We are committed to protecting our Horizon information technology systems. We manage information technology systems that facilitate commercial, supply chain and regulatory activities; maintain our financial data; and store employee and customer data.

A security breach in any one of these systems could expose our customers or employees to risks of misuse of confidential information, impair our ability to effectively operate our business and manufacturing activities, or cause other disruptions, which could result in legal claims or proceedings, disrupt our operations and the supply of our products to our customers or harm our reputation, any of which could adversely affect our results of operations, financial condition and competitive positioning in the marketplace.

Our cybersecurity risk management team continually analyzes emerging cybersecurity threats in the overall environment and updates senior management and the Board of Directors on strategies to address them. We have protocols, policies and tools in place to mitigate cybersecurity risk. We are aligned to the National Institute of Standards and Technology Framework (NIST CSF). This voluntary guidance provides a framework and a toolkit for organizations to manage cybersecurity risk. In addition, we annually engage an independent third party to assess our information technology (IT) general controls and IT security. We maintain a cybersecurity insurance policy.

The Audit Committee of our Board of Directors regularly reviews our programs related to information security and technology risks, including cybersecurity. The Audit Committee and Board⁽ is briefed at least twice a yearby our chief information officer on our cybersecurity risk management programs and the overall cybersecurity risk environment. The briefing includes discussions on topics such as information security and technology risks, cybersecurity, information risk management strategies and progress and employee training initiatives, among others.

We enhance our information security through employee training. This includes a cybersecurity review for new employees during the onboarding process, as well as regular phishing awareness campaigns throughout the year to all employees. All employees are required to review and attest to our policy of the acceptable use of our information technology. In addition, all employees are required to do mandatory cybersecurity training on an annual basis, as well as to review and attest to our cybersecurity policy. The importance of protecting Horizon’s information, resources and systems is also stressed in Horizon’s Code of Conduct & Ethics.

We work to provide the administrative, technical, and physical safeguards that will ensure the security, confidentiality, integrity and availability of confidential information and personal information from unauthorized access, use, disclosure, alteration, destruction or theft.

Click here for Horizon’s ESG Overview.