions. If global economic and market conditions were to deteriorate, we may experience material harm to our business, operating results, and financial condition.
Previous wording
Our operating results in one or more segments may also be affected by uncertain or changing economic conditions particularly germane to that segment or to particular customer markets within that segment. In addition, reports of certain intelligence gathering methods of the U.S. government could affect customers’ perception of the products of IT companies which design and manufacture products in the United States. Trust and confidence in us as an IT supplier are critical to the development and growth of our markets. Impairment of that trust, or foreign regulatory actions taken in response to reports of certain intelligence gathering methods of the U.S. government, could affect the demand for our products from customers outside of the United States and could have a negative impact on our operating results.
Current wording
Our operating results in one or more segments may also be affected by uncertain or changing economic conditions particularly germane to that segment or to particular customer markets within that segment. In addition, previous reports of certain intelligence gathering methods of the U.S. government could affect customers’ perception of the products of IT companies which design and manufacture products in the United States.
Previous wording
As a result of a variety of factors discussed in this report, our revenue for a particular quarter is difficult to predict, which can be exacerbated during periods when the global macroenvironment is challenging and inconsistent and can result in market uncertainty. Our revenue may grow at a slower rate than in past periods, or decline as it did in fiscal 2024 and certain prior periods on a year-over-year basis. Our ability to meet financial expectations could also be negatively impacted if the nonlinear sales pattern seen in some of our past quarters recurs in future periods. During the first nine months of fiscal 2024, we experienced a decline in product demand resulting in a decrease of revenue as customers continued to scrutinize spend as they needed additional time to implement elevated levels of product shipments received in prior quarters. We have also experienced periods of time during which shipments have exceeded net bookings or manufacturing issues have delayed shipments, leading to nonlinearity in shipping patterns. In addition to making it difficult to predict revenue for a particular period, nonlinearity in shipping can increase costs, because irregular shipment patterns result in periods of underutilized capacity and periods in which overtime expenses may be incurred, as well as in potential additional inventory management-related costs. In addition, to the extent that manufacturing issues and any related component shortages result in delayed shipments in the future, and particularly in periods in which our contract manufacturers are operating at higher levels of capacity, it is possible that revenue for a quarter could be negatively impacted if such matters occur and are not remediated within the same quarter.
Current wording
As a result of a variety of factors discussed in this report, our revenue for a particular quarter is difficult to predict, which can be exacerbated during periods when the global macroenvironment is challenging and can result in market uncertainty. Our revenue may grow at a slower rate than in past periods, or decline as it did in certain prior periods on a year-over-year basis. Our ability to meet financial expectations could also be negatively impacted if the nonlinear sales pattern seen in some of our past quarters recurs in future periods. We have also experienced periods of time during which shipments have exceeded net bookings or manufacturing issues have delayed shipments, leading to nonlinearity in shipping patterns. In addition to making it difficult to predict revenue for a particular period, nonlinearity in shipping can increase costs, because irregular shipment patterns result in periods of underutilized capacity and periods in which overtime expenses may be incurred, as well as in potential additional inventory management-related costs. In addition, to the extent that manufacturing issues and any related component shortages result in delayed shipments in the future, and particularly in periods in which our contract manufacturers are operating at higher levels of capacity, it is possible that revenue for a quarter could be negatively impacted if such matters occur and are not remediated within the same quarter.
Previous wording
A reduction or interruption in supply, including disruptions on our global supply chain, caused in part by public health emergencies, geopolitical tensions (including as a result of China-Taiwan relations) or a significant natural disaster (including as a result of climate change); a significant increase in the price of one or more components (including as a result of inflation); a failure to adequately authorize procurement of inventory by our contract manufacturers; a failure to appropriately cancel, reschedule, or adjust our requirements based on our business needs; or a decrease in demand for our products could materially harm our business, operating results, and financial condition and could materially damage customer relationships. Furthermore, as a result of binding price or purchase commitments with suppliers, we may be obligated to purchase components at prices that are higher than those available in the current market. In the event that we become committed to purchase components at prices in excess of the current market price when the components are actually used, our gross margins could decrease. In addition, vendors may be under pressure to allocate product to certain customers for business, regulatory or political reasons, and/or demand changes in agreed pricing as a condition of supply. Although we have generally secured additional supply or taken other mitigation actions when significant disruptions have occurred, if similar situations occur in the future, they could materially harm our business, results of operations, and financial condition.
Current wording
A reduction or interruption in supply, including disruptions on our global supply chain, caused in part by public health emergencies, geopolitical tensions (including as a result of China-Taiwan relations, increasing tariffs or any other trade tensions) or a significant natural disaster (including as a result of climate change); a significant increase in the price of one or more components (including as a result of inflation); a failure to adequately authorize procurement of inventory by our contract manufacturers; a failure by suppliers to deliver on our contracts; a failure to appropriately cancel, reschedule, or adjust our requirements based on our business needs; or a decrease in demand for our products could materially harm our business, operating results, and financial condition and could materially damage customer relationships. Furthermore, as a result of binding price or purchase commitments with suppliers, we may be obligated to purchase components at prices that are higher than those available in the current market. In the event that we become committed to purchase components at prices in excess of the current market price when the components are actually used, our gross margins could decrease. In addition, vendors may be under pressure to allocate product to certain customers for business, regulatory or political reasons, and/or demand changes in agreed pricing as a condition of supply. Although we have generally secured additional supply or taken other mitigation actions when significant disruptions have occurred, if similar situations occur in the future, they could materially harm our business, results of operations, and financial condition.
Previous wording
Our growth and ability to meet customer demands depend in part on our ability to obtain timely deliveries of parts from our suppliers and contract manufacturers. We have experienced component shortages in the past, including shortages caused by manufacturing process issues, that have affected our operations, including longer than normal lead times. For example, in recent periods, there was a market shortage of semiconductor and other component supply which affected lead times, the cost of that supply, and our ability to meet customer demand for our products. Additionally, we may in the future experience a shortage of certain component parts as a result of our own manufacturing issues, manufacturing issues at our suppliers or contract manufacturers, capacity problems experienced by our suppliers or contract manufacturers including capacity or cost problems resulting from industry consolidation, or strong demand for those parts. Growth in the economy is likely to create greater pressures on us and our suppliers to accurately project overall component demand and component demands within specific product categories and to establish optimal component levels and manufacturing capacity, especially for labor-intensive components, components for which we purchase a substantial portion of the supply, or the re-ramping of manufacturing capacity for highly complex products. During periods of shortages or delays the price of components may increase, or the components may not be available at all, and we may also encounter shortages if we do not accurately anticipate our needs. We may not be able to secure enough components at reasonable prices or of acceptable quality to build new products in a timely manner in the quantities or configurations needed. Accordingly, our revenue and gross margins could suffer until other sources can be developed.
Current wording
Our growth and ability to meet customer demands depend in part on our ability to obtain timely deliveries of parts from our suppliers and contract manufacturers. We have experienced component shortages in the past, including shortages caused by manufacturing process issues, that have affected our operations, including longer than normal lead times. Additionally, we may in the future experience a shortage of certain component parts as a result of our own manufacturing issues, manufacturing issues at our suppliers or contract manufacturers, capacity problems experienced by our suppliers or contract manufacturers including capacity or cost problems resulting from industry consolidation, or strong demand for those parts. Growth in the economy is likely to create greater pressures on us and our suppliers to accurately project component demand and to establish optimal component levels and manufacturing capacity, especially for labor-intensive components, components for which we purchase a substantial portion of the supply, or the re-ramping of manufacturing capacity for highly complex products. During periods of shortages or delays the price of components may increase, or the components may not be available at all, and we may also encounter shortages if we do not accurately anticipate our needs. We may not be able to secure enough components at reasonable prices or of acceptable quality to build new products in a timely manner in the quantities or configurations needed. Accordingly, our revenue and gross margins could suffer until other sources can be developed.
Previous wording
Manufacturing capacity and component supply constraints could continue to be significant issues for us. We purchase components from a variety of suppliers and use several contract manufacturers to provide manufacturing services for our products. During the normal course of business, in order to improve manufacturing lead-time performance and to help ensure adequate component supply, we enter into agreements with contract manufacturers and suppliers that either allow them to procure inventory based upon criteria as defined by us or that establish the parameters defining our requirements. In certain instances, these agreements allow us the option to cancel, reschedule, and adjust our requirements based on our business needs prior to firm orders being placed. When facing component supply-related challenges we have increased our efforts in procuring components in order to meet customer expectations, which in turn contributes to an increase in inventory and purchase commitments. In past periods, we increased our inventory and purchase commitments in light of the supply constraints seen industry-wide due to component shortages. These increases in our inventory and purchase commitments to shorten lead times could also lead to potential material excess and obsolete inventory charges or other negative impacts to our product gross margin in future periods if we fail to anticipate customer demand properly and product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are unable to continue to mitigate the remaining supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated. For additional information and a further discussion of impacts and risks related to our inventory commitments and our purchase commitments with contract manufacturers and suppliers, see “Results of Operations—Product Gross Margin—Supply Chain Impacts and Risks” and, “Liquidity and Capital Resources—Inventory Supply Chain” under Item 7 and Note 14 to the Consolidated Financial Statements of this report.
Current wording
Manufacturing capacity and component supply constraints could be significant issues for us as they have been in certain prior periods. We purchase components from a variety of suppliers and use several contract manufacturers to provide manufacturing services for our products. During the normal course of business, in order to improve manufacturing lead-time performance and to help ensure adequate component supply, we enter into agreements with contract manufacturers and suppliers that either allow them to procure inventory based upon criteria as defined by us or that establish the parameters defining our requirements. In certain instances, these agreements allow us the option to cancel, reschedule, and adjust our requirements based on our business needs prior to firm orders being placed. When facing component supply-related challenges, we have increased our efforts in procuring components in order to meet customer expectations, such as we have done in past periods due to supply constraints, which in turn contributes to an increase in inventory and purchase commitments. In fiscal 2025, we entered into additional purchase commitments with contract manufacturers and suppliers related to manufacturing Cisco Silicon One and other products to meet demand from webscale and other customers. We expect to continue entering into these additional purchase commitments in fiscal 2026. These past efforts and additional purchase commitments significantly increased our supply chain exposure, which resulted in negative impacts to our product gross margin in recent periods and may result in further negative impacts in future periods. On August 26, 2025, we settled a legal dispute with a supplier relating to purchase obligations arising under long-term supply arrangements, which resulted in a charge to product cost of sales, which is described in Note 21 to the Consolidated Financial Statements. The remaining and new supply chain exposures include potential material excess and obsolete or other charges if product demand significantly decreases for a sustained duration, we are unable to generate demand for certain products planned for development, or we are otherwise unable to mitigate these supply chain exposures. Product demand conditions for future periods can be difficult to predict or may persist longer than anticipated.
Previous wording
Although our product gross margin increased in fiscal 2024, our level of product gross margins have declined in certain prior periods, and could decline in future periods due to adverse impacts from various factors, including:
Current wording
Although our product gross margin increased in fiscal 2025, our level of product gross margins has declined in certain prior periods, and could decline in future periods due to adverse impacts from various factors, including:
Previous wording
Sales to the service provider and cloud market have been characterized by large and sporadic purchases, especially relating to our router sales and sales of certain other Networking and Collaboration products, in addition to longer sales cycles. Service provider and cloud product orders significantly decreased during fiscal 2024 and we have experienced similar declines in certain prior periods. Product orders from the service provider and cloud market could continue to decline and, as has been the case in the past, such weakness could persist over extended periods of time given fluctuating market conditions. Products in the service provider and cloud market could also face a high degree of customer concentration, with bespoke product designs and features that would be difficult to sell to alternate customers should the primary customer reduce its product orders with Cisco. Sales activity in this industry depends upon the stage of completion of expanding network infrastructures; the availability of funding; and the extent to which service provider and cloud customers are affected by regulatory, economic, and business conditions in the country of operations. Weakness in orders from this industry, including as a result of any slowdown in capital expenditures by service providers (which may be more prevalent during a global economic downturn, or periods of economic, political or regulatory uncertainty), could materially harm our business, operating results, and financial condition. Such slowdowns may continue or recur in future periods. Orders from this industry could decline for many reasons other than the competitiveness of our products and services within their respective markets. For example, in the past, many of our service provider and cloud customers have been negatively impacted by slowdowns in the general economy, by overcapacity, by changes in the service provider and cloud market, by regulatory developments, and by constraints on capital availability, resulting in business failures and substantial reductions in spending and expansion plans. These conditions have negatively impacted our business and operating results in the past, and could materially harm our business and operating results in any future period. Finally, service provider and cloud customers typically have longer implementation cycles; require a broader range of services, including design services; demand that vendors take on a larger share of risks; often require acceptance provisions, which can lead to a delay in revenue recognition; and expect financing from vendors. All these factors can add further risk to business conducted with service providers.
Current wording
Sales to the service provider and cloud market have been characterized by large and sporadic purchases, especially relating to our router sales and sales of certain other Networking and Collaboration products, in addition to longer sales cycles. Although service provider and cloud product orders increased during fiscal 2025, service provider and cloud market product orders decreased in fiscal 2024, and at various times in the past we have experienced significant weakness in product orders from the service provider and cloud market. Product orders from the service provider and cloud market could decline in the future and, as has been the case in the past, such weakness could persist over extended periods of time given fluctuating market conditions. Products in the service provider and cloud market could also face a high degree of customer concentration, with bespoke product designs and features that would be difficult to sell to alternate customers should the primary customer reduce its product orders with Cisco. Sales activity in this industry depends upon the stage of completion of expanding network infrastructures; the availability of funding; and the extent to which service provider and cloud customers are affected by regulatory, economic, and business conditions in the country of operations. Weakness in orders from this industry, including as a result of any slowdown in capital expenditures by service providers (which may be more prevalent during a global economic downturn, or periods of economic, political or regulatory uncertainty), could materially harm our business, operating results, and financial condition. Such slowdowns may continue or recur in future periods. Orders from this industry could decline for many reasons other than the competitiveness of our products and services within their respective markets. For example, in the past, many of our service provider and cloud customers have been negatively impacted by slowdowns in the general economy, by overcapacity, by changes in the service provider and cloud market, by regulatory developments, and by constraints on capital availability, resulting in business failures and substantial reductions in spending and expansion plans. These conditions have negatively impacted our business and operating results in the past, and could materially harm our business and operating results in any future period. Finally, service provider and cloud customers typically have longer implementation cycles; require a broader range of services, including design services; demand that vendors take on a larger share of risks; often require acceptance provisions, which can lead to a delay in revenue recognition; and expect financing from vendors. All these factors can add further risk to business conducted with service providers.
Previous wording
If we fail to manage distribution of our products and services properly, or if our distributors’ financial condition or operations weaken, our revenue and gross margins could be negatively impacted. A substantial portion of our products and services is sold through our channel partners, and the remainder is sold through direct sales. Our channel partners include systems integrators, service providers, other third-party resellers, and distributors. Systems integrators and service providers typically sell directly to end users and often provide system installation, technical support, professional services, and other support services in addition to network equipment sales. Systems integrators also typically integrate our products into an overall solution, and a number of service providers are also systems integrators. Distributors stock inventory and typically sell to systems integrators, service providers, and other third-party resellers. We refer to sales through distributors as our two-tier system of sales to the end customer. If sales through indirect channels increase, this may lead to greater difficulty in forecasting the mix of our products and, to a degree, the timing of orders from our customers.
Current wording
If we fail to manage distribution of our products and services properly, or if our distributors’ financial condition or operations weaken, our revenue and gross margins could be negatively impacted. A substantial portion of our products and services is sold through our channel partners, and the remainder is sold through direct sales. Our channel partners include systems integrators, service providers, other third-party resellers, and distributors. Systems integrators and service providers typically sell directly to end users and often provide system installation, technical support, professional services, and other support services in addition to network equipment sales. Systems integrators also typically integrate our products into an overall solution, and a number of service providers are also systems integrators. Distributors stock inventory and typically sell to systems integrators, service providers, and other third-party resellers. We refer to sales through distributors as our two-tier system of sales to the end user. If sales through indirect channels increase, this may lead to greater difficulty in forecasting the mix of our products and, to a degree, the timing of orders from our customers.
Previous wording
Some of our competitors compete across many of our product lines, while others are primarily focused in a specific product area. Barriers to entry are relatively low, and new ventures to create products that do or could compete with our products are regularly formed. In addition, some of our competitors may have greater resources, including technical and engineering resources, than we do. As we expand into new markets, we will face competition not only from our existing competitors but also from other competitors, including existing companies with strong technological, marketing, and sales positions in those markets. We also sometimes face competition from resellers and distributors of our products. Companies with which we have strategic alliances in some areas may be competitors in other areas, and this trend may increase. For example, the enterprise data center is undergoing a fundamental transformation arising from the convergence of technologies, including computing, networking, storage, and software, that previously were segregated. Due to several factors, including the availability of highly scalable and general purpose microprocessors, ASICs offering advanced services, standards based protocols, cloud computing and virtualization, the convergence of technologies within the enterprise data center is spanning multiple, previously independent, technology segments. Also, some of our current and potential competitors for enterprise data center business have made acquisitions, or announced new strategic alliances, designed to position them to provide end-to-end technology solutions for the enterprise data center. As a result of all of these developments, we face greater competition in the development and sale of enterprise data center technologies, including competition from entities that are among our long-term strategic alliance partners. Companies that are strategic alliance partners in some areas of our business may acquire or form alliances with our competitors, thereby reducing their business with us.
Current wording
Some of our competitors compete across many of our product lines, while others are primarily focused in a specific product area. Barriers to entry are relatively low, and new ventures to create products that do or could compete with our products are regularly formed. In addition, some of our competitors may have greater resources, including technical and engineering resources, than we do. As we expand into new markets, we will face competition not only from our existing competitors but also from other competitors, including existing companies with strong technological, marketing, and sales positions in those markets. We also sometimes face competition from resellers and distributors of our products. Companies with which we have strategic alliances in some areas may be competitors in other areas, and this trend may increase. For example, the enterprise data center is undergoing a fundamental transformation arising from the convergence of technologies, including computing, networking, storage, and software, that previously were segregated. Due to several factors, including the availability of highly scalable and general purpose microprocessors, application specific integrated circuits offering advanced services, standards based protocols, cloud computing and virtualization, the convergence of technologies within the enterprise data center is spanning multiple, previously independent, technology segments. Also, some of our current and potential competitors for enterprise data center business have made acquisitions, or announced new strategic alliances, designed to position them to provide end-to-end technology solutions for the enterprise data center. As a result of all of these developments, we face greater competition in the development and sale of enterprise data center technologies, including competition from entities that are among our long-term strategic alliance partners. Companies that are strategic alliance partners in some areas of our business may acquire or form alliances with our competitors, thereby reducing their business with us.
Previous wording
We must manage inventory relating to sales to our distributors effectively, because inventory held by them could affect our results of operations. Our distributors may increase orders during periods of product shortages, cancel orders if their inventory is too high, or delay orders in anticipation of new products. They also may adjust their orders in response to the supply of our products and the products of our competitors that are available to them, and in response to seasonal fluctuations in end-user demand. Our distributors are generally given business terms that allow them to return a portion of inventory, receive credits for changes in selling price, and participate in various cooperative marketing programs. Inventory management remains an area of focus as we balance the need to maintain strategic inventory levels to ensure competitive lead times against the risk of inventory obsolescence because of rapidly changing technology and customer requirements. When facing component supply-related challenges, we have increased our efforts in procuring components in order to meet customer expectations. If we ultimately determine that we have excess inventory, we may have to reduce our prices and write down inventory, which in turn could result in lower gross margins.
Current wording
We must manage inventory relating to sales to our distributors effectively, because inventory held by them could affect our results of operations. Our distributors may increase orders during periods of product shortages, cancel orders if their inventory is too high, or delay orders in anticipation of new products. They also may adjust their orders in response to the supply of our products and the products of our competitors that are available to them, and in response to seasonal fluctuations in end-user demand. Our distributors are generally given business terms that allow them to return a portion of inventory, receive credits for changes in selling price, and participate in various cooperative marketing programs. Inventory management remains an area of focus as we balance the need to maintain strategic inventory levels to ensure competitive lead times against the risk of inventory obsolescence because of rapidly changing technology and customer requirements. When facing component supply-related challenges, we have in the past and may in the future increase our efforts in procuring components or enter additional purchase commitments with contract manufacturers and suppliers in order to meet customer expectations. If we ultimately determine that we have excess inventory, we may have to reduce our prices and write down inventory, which in turn could result in lower gross margins.
Previous wording
Issues related to the development and use of artificial intelligence (AI) could give rise to legal and/or regulatory action, damage our reputation or otherwise materially harm of our business.
Current wording
Issues related to the development and use of artificial intelligence (AI) could give rise to legal and/or regulatory action, damage our reputation or otherwise materially harm our business.
Previous wording
We currently incorporate AI technology in certain of our products and services and in our business operations. Our research and development of such technology remains ongoing. AI presents risks and challenges and may result in unintended consequences that could affect its further development or our and our customers’ adoption and use of this technology. AI algorithms and training methodologies may be flawed. Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. Leveraging AI capabilities to potentially improve our internal functions and operations also presents further risks, costs, and challenges. While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues presented by its use, we may be unsuccessful in identifying or resolving issues before they arise. The AI-related legal and regulatory landscape remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings. AI-related issues, deficiencies and/or failures could also give rise to legal and/or regulatory action, including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new applications of existing data protection, privacy, intellectual property, and other laws; damage our reputation; or otherwise materially harm our business.
Current wording
We currently incorporate AI technology in certain of our commercial offerings and in our business operations. Our research and development of AI technology remains ongoing. AI presents risks and challenges and may result in unintended consequences, including inadvertent disclosure or misuse of intellectual property, confidential, personal, and/or competitive information, that could affect our reputation, our further AI development or our and our customers’ adoption and use of this technology. AI algorithms and training methodologies may be flawed. Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. Leveraging AI capabilities to potentially improve our internal functions and operations also presents risks, costs, and challenges. While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues and risks presented by its use, we may be unsuccessful in identifying or resolving issues and risks before they arise. The AI-related legal and regulatory landscape is constantly evolving and therefore remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings. AI-related issues, deficiencies and/or failures could also give rise to legal and/or regulatory action (including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new and different applications of existing and new data protection, privacy, intellectual property, and other laws); damage our reputation; or otherwise materially harm our business.
Previous wording
The process of developing new technology, including more programmable, flexible and virtual networks, and technology related to other market transitions— such as artificial intelligence, security, observability, and cloud— is complex and uncertain, and if we fail to accurately predict customers’ changing needs and emerging technological trends our business could be harmed. We must commit significant resources, including the investments we have been making in our strategic priorities to developing new products and services before knowing whether our investments will result in products and services the market will accept. In particular, if our model of the evolution of networking, security, or observability does not emerge as we believe it will, or these industries do not evolve as we believe they will, or if our strategy for addressing this evolution is not successful, many of our strategic initiatives and investments may be of no or limited value. For example, if we do not introduce products related to these markets in a timely fashion, or if product offerings in this market that ultimately succeed are based on technology, or an approach to technology, that differs from ours, our business could be harmed. Similarly, our business could be harmed if we fail to develop, or fail to develop in a timely fashion, offerings to address other transitions, or if the offerings addressing these other transitions that ultimately succeed are based on technology, or an approach to technology, different from ours. In addition, our business could be negatively impacted in periods surrounding our new product introductions if customers delay purchasing decisions to qualify or otherwise evaluate the new product offerings. We have also been seeking to meet the evolving needs of customers which include offering our products and solutions in the manner in which customers wish to consume them. As a part of these efforts, we continue to make changes to how we are organized and how we build and deliver our technology, including changes in our business models with customers. If our strategy for addressing our customer needs, or the architectures and solutions we develop do not meet those needs, or the changes we are making in how we are organized and how we build and deliver or technology is incorrect or ineffective, our business could be harmed.
Current wording
The process of developing new technology, including more programmable, flexible and virtual networks, and technology related to other market transitions— such as AI, security, observability, and cloud— is complex and uncertain, and if we fail to accurately predict customers’ changing needs and emerging technological trends our business could be harmed. We must commit significant resources, including the investments we have been making in our strategic priorities to developing new products and services before knowing whether our investments will result in products and services the market will accept. In particular, if our model of the evolution of networking, security, or observability does not emerge as we believe it will, or these industries do not evolve as we believe they will, or if our strategy for addressing this evolution is not successful, many of our strategic initiatives and investments may be of no or limited value. For example, if we do not timely introduce products related to these markets, or if such products or offerings that ultimately succeed in these markets are based on technology, or an approach to technology, that differs from ours, our business could be harmed. In addition, our business could be negatively impacted in periods surrounding our new product introductions if customers delay purchasing decisions to qualify or otherwise evaluate the new product offerings. We have also been seeking to meet the evolving needs of customers which include offering our products and solutions in the manner in which customers wish to consume them. As a part of these efforts, we continue to make changes to how we are organized and how we build and deliver our technology, including changes in our business models with customers. If our strategy for addressing our customer needs, or the architectures and solutions we develop do not meet those needs, or the changes we are making in how we are organized and how we build and deliver or technology is incorrect or ineffective, our business could be harmed.
Previous wording
Adverse resolution of litigation or governmental investigations may harm our operating results or financial condition.
Current wording
Adverse resolution of claims, litigation or governmental investigations may harm our operating results or financial condition.
Previous wording
We are a party to lawsuits in the normal course of our business. Any litigation can be costly, lengthy, and disruptive to normal business operations. Moreover, the results of complex legal proceedings are difficult to predict. An unfavorable resolution of lawsuits or governmental investigations could materially harm our business, operating results, or financial condition. For additional information regarding certain of the matters in which we are involved, see Note 14 to the Consolidated Financial Statements, subsection (f) “Legal Proceedings.”
Current wording
We are a party to a variety of claims, litigation and governmental investigations in the normal course of our business. Claims, litigation and governmental investigations may arise from a wide variety of business practices and initiatives, including major new product releases, significant business transactions, warranty or product claims, employment practices, and regulation. Any claim, litigation or governmental investigation can be costly, lengthy, and disruptive to normal business operations. For example, on August 26, 2025, we settled a legal dispute with a supplier relating to purchase obligations arising under long-term supply arrangements, which resulted in a charge to product cost of sales, which is described in Note 21 to the Consolidated Financial Statements. Moreover, the results of complex legal proceedings are difficult to predict, and management's view of these matters may change in the future. An unfavorable resolution of claims, litigation or governmental investigations could materially harm our business, operating results, or financial condition. For additional information regarding certain of the matters in which we are involved, see Note 14 to the Consolidated Financial Statements, subsection (f) “Legal Proceedings.”
Previous wording
Our provision for income taxes is subject to volatility and could be negatively impacted by earnings being lower than anticipated in countries that have lower tax rates and higher than anticipated in countries that have higher tax rates; by changes in the valuation of our deferred tax assets and liabilities; by changes to foreign-derived intangible income, global intangible low-tax income and base erosion and anti-abuse tax, research and development capitalization and amortization, and corporate alternative minimum tax laws, regulations, or interpretations thereof; by expiration of or lapses in tax incentives; by transfer pricing adjustments, including the effect of acquisitions on our legal structure; by tax effects of nondeductible compensation; by tax costs related to intercompany realignments; by changes in accounting principles; or by changes in tax laws and regulations, treaties, or interpretations thereof, including changes to the taxation of earnings of our foreign subsidiaries, the deductibility of expenses attributable to foreign income, and the foreign tax credit rules. Significant judgment is required to determine the recognition and measurement attribute prescribed in the accounting guidance for uncertainty in income taxes. The Organisation for Economic Co-operation and Development (OECD), an international association comprised of 38 countries, including the United States, has made changes, including a Pillar Two framework that imposes a minimum tax rate of 15% in each taxing jurisdiction, and is contemplating additional changes to numerous long-standing tax principles. There can be no assurance that these changes and any contemplated changes if finalized, once adopted by countries, will not have an adverse impact on our provision for income taxes. Further, as a result of certain of our ongoing employment and capital investment actions and commitments, our income in certain countries was subject to reduced tax rates. Our failure to meet these commitments could adversely impact our provision for income taxes. In addition, we are subject to the continuous examination of our income tax returns by the Internal Revenue Service (IRS) and other tax authorities. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes. There can be no assurance that the outcomes from these continuous examinations will not have an adverse effect on our operating results and financial condition.
Current wording
Our provision for income taxes is subject to volatility and could be negatively impacted by earnings being lower than anticipated in countries that have lower tax rates and higher than anticipated in countries that have higher tax rates; by changes in the valuation of our deferred tax assets and liabilities; by changes to foreign-derived intangible income, global intangible low-tax income and base erosion and anti-abuse tax, research and development capitalization and amortization, and corporate alternative minimum tax laws, regulations, or interpretations thereof; by expiration of or lapses in tax incentives; by transfer pricing adjustments, including the effect of acquisitions on our legal structure; by tax effects of nondeductible compensation; by tax costs related to intercompany realignments; by changes in accounting principles; or by changes in tax laws and regulations, treaties, or interpretations thereof, including changes to the taxation of earnings of our foreign subsidiaries, the deductibility of expenses attributable to foreign income, and the foreign tax credit rules. Significant judgment is required to determine the recognition and measurement attribute prescribed in the accounting guidance for uncertainty in income taxes. The Organisation for Economic Co-operation and Development (OECD), an international association comprised of 38 countries, including the United States, has made changes, including a Pillar Two framework that imposes a minimum tax rate of 15% in each taxing jurisdiction, and is contemplating additional changes to numerous long-standing tax principles. There can be no assurance that these changes and any contemplated changes if finalized, once adopted by countries, will not have an adverse impact on our provision for income taxes. Further, as a result of certain of our ongoing employment and capital investment actions and commitments, our income in certain countries was subject to reduced tax rates. Our failure to meet these commitments could adversely impact our provision for income taxes. In addition, we are subject to the continuous examination of our income tax returns by the Internal Revenue Service and other tax authorities. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes. There can be no assurance that the outcomes from these continuous examinations will not have an adverse effect on our operating results and financial condition.
Previous wording
The continued threat of terrorism and heightened security and military action in response thereto, or any other current or future acts of terrorism, war (such as the on-going Russia-Ukraine war and the Israel-Hamas war), and other events (such as economic sanctions, trade restrictions and reactions of the governments, markets and the general public, including the sanctions and restrictions related to the on-going Russia-Ukraine war) may cause further disruptions to the economies of the United States and other countries and create further uncertainties or could otherwise negatively impact our business, operating results, and financial condition. Likewise, events such as loss of infrastructure and utilities services such as energy, transportation, or telecommunications could have similar negative impacts. To the extent that such disruptions or uncertainties result in delays or cancellations of customer orders or the manufacture or shipment of our products, our business, operating results, and financial condition could be materially harmed.
Current wording
The continued threat of terrorism and heightened security and military action in response thereto, or any other current or future acts of terrorism, war (such as the on-going Russia-Ukraine war and Middle East conflicts and wars), and other events (such as economic sanctions, trade restrictions and reactions of the governments, markets and the general public, including the sanctions and restrictions related to the on-going Russia-Ukraine war) may cause further disruptions to the economies of the United States and other countries and create further uncertainties or could otherwise negatively impact our business, operating results, and financial condition. Likewise, events such as loss of infrastructure and utilities services such as energy, transportation, or telecommunications could have similar negative impacts. To the extent that such disruptions or uncertainties result in delays or cancellations of customer orders or the manufacture or shipment of our products, our business, operating results, and financial condition could be materially harmed.
Previous wording
As of the end of fiscal 2024, we have senior unsecured notes outstanding in an aggregate principal amount of $20.3 billion that mature at specific dates from calendar year 2025 through 2064. We have also established a commercial paper program under which we may issue short-term, unsecured commercial paper notes on a private placement basis up to a maximum aggregate amount outstanding at any time of $15.0 billion. We had $10.9 billion in commercial paper notes outstanding under this program as of July 27, 2024. There can be no assurance that our incurrence of this debt or any future debt, including any additional debt to refinance maturing debt, will be a better means of providing liquidity to us than would our use of our existing cash resources. Further, we cannot be assured that our maintenance of this indebtedness or incurrence of future indebtedness will not negatively impact our operating results or financial condition. In addition, changes by any rating agency to our credit rating can negatively impact the value and liquidity of both our debt and equity securities, as well as the terms upon which we may borrow under our commercial paper program or future debt issuances.
Current wording
As of the end of fiscal 2025, we have senior unsecured notes outstanding in an aggregate principal amount of $24.8 billion that mature at specific dates from calendar year 2026 through 2064. We have also established a commercial paper program under which we may issue short-term, unsecured commercial paper notes on a private placement basis up to a maximum aggregate amount outstanding at any time of $15.0 billion, and we had $3.5 billion in commercial paper notes outstanding under this program as of July 26, 2025. There can be no assurance that our incurrence of this debt or any future debt, including any additional debt to refinance maturing debt, will be a better means of providing liquidity to us than would our use of our existing cash resources. Further, we cannot be assured that our maintenance of this indebtedness or incurrence of future indebtedness will not negatively impact our operating results or financial condition. In addition, changes by any rating agency to our credit rating can negatively impact the value and liquidity of both our debt and equity securities, as well as the terms upon which we may borrow under our commercial paper program or future debt issuances.
Previous wording
Our reputation and/or business could be negatively impacted by ESG matters and/or our reporting of such matters.
Current wording
Our reputation and/or business could be negatively impacted by matters relating to environmental, social, and governance and/or our reporting of such matters.
Previous wording
There is an increasing focus from regulators, certain investors, and other stakeholders concerning environmental, social, and governance (“ESG”) matters, both in the United States and internationally. We communicate certain ESG-related initiatives, goals, and/or commitments regarding environmental matters, diversity and inclusion, responsible sourcing and social investments, and other matters, in our annual Purpose Report, on our website, in our filings with the SEC, and elsewhere. These initiatives, goals, or commitments involve risks and uncertainties and could be difficult to achieve and costly to implement. For example, in September 2021, we announced our goal to achieve net zero across all scopes of greenhouse gas emissions by 2040, the achievement of which relies, in large part, on the accuracy of our estimates and assumptions around the enhanced power efficiency of our products, the adoption of renewable energy at customer and supplier sites, and the adoption of certain of our products and services by our customers. We could fail to achieve, or be perceived to fail to achieve, our 2040 net zero goal or other ESG-related initiatives, goals, or commitments. In addition, we could be criticized for the timing, scope or nature of these initiatives, goals, or commitments, or for any revisions to them. To the extent that our required and voluntary disclosures about ESG matters increase, we could be criticized for the accuracy, adequacy, or completeness of such disclosures. Our actual or perceived failure to achieve our ESG-related initiatives, goals, or commitments could negatively impact our reputation or otherwise materially harm our business.
Current wording
We are subject to evolving and sometimes conflicting, laws, regulations, policies, and investor and other stakeholder expectations concerning environmental, social, and governance matters, such as environmental sustainability and climate change, both in the United States and internationally. Any initiatives, goals, or commitments we disclose in this regard involve risks and uncertainties and could be difficult to achieve and costly to implement. For example, in September 2021, we announced our goal to achieve net zero across all scopes of greenhouse gas emissions by 2040, the achievement of which relies, in large part, on the accuracy of our estimates and assumptions around the enhanced power efficiency of our products, the adoption of renewable energy at customer and supplier sites, and the adoption of certain of our products and services by our customers. We could fail to achieve, or be perceived to fail to achieve, our 2040 net zero goal or other initiatives, goals, or commitments. In addition, in a climate where there are changing and increasingly divergent views on where our focus should be on these matters, our initiatives, goals, or commitments, or any revisions to them, are often criticized and the accuracy, adequacy, or completeness of such disclosures challenged. Our actual or perceived failure to achieve our initiatives, goals, or commitments, or otherwise successfully manage investor or other stakeholder expectations on these matters, could negatively impact our reputation or otherwise harm our business.
Previous wording
We generally rely on patents, copyrights, trademarks, and trade secret laws to establish and maintain proprietary rights in our technology and products. Although we have been issued numerous patents and other patent applications are currently pending, there can be no assurance that any of these patents or other proprietary rights will not be challenged, invalidated, or circumvented or that our rights will, in fact, provide competitive advantages to us. Furthermore, many key aspects of networking technology are governed by industry-wide standards, which are usable by all market entrants. In addition, there can be no assurance that patents will be issued from pending applications or that claims allowed on any patents will be sufficiently broad to protect our technology. In addition, the laws of some foreign countries may not protect our proprietary rights to the same extent as do the laws of the United States. The outcome of any actions taken in these foreign countries may be different than if such actions were determined under the laws of the United States. Although we are not dependent on any individual patents or group of patents for particular segments of the business for which we compete, if we are unable to protect our proprietary rights to the totality of the features (including aspects of products protected other than by patent rights) in a market, we may find ourselves at a competitive disadvantage to others who need not incur the substantial expense, time, and effort required to create innovative products that have enabled us to be successful.
Current wording
We generally rely on patents, copyrights, trademarks, and trade secret laws to establish and maintain proprietary rights in our technology and products. Although we have been issued numerous patents and other patent applications are currently pending, there can be no assurance that any of these patents or other proprietary rights will not be challenged, invalidated, or circumvented or that our rights will, in fact, provide competitive advantages to us. Furthermore, many key aspects of our technology are governed by industry-wide standards, which are usable by all market entrants. In addition, there can be no assurance that patents will be issued from pending applications or that claims allowed on any patents will be sufficiently broad to protect our technology. Additionally, some U.S. governmental entities and courts have expressed a position that U.S. copyright and patent protection should be limited to protecting inventions and works of authorship created by humans. Therefore, U.S. copyright or patent protection for inventions or works developed in part or wholly by generative AI tools may be limited, or not available at all. In addition, the laws of some foreign countries may not protect our proprietary rights to the same extent as do the laws of the United States. The outcome of any actions taken in these foreign countries may be different than if such actions were determined under the laws of the United States. Although we are not dependent on any individual patents or group of patents for particular segments of the business in which we compete, if we are unable to protect our proprietary rights to the totality of the features (including aspects of products protected other than by patent rights) in a market, we may find ourselves at a competitive disadvantage to others who need not incur the substantial expense, time, and effort required to create innovative products that have enabled us to be successful.
Previous wording
Third parties, including customers, have in the past and may in the future assert claims or initiate litigation related to exclusive patent, copyright, trademark, and other intellectual property rights to technologies and related standards that are relevant to us. These assertions have increased over time as a result of our growth and the general increase in the pace of patent claims assertions, particularly in the United States. Because of the existence of a large number of patents in the networking field, the secrecy of some pending patents, and the rapid rate of issuance of new patents, it is not economically practical or even possible to determine in advance whether a product or any of its components infringes or will infringe on the patent rights of others. The asserted claims and/or initiated litigation can include claims against us or our manufacturers, suppliers, or customers, alleging infringement of their proprietary rights with respect to our existing or future products or components of those products. Regardless of the merit of these claims, they can be time-consuming, result in costly litigation and diversion of technical and management personnel, or require us to develop a non-infringing technology or enter into license agreements. Where claims are made by customers, resistance even to unmeritorious claims could damage customer relationships. There can be no assurance that licenses will be available on acceptable terms and conditions, if at all, or that our indemnification by our suppliers will be adequate to cover our costs if a claim were brought directly against us or our customers. Furthermore, because of the potential for high court awards that are not necessarily predictable, it is not unusual to find even arguably unmeritorious claims settled for significant amounts. If any infringement or other intellectual property claim made against us by any third party is successful, if we are required to indemnify a customer with respect to a claim against the customer, or if we fail to develop non-infringing technology or license the proprietary rights on commercially reasonable terms and conditions, our business, operating results, and financial condition could be materially harmed. For additional information regarding our indemnification obligations, see Note 14(e) to the Consolidated Financial Statements contained in this report. Our exposure to risks associated with the use of intellectual property may be increased as a result of acquisitions, as we have a lower level of visibility into the development process with respect to such technology or the care taken to safeguard against infringement risks. Further, in the past, third parties have made infringement and similar claims after we have acquired technology that had not been asserted prior to our acquisition.
Current wording
Third parties, including customers, have in the past and may in the future assert claims or initiate litigation related to exclusive patent, copyright, trademark, and other intellectual property rights to technologies and related standards that are relevant to us. These assertions have increased over time as a result of our growth and the general increase in the pace of patent claims assertions, particularly in the United States. Because of the existence of a large number of patents in the information technology field, the secrecy of some pending patents, and the rapid rate of issuance of new patents, it is not economically practical or even possible to determine in advance whether a product or any of its components infringes or will infringe on the patent rights of others. The asserted claims and/or initiated litigation can include claims against us or our manufacturers, suppliers, or customers, alleging infringement of their proprietary rights with respect to our existing or future products or components of those products. Regardless of the merit of these claims, they can be time-consuming, result in costly litigation and diversion of technical and management personnel, or require us to develop a non-infringing technology or enter into license agreements. Where claims are made by customers, resistance even to unmeritorious claims could damage customer relationships. There can be no assurance that licenses will be available on acceptable terms and conditions, if at all, or that our indemnification by our suppliers will be adequate to cover our costs if a claim were brought directly against us or our customers. Furthermore, because of the potential for high court awards, including injunctive relief, that are not necessarily predictable, it is not unusual to find even arguably unmeritorious claims settled for significant amounts. If any infringement or other intellectual property claim made against us by any third party is successful, if we are required to indemnify a customer with respect to a claim against the customer, or if we fail to develop non-infringing technology or license the proprietary rights on commercially reasonable terms and conditions, our business, operating results, and financial condition could be materially harmed. For additional information regarding our indemnification obligations, see Note 14(e) to the Consolidated Financial Statements contained in this report. Our exposure to risks associated with the use of intellectual property may be increased as a result of acquisitions, as we have a lower level of visibility into the development process with respect to such technology or the care taken to safeguard against infringement risks. Further, in the past, third parties have made infringement and similar claims after we have acquired technology that had not been asserted prior to our acquisition.
Previous wording
Many of our products are designed to include software or other intellectual property licensed from third parties. It may be necessary in the future to seek or renew licenses relating to various aspects of these products. There can be no assurance that the necessary licenses would be available on acceptable terms, if at all. The inability to obtain certain licenses or other rights or to obtain such licenses or rights on favorable terms, or the need to engage in litigation regarding these matters, could materially harm our business, operating results, and financial condition. Moreover, the inclusion in our products of software or other intellectual property licensed from third parties on a nonexclusive basis could limit our ability to protect our proprietary rights in our products.
Current wording
Many of our commercial offerings are designed to include software or other intellectual property licensed from third parties. It may be necessary in the future to seek or renew licenses relating to various aspects of these products. There can be no assurance that the necessary licenses would be available on acceptable terms, if at all. The inability to obtain certain licenses or other rights or to obtain such licenses or rights on favorable terms, or the need to engage in litigation regarding these matters, could materially harm our business, operating results, and financial condition. Moreover, the inclusion in our commercial offerings of software or other intellectual property licensed from third parties on a nonexclusive basis could limit our ability to protect our proprietary rights in our products.
Previous wording
We experience cyber attacks and other attempts to gain unauthorized access on a regular basis to (i) our products and services (together, our “solutions”) and (ii) the servers, data centers, networks, systems, and cloud-based services operated or enabled by us, or by third parties upon which we rely, on or through which our and third-party data are stored, processed, or can be accessed (collectively, our “IT environment”). We anticipate continuing to be increasingly subject to such attempts as cyber attacks become more sophisticated and difficult to predict and protect against. Despite our active implementation of security and other measures, our solutions and IT environment have been, and continue to be, vulnerable to cyber attacks, incidents, data breaches, malware, inadvertent error, disruptions, failures, physical security breaches, tampering or other theft or misuse, including by employees, contingent workers, and malicious actors. Additionally, nation-state actors or their agents have in the past successfully attacked our IT environment and have also exploited vulnerabilities in our solutions to carry out attacks, and we anticipate that these attacks and the exploitation of vulnerabilities in our solutions will continue and may intensify during periods of diplomatic or armed conflict. Further, a cyber attack or other incident could go undetected and persist in our environments for extended periods. Cyber-related events have caused, and in the future could result in, compromise to, the disruption of access to, or the operation of our solutions and IT environment or those of our customers or third-party providers upon which we rely, or result in confidential information stored on our systems or our customers’ or other third-party systems being improperly accessed, processed, disclosed now (or in the future), or be lost or stolen. Efforts to limit the ability of malicious actors to disrupt the operations of the Internet or undermine our security efforts are costly to implement and may not be successful. Breaches of security in our IT environment, our customers’ or third-party providers’ networks, or in third-party products we use, regardless of whether the breach is attributable to a vulnerability in our solutions, a failure by us to timely mitigate or apply a security fix for products we use that are found vulnerable, or a failure to maintain the digital security infrastructure or security tools that protect the integrity of our solutions and IT environment, could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business. The occurrence of a cyber attack, data breach or other incident could subject us to liability to our customers, data subjects, suppliers, business partners, employees, and others, give rise to legal and/or regulatory action, could damage our reputation or could otherwise negatively impact our business, any of which could materially harm our b…
Excerpt shortened here; the source contains the full paragraph.
Current wording
We experience cyber attacks and other attempts to gain unauthorized access on a regular basis to (i) our products and services (together, our “solutions”) and (ii) the servers, data centers, networks, systems, and cloud-based services operated or enabled by us, or by third parties upon which we rely, on or through which our and third-party data are stored, processed, or can be accessed (collectively, our “IT environment”). We anticipate continuing to be increasingly subject to such attempts as cyber attacks become more sophisticated and difficult to predict and protect against. Furthermore, the emergence and maturation of AI capabilities has led to new and/or more effective methods of cyber attacks. Despite our active implementation of security and other measures, our solutions and IT environment have been, and continue to be, vulnerable to cyber attacks, incidents, data breaches, malware, inadvertent error, disruptions, failures, physical security breaches, tampering or other theft or misuse, including by employees, contingent workers, and malicious actors. Additionally, nation-state actors or their agents have in the past successfully attacked our IT environment and have also exploited vulnerabilities in our solutions to carry out attacks, and we anticipate that these attacks and the exploitation of vulnerabilities in our solutions will continue and may intensify during periods of diplomatic or armed conflict or other geopolitical tensions. Further, a cyber attack, vulnerability exploitation, or other incident could go undetected and persist in our environments, or those of our customers or third-party providers upon which we rely, for extended periods. Cyber-related events have caused, and in the future could result in, compromise to, or the disruption of access to, the operation of our solutions and IT environment or those of our customers or third-party providers upon which we rely, or result in confidential information stored on our systems or our customers’ or other third-party systems being improperly accessed, processed, disclosed now (or in the future), or being lost or stolen. Efforts to limit the ability of malicious actors to disrupt the operations of the Internet or undermine our security efforts are costly to implement and may not be successful. Breaches of security in our IT environment, our customers’ or third-party providers’ networks, or in third-party products we use, regardless of whether the breach is attributable to a vulnerability in our solutions, a failure by us to timely mitigate or apply a security fix for products we use that are found vulnerable, or a failure to maintain the digital security infrastructure or security tools that protect the integrity of our solutions and IT environment, could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business. The occurrence of a cyber attack, data breach or other incident could subject us to d…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Vulnerabilities and critical security defects, prioritization decisions regarding remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner or deciding not to upgrade our solutions could result in claims of liability against us, damage our reputation, or otherwise materially harm our business.
Current wording
Vulnerabilities and critical security defects, prioritization decisions regarding remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner or deciding not to upgrade our solutions to those with security updates or security enhancements applied could result in claims of liability against us, damage our reputation, or otherwise materially harm our business.
Previous wording
The products and services (together, our “solutions”) we sell to customers, and the cloud-based services operated or enabled by us, or by third parties upon which we rely, inevitably contain vulnerabilities or security defects (despite our efforts to prevent and detect them through secure development lifecycle practices, testing, and other means), which have not been remedied or cannot be disclosed without compromising security. We also make prioritization decisions in determining which vulnerabilities or security defects to fix and the timing of these fixes. Even when we prioritize a vulnerability or security defect, in certain instances it has taken, and in the future could take, time for us to develop a remedy and the remedy may ultimately be insufficient to fully fix the issue. In addition, workarounds or other mitigation efforts in certain instances have not been, and in the future may not be, available or sufficient to protect customers prior to a security update being made available. Vulnerabilities can persist even after we have issued security updates if we have not identified and addressed the root cause of a particular vulnerability, if customers have not installed the most recent updates, if the attackers exploited the vulnerabilities before a security update is applied to install additional malware to further compromise customers’ systems, or if a previously patched vulnerability is inadvertently reintroduced due to a security regression during future development. Additionally, customers may also need to test security updates before they can be deployed which can delay implementation. When customers do not deploy security updates in a timely manner, use solutions that are end of life and no longer receive security updates, or decide not to upgrade to the latest versions of our solutions containing the security update, they are left vulnerable. In addition, we rely on third-party providers of software and cloud-based services on which our and third-party data is stored or processed, and we cannot control the timing at which third-party providers remedy vulnerabilities, which could leave us vulnerable. Failure to comply with internal security policies and standards, including secure development lifecycle practices, failure to prevent or promptly mitigate vulnerabilities and security defects, prioritization errors in remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner or deciding not to upgrade solutions could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially harm our business.
Current wording
The products and services (together, our “solutions”) we sell to customers, and the cloud-based services operated or enabled by us, or by third parties upon which we rely, inevitably contain vulnerabilities or security defects (despite our efforts to prevent and detect them through secure development lifecycle practices, testing, or other means), which have not been remedied or cannot be disclosed without compromising security. We also make prioritization decisions in determining which vulnerabilities or security defects to fix and the timing of these fixes. Even when we prioritize a vulnerability or security defect, in certain instances it has taken, and in the future could take, time for us to develop and test a remedy and the remedy may ultimately be insufficient to fully fix the issue or may be found to create other issues. In addition, workarounds or other mitigation efforts in certain instances have not been, and in the future may not be, available or sufficient to protect customers prior to a security update being made available. Vulnerabilities can persist even after we have issued security updates if we have not identified and addressed the root cause of a particular vulnerability, if customers have not installed the most recent updates, if the attackers exploited the vulnerabilities before a security update is applied (such as to install additional malware to further compromise customers’ systems), or if a previously patched vulnerability is inadvertently reintroduced due to a security regression during future development or a changed deployment. Additionally, customers may also desire to test security updates before they can be deployed which can delay implementation. When customers do not deploy security updates in a timely manner, use solutions that are end of life and no longer receive security updates, decide not to upgrade to the latest versions of our solutions containing security updates or security enhancements, configure our solutions in insecure ways, or fail to sufficiently monitor activity on those solutions, they are left vulnerable. In addition, we rely on third-party providers of software (including open source) and cloud-based services on which our and third-party data is stored or processed, and we cannot control the timing at which third-party providers remedy vulnerabilities, which could leave us vulnerable. Failure to comply with internal security policies and standards, including secure development lifecycle practices, failure to prevent or promptly mitigate vulnerabilities and security defects, prioritization errors in remedying vulnerabilities or security defects, failure of third-party providers to remedy vulnerabilities or security defects, or customers not deploying security updates in a timely manner, deciding not to upgrade solutions, or configuring our solutions in insecure ways could, in each case, result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
Our actual or perceived failure to adequately protect personal data could result in claims of legal and/or regulatory action against us, damage our reputation or otherwise materially harm our business.
Current wording
Our actual or perceived failure to adequately protect and appropriately use data could result in claims of legal and/or regulatory action against us, damage our reputation, or otherwise materially harm our business.
Previous wording
Global privacy and data protection-related laws and regulations are evolving, extensive, and complex. Compliance with these laws and regulations is difficult and costly. In addition, evolving legal requirements restricting or controlling the collection, processing, or cross-border transmission of data, including for regulation of cloud-based services, could materially affect our customers’ ability to use, and our ability to sell, our products and services. The interpretation and application of these laws in some instances is uncertain, and our legal and regulatory obligations are subject to frequent changes. For example, the European Union’s (“EU”) General Data Protection Regulation (“GDPR”) applies to our activities conducted from an establishment in the EU or related to products and services offered in the EU and imposes a range of compliance obligations regarding the handling of personal data. Additionally, we are subject to California’s Consumer Privacy Act, Singapore’s Personal Data Protection Act, and other laws, regulations and obligations that relate to the handling of personal data. Our actual or perceived failure to comply with applicable laws and regulations or other obligations relating to personal data, or to protect personal data from unauthorized access, use, or other processing, could subject us to liability to our customers, data subjects, suppliers, business partners, employees, and others, give rise to legal and/or regulatory action, could damage our reputation or could otherwise negatively impact our business, any of which could materially harm our operating results and financial condition.
Current wording
Global privacy and data protection-related laws and regulations, including cybersecurity laws, are evolving, extensive, and complex. Compliance with these laws and regulations is difficult and costly. In addition, evolving legal requirements restricting or controlling the collection, processing, use or cross-border transmission of data, including regulation of cloud-based services, could materially affect our customers’ ability to use, and our ability to sell, our products and services. The interpretation and application of these laws in some instances is uncertain, and our legal and regulatory obligations are subject to frequent changes. For example, the European Union’s (“EU”) General Data Protection Regulation (“GDPR”) applies to our activities conducted from an establishment in the EU or related to products and services offered in the EU and imposes a range of compliance obligations regarding the handling of personal data for both ourselves and our customers. Additionally, we are subject to California’s Consumer Privacy Act, Singapore’s Personal Data Protection Act, and other laws, regulations, and obligations around the world that govern the handling of personal data. Our actual or perceived failure to comply with applicable laws and regulations or other obligations relating to the use of data and protecting data from unauthorized access, use, or other processing, could subject us to claims of liability, or give rise to legal and/or regulatory action, damage our reputation, and/ or otherwise negatively impact our business, any of which could materially harm our operating results and financial condition.
Previous wording
Changes in regulatory requirements applicable to the industries and sectors in which we operate, in the United States and in other countries, could materially affect the sales and use of our products and services. In particular, economic sanctions and changes to export and import control requirements have impacted and may continue to impact our ability to sell and support our products and services in certain jurisdictions. In addition, changes in telecommunications regulations could impact our service provider customers’ purchase of our products and services, and they could also impact sales of our own regulated offerings. Government procurement policies, priorities, regulations, technology initiatives and/or other obligations often give rise to evolving privacy, cybersecurity, operational resilience, or other requirements, and the failure or delay to meet and maintain such requirements could negatively impact our business, including by limiting our ability to sell products and services, directly or indirectly, to public sector, critical infrastructure and other customers. Additional areas of uncertainty that could impact sales of our products and services include laws, regulations, or customer procurement requirements related to encryption technology, data, artificial intelligence, privacy, cybersecurity, operational resilience, environmental sustainability (including climate change), human rights, product certification, product accessibility, country of origin, and national security controls applicable to our supply chain. Changes in regulatory requirements or our actual or perceived failure to comply with applicable laws and regulations or other obligations could materially harm our business, operating results, and financial condition.
Current wording
Changes in regulatory requirements applicable to the industries and sectors in which we operate, in the United States and in other countries, could materially affect the sales and use of our products and services. In particular, economic sanctions and changes to export and import control requirements have impacted and may continue to impact our ability to sell and support our products and services in certain jurisdictions. In addition, changes in telecommunications regulations could impact our service provider customers’ purchase of our products and services, and they could also impact sales of our own regulated offerings. Government and other customers' procurement policies, priorities, regulations, technology initiatives and/or other obligations often give rise to evolving privacy, cybersecurity, operational resilience, data governance, or other requirements; the failure or delay in meeting and maintaining compliance with such requirements could negatively impact our business, including by limiting our ability to sell products and services, directly or indirectly, to public sector, critical infrastructure, and other customers. Additional areas of uncertainty that could impact sales of our products and services include laws, regulations, or customer procurement requirements related to encryption technology, data, AI, privacy, cybersecurity, operational resilience, environmental sustainability (including climate change), human rights, product certification, product and digital accessibility, country of origin, and national security and other security controls applicable to our offerings and supply chain. Changes in regulatory requirements or our actual or perceived failure to comply (or to enable our customers to comply when using our offerings) with applicable laws, regulations, or other obligations could materially harm our business, operating results, and financial condition.