The Johnson & Johnson Information Security and Risk Management (ISRM) organization, led by the Company’s Chief Information Security Officer, has a developed robust program to achieve this objective, maintaining and constantly enhancing capabilities to protect company networks and data against evolving cyber threats.