{"url_path":"/sec/nice/10-k/2026/item-16i","section_key":"item-16i","section_title":"Item 16I Disclosure Regarding Foreign Jurisdictions that Prevent Inspections.","topic":"sec","document":{"doc_type":"20-F","doc_date":"2026-02-26","source_url":"https://www.sec.gov/Archives/edgar/data/1003935/0001003935-26-000010-index.html","accession_number":"0001003935-26-000010","cik":"0001003935","ticker":"NICE","issuer_name":"NICE Ltd.","edgar_url":"https://www.sec.gov/Archives/edgar/data/1003935/0001003935-26-000010-index.html","primary_entity_key":"0001003935","primary_entity_name":"NICE Ltd."},"word_count":821,"has_tables":true,"body_markdown":"Item 16I.    Disclosure Regarding Foreign Jurisdictions that Prevent Inspections.\n\nNot Applicable.\n\nItem. 16J.     Insider Trading Policies\n\nOur Board of Directors has adopted an insider trading policy (the \"Insider Trading Policy\"), governing the purchase, sale, and other dispositions of our securities by directors, senior management, and employees that are reasonably designed to promote compliance with applicable insider trading laws, rules and regulations, and Nasdaq listing standards. A copy of the Insider Trading Policy is filed as Exhibit 11.1 to this Annual Report.\n\n104\n\nItem. 16K.     Cybersecurity\n\nCybersecurity forms an integral part of our risk management processes. We have established and maintain a Cybersecurity Risk Program which has been developed to assess, identify and manage material risks from cybersecurity threats. Our Cybersecurity Risk Program is integrated into our overall risk management program, and shares common methodologies, reporting channels and governance processes that apply to other enterprise risk areas. Our program is inclusive of related information security personnel, as well as tools, policies and procedures designed to protect the confidentiality, integrity, and availability of our systems, products and services as well as the information contained therein. Our internal cybersecurity policies and procedures incorporate industry practices and are assessed annually as part of our Cybersecurity Risk Program review. These policies and procedures include information security policies, incident response procedure, risk assessment procedures and a vendor management policy.\n\nWe utilize multiple third-party experts to support our program, to advise and assist us in evaluating and enhancing our cybersecurity processes. These experts include threat monitoring service providers, cyber software and managed service providers, penetration testing firms, forensic investigators, cybersecurity consultants, and legal counsel specializing in the cyber domain.\n\nWe conduct cybersecurity risk assessments and audits, both internally and through the engagement of third parties. These processes include scanning of our information systems for vulnerabilities, including by conducting penetration testing, and we maintain tools to detect unusual or unauthorized activities that may affect our systems, products, and services. We also retain the services of a reputable third-party firm for threat monitoring and detection.\n\nWe have processes to educate our employees, contractors, partners, and vendors regarding their cybersecurity responsibilities. For example, employees are provided annual cybersecurity training and other on-going cybersecurity awareness exercises.\n\nWe maintain a third-party risk management process in order to identify, assess and mitigate the risks associated with our third-party service providers. As part of this process, depending on each provider’s operationality criticality and risk profile, we may conduct assessments, monitor performance and seek to impose contractual security obligations where possible.\n\nOur incident response policy provides guidelines for the identification, handling and reporting of cybersecurity incidents to internal stakeholders and external parties, where warranted. Additional guidelines covered under our incident response policy include steps for incident identification, containment, eradication, recovery, and lessons learned activities.\n\nOur Cybersecurity Risk Program is led by our Corporate VP Information Security who is primarily responsible for assessing and managing cybersecurity risks and threats, and reports to our Chief Operating Officer. Our Corporate VP Information Security has significant experience assessing and managing cybersecurity programs and risks and has extensive cybersecurity knowledge. Members of the corporate cybersecurity team are responsible for implementing and maintaining the cybersecurity program and practices for the Company. Other cybersecurity teams and professionals within our Company have the responsibility to implement and maintain cybersecurity processes within their business lines. Such teams and individuals work in coordination with our corporate cybersecurity team and under the guidance of our Corporate VP Information Security. The corporate cybersecurity team works closely with the SOC team, which serves as the central hub for monitoring and responding to security incidents and is trained to support our management in incident related matters.\n\nOur management is committed to maintaining a robust cybersecurity program, which includes supplying the necessary resources to sustain the program, including people, tools, processes, procedures, and education. Cybersecurity risks and controls are evaluated and reviewed by our senior management, including as part of our internal audits that are presented to the Internal Audit and ESG Committee of the Board of Directors. Our Board of Directors has ultimate oversight of cybersecurity risk management as part of its general oversight function. Our Board of Directors receives and reviews updates, reports and presentations, including from our Corporate VP Information Security, related to cybersecurity threats, significant incidents and trends as well as to our cybersecurity program.\n\nThrough the date of filing this annual report, we have not identified any risks from known, cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected our business strategy, results of operations, or financial condition. We face ongoing risks form certain cybersecurity threats that, if realized in the future, would materially impact our business, results of operations or financial condition. For information on the market risks\n\n105\n\nrelating to cybersecurity, please see Item 3, \"Key Information - Risk Factors - Risks Relating to Information and Product Security and Intellectual Property” in this annual report.\n\n106\n\nPART III"}