PART I

Business Strategy

Our strategy is to combine best-of-breed technology with unmatched scale to deliver comprehensive cyber security platforms for enterprise, business and government customers, as well as consumers.

Our Enterprise Security strategy is to leverage our product portfolio, partner ecosystem and global threat intelligence network to deliver Integrated Cyber Defense to enterprise, business and government customers. Our Integrated Cyber Defense platform enables us to acquire new customers and cross-sell our full portfolio of products and services to existing customers with improved visibility, enhanced controls, accelerated response and reduced cost of ownership.

Our Consumer Digital Safety strategy is to combine and leverage our portfolio of Norton and LifeLock brands, products, and services to deliver a comprehensive set of Cyber Safety solutions that addresses today’s continually evolving and increasingly complex threat landscape. This threat landscape puts consumers at increased risk of having their security, privacy, and identities compromised. As risks shift from PC-based attacks to more sophisticated threats (ransomware, identity theft, Internet of Things (“IoT”) risks), our software and services provide a multi-layered approach to protect consumers everywhere, regardless of device, network or location.

5

Products and Services

Enterprise Security Portfolio: Integrated Cyber Defense

Our Enterprise Security portfolio includes a deep and broad mix of products, services and solutions, delivered as part of an Integrated Cyber Defense platform. Our platform unifies cloud and on-premises security to provide advanced threat protection and information protection across all endpoints, networks, email, and cloud applications. Key components of the platform include:

Our solutions are powered by the following critical features:

6

In addition to our core product portfolio, Symantec offers enterprise security services including:

Consumer Digital Safety Portfolio

Our Consumer Digital Safety solutions consist of the following key elements, which we are integrating into a singular user experience for individuals and their families:

7

Business Segments, International Operations and Significant Customers

For financial information regarding our Enterprise Security and Consumer Digital Safety segments, revenues and property and equipment by geographical area and significant customers, see Note 14 to the Consolidated Financial Statements in this annual report. For information regarding risks associated with our international operations, see Item 1A, Risk Factors .

Sales and Go-to-Market Strategy

Our go-to-market network includes direct sales forces and broad e-commerce capabilities, as well as indirect sales resources that support our global partner ecosystem. We also maintain strategic relationships with a number of original equipment manufacturers (“OEMs”), Internet service providers (“ISPs”), global service integrators (“GSI”s), wireless carriers, and retail and online stores through which we market and sell our products.

Enterprise

We sell and market our products and services to large enterprises, including business, government and public-sector customers, through our field sales force and reseller channels. Our field sales team leverages our global partner ecosystem, primarily targeting senior executives and IT department personnel responsible for managing a company’s highest-order IT and cyber security initiatives.

We also sell and market our products and services to small, medium and large businesses through field sales and inside sales forces that leverage indirect sales partners around the world, who are specifically trained and certified to sell our solutions. These partners include national solution providers, regional solution providers, national account resellers, global/federal system integrators, and managed service providers.

Our enterprise products and services are also available on our e-commerce platform, as well as through authorized distributors, GSIs and OEMs, who incorporate our technologies into their products, bundle our products with their offerings, or serve as authorized resellers of our products.

Consumer

We sell and market our consumer products and services to individuals, households and small businesses globally. We bring these products to market through direct marketing and co-marketing programs supported by our e-commerce and tele-sales platforms. In addition, we utilize Internet-based resellers, system builders, ISPs, employee benefits providers, wireless carriers, retailers, and OEMs to distribute our offerings worldwide. We drive consumer business growth through global brand and demand campaigns, new customer acquisition, improved retention cross-sell and customer success programs.

Research and Development

Symantec embraces a global research and development strategy to drive organic innovation and product integration across our portfolio. Our engineering and product management teams are focused on delivering new versions of existing product lines as well as developing entirely new products and

8

services to drive the company’s leadership in cyber security. We also have a technology research organization focused on short, medium, and longer-term applied research projects, with the goal of transferring completed innovations into our product groups for commercialization.

Symantec’s Security Technology and Response organization is a global team of security engineers, threat analysts, and researchers who provide the underlying functionality, content, and support for many of our solutions. These front-line security experts analyze threat telemetry collected through our vast cyber intelligence networks to protect our customers against current and emerging threats. Our research and development teams also leverage these vast data sets and insights to develop new technologies and approaches in order to improve security outcomes for our customers.

Research and development expenses were $956 million, $823 million and $748 million in fiscal 2018, 2017 and 2016, respectively. We believe that technical leadership is essential to our success, and we expect to continue to commit substantial resources to research and development.

Product and Technical Support

Symantec has support facilities throughout the world, staffed by technical product experts knowledgeable in the operating environments in which our products are deployed. Our support experts assist customers with both issue resolution and threat detection.

We provide Enterprise Security customers with various levels of support. Our support program offers annual maintenance support contracts, including content, updates, and technical support. Our essential technical support includes: self-service options, assisted support delivered by telephone or electronically during contracted-for hours, immediate patches for severe problems, periodic software updates, and access to our technical knowledge base and frequently asked questions.

Our Consumer Digital Safety support includes self-help online services and phone, chat, and email support worldwide. Most of our Norton Security products come with automatic downloads of the latest virus definitions, application bug fixes, and patches, as well as a “Virus Protection Promise,” which in some markets provides free virus removal services to customers whose protected computers become infected. Our Consumer Digital Safety service and support offerings come with 24x7x365 support, along with remediation services during normal business hours.

Competition

Our markets are consolidating, highly competitive, and subject to rapid changes in technology. The competitive landscape has changed significantly over the past few years, with new competition arising. Some of the market growth has come from startups that focus on solving a particular issue or delivering a niche-oriented product, and from larger integration providers that increasingly seek to add to or extend their offerings. We focus on delivering comprehensive customer solutions, integrating across our broad product portfolio and partnering with other technology providers to differentiate our offerings and platforms from the competition.

In addition to the competition we face from direct competitors, we face indirect or potential competition from retailers, application providers, operating system providers, network equipment manufacturers and other OEMs who may provide various solutions and functions in their current and future offerings. We compete with these same parties to acquire technologies, products, or companies. We also compete with other software companies in our effort to place our products on the computer equipment sold to consumers and enterprises by OEMs. We compete for access to distribution channels and for spending at the retail level for our consumer offerings and in corporate accounts for our enterprise offerings.

9

Our Enterprise Security competitors vary by product category, geography, channel and customer size:

Our Consumer Digital Safety competitors vary by product category, geography and channel. Norton Security competitors include McAfee, Microsoft and Trend Micro. Consumer backup product competitors include Carbonite, Inc. LifeLock identity theft protection competitors include credit bureaus Experian, Equifax, and TransUnion, as well as others including Affinion, EWS, Intersections, and LexisNexis.

We believe that the principal competitive factors necessary to be successful in our industry include product quality and effectiveness, time-to-market, price, reputation, financial stability, breadth of product offerings, customer support, brand recognition, and effective sales and marketing efforts.

Intellectual Property

Protective measures

We regard some of the features of our internal operations, software, and documentation as proprietary and rely on copyright, patent, trademark and trade secret laws, confidentiality procedures, contractual arrangements, and other measures to protect our proprietary information. Our intellectual property is an important and valuable asset that enables us to gain recognition for our products, services, and technology and enhance our competitive position.

As part of our confidentiality procedures, we generally enter into non-disclosure agreements with our employees, distributors, and corporate partners and we enter into license agreements with respect to our software, documentation, and other proprietary information. These license agreements are

10

generally non-transferable and have either a perpetual or subscription based time limited term. We also educate our employees on trade secret protection and employ measures to protect our facilities, equipment, and networks.

Trademarks, patents, copyrights, and licenses

Symantec, and the Symantec Norton and LifeLock logos, are trademarks or registered trademarks in the U.S. and other countries. In addition, we have used, registered, or applied to register other trademarks and service marks to help distinguish our products, technologies, and services from those of our competitors in the U.S. and other countries. We actively enforce our trademark, service mark, and trade name rights in the U.S. and abroad based on our rights under common law, and various state and federal laws and regulations, as well as rights recognized by international treaties and conventions. The duration of our trademark registrations varies from country to country, and in the U.S. we generally are able to maintain our trademark rights and renew any trademark registrations for as long as the trademarks are in use.

We have approximately 2,225 patents, in addition to foreign patents and pending U.S. and foreign patent applications, which relate to various aspects of our products and technology. The duration of our patents is determined by the laws of the country of issuance and for the U.S. is typically 17 years from the date of issuance of the patent or 20 years from the date of filing of the patent application resulting in the patent, which we believe is adequate relative to the expected lives of our products.

Our products are protected under U.S. and international copyright laws and laws related to the protection of intellectual property and proprietary information. We take measures to label such products with the appropriate proprietary rights notices, and we actively enforce such rights in the U.S. and abroad. However, these measures may not provide sufficient protection, and our intellectual property rights may be challenged. In addition, we license some intellectual property from third parties for use in our products, and generally must rely on the third party to protect the licensed intellectual property rights. While we believe that our ability to maintain and protect our intellectual property rights is important to our success, we also believe that our business as a whole is not materially dependent on any particular patent, trademark, license, or other intellectual property right.

Seasonality

As is typical for many large technology companies, our business is seasonal. Revenues are generally higher in our third and fourth fiscal quarters.

Corporate Responsibility

Our annual Corporate Responsibility Report can be found via the Symantec website at https://www.symantec.com/about/corporate-responsibility.

Audit Committee Investigation Completed

As previously disclosed, the Audit Committee has concluded its internal investigation, which was originally announced in May 2018. Please see Part III, Item 11 “Executive Compensation” — “Executive Compensation and Related Information” — “Compensation Discussion & Analysis” — “Additional Matters — Audit Committee Investigation” for more details.

Employees

As of March 30, 2018, we employed more than 11,800 people worldwide.

11

Available information

Our Internet home page is located at www.symantec.com. We make available free of charge our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments to those reports as soon as reasonably practicable after we electronically file such material with the Securities and Exchange Commission (“SEC”) on our investor relations website located at www.symantec.com/invest. The information contained, or referred to, on our website is not part of this annual report unless expressly noted. The SEC maintains a website that contains reports, proxy and information statements, and other information regarding our filings at http://www.sec.gov. In addition, you may read and copy any filing that we make with the SEC at the public reference room maintained by the SEC, located at 100 F Street, N.E., Washington, D.C. 20549. Please call the SEC at 1-800-SEC-0330 for further information about the public reference room.

Any of the foregoing factors could cause the trading price of our outstanding securities to fluctuate significantly.

Our business depends on customers renewing their arrangements for maintenance, subscriptions, managed security services and cloud-based (“cloud”) offerings.

A large portion of our revenue is derived from arrangements for maintenance, subscriptions, managed security services and cloud offerings, yet customers have no contractual obligation to purchase additional solutions after the initial subscription or contract period. Our customers’ renewal rates, and our customer retention, may decline or fluctuate as a result of a number of factors, including their level of satisfaction with our solutions or our customer support, customer budgets and the pricing of our solutions compared with the solutions offered by our competitors, any of which may cause our revenue to grow more slowly than expected, or to decline. Accordingly, we must invest significant time and resources in providing ongoing value to our customers. If these efforts fail, or if our customers do not renew for other reasons, or if they renew on terms less favorable to us, our revenue may decline and our business will suffer.

Matters relating to or arising from our Audit Committee investigation, including regulatory investigations and proceedings, litigation matters and potential additional expenses, may adversely affect our business and results of operations.

As previously disclosed in our public filings, the Audit Committee of our Board of Directors (the “Audit Committee”) has recently completed an internal investigation (the “Audit Committee Investigation”). In connection with the Audit Committee Investigation, we voluntarily contacted the SEC in May 2018. The SEC commenced a formal investigation and we continue to cooperate with that investigation.

13

Furthermore, if the SEC commences legal action, we could be required to pay significant penalties and become subject to injunctions, a cease and desist order and other equitable remedies. The completion of the Audit Committee investigation and filing of delinquent periodic reports will not automatically resolve the SEC investigation. We can provide no assurances as to the outcome of any governmental investigation.

We have incurred, and may continue to incur, significant expenses related to legal, accounting, and other professional services in connection with the internal investigation and related legal matters. These expenses, the delay in timely filing our periodic reports, and the diversion of the attention of the management team that has occurred, and is expected to continue, has adversely affected, and could continue to adversely affect, our business and financial condition.

As a result of the matters reported above, we are exposed to greater risks associated with litigation, regulatory proceedings and government enforcement actions. In addition, securities class actions and other lawsuits have been filed against us, our directors and officers (see also, “We are subject to pending securities class action and stockholder derivative legal proceedings” below). Any future investigations or additional lawsuits may adversely affect our business, financial condition, results of operations and cash flows.

We are subject to pending securities class action and stockholder derivative legal proceedings that may adversely affect our business.

Several securities class action and derivative lawsuits were filed against us following our announcement on May 10, 2018 of the Audit Committee Investigation, including an action brought derivatively on behalf of Symantec’s 2008 Employee Stock Purchase Plan. In addition, we have received certain demands from purported stockholders to inspect corporate books and records under Delaware law. No specific amounts of damages have been alleged in these lawsuits. We will continue to incur legal fees in connection with these pending cases, including expenses for the reimbursement of legal fees of present and former officers and directors under indemnification obligations. The expense of continuing to defend such litigation may be significant. We intend to defend these lawsuits vigorously, but there can be no assurance that we will be successful in any defense. If any of the lawsuits related to our Audit Committee Investigation are decided adversely, we may be liable for significant damages directly or under our indemnification obligations, which could adversely affect our business, results of operations and cash flows. Further, the amount of time that will be required to resolve these lawsuits is unpredictable and these actions may divert management’s attention from the day-to-day operations of our business, which could further adversely affect our business, results of operations and cash flows.

We have not been in compliance with Nasdaq’s requirements for continued listing and as a result our common stock may be delisted from trading on Nasdaq, which would have a material effect on us and our stockholders.

We were delinquent in the filing of our periodic reports with the SEC and have delayed convening our 2018 Annual Meeting of Stockholders (the “Annual Meeting”), as a result of which we are not in compliance with listing requirements of The Nasdaq Stock Market LLC (“Nasdaq”) Listing Rule 5250(c)(1), which requires timely filing of periodic financial reports with the SEC. Under Nasdaq’s listing rules, we were permitted to submit to Nasdaq a plan to regain compliance with the Nasdaq listing rules. We previously submitted such a plan to the Nasdaq Staff, and Nasdaq has granted us until November 26, 2018 to regain compliance. We expect to file our delinquent Quarterly Reports as promptly as practicable following this Annual Report filing, however there can be no guarantee that we will be able to file by November 26, 2018, in which case our common stock may again be subject to delisting by Nasdaq. If our common stock is delisted, there can no assurance whether or when it would

14

again be listed for trading on Nasdaq or any other exchange. If our common stock is delisted, the market price of our shares will likely decline and become more volatile, and our stockholders may find that their ability to trade in our stock will be adversely affected. Furthermore, institutions whose charters do not allow them to hold securities in unlisted companies might sell our shares, which could have a further adverse effect on the price of our stock.

The delayed filing of some of our periodic SEC reports has made us currently ineligible to use a registration statement on Form S-3 to register the offer and sale of securities, which could adversely affect our ability to raise future capital or complete acquisitions.

As a result of the delayed filing of some of our periodic reports with the SEC, we will not be eligible to register the offer and sale of our securities using a registration statement on Form S-3 until November 2019 at the earliest. Should we wish to register the offer and sale of our securities to the public prior to the time we are eligible to use Form S-3, both our transaction costs and the amount of time required to complete the transaction could increase, making it more difficult to execute any such transaction successfully and potentially harming our financial condition.

If we are unable to develop new and enhanced solutions that achieve widespread market acceptance, or if we are unable to continually improve the performance, features, and reliability of our existing solutions or adapt our business model to keep pace with industry trends, our competitive position may weaken and our business and operating results could be adversely affected.

Our future success depends on our ability to effectively respond to the rapidly changing needs of our customers, as well as competitive technological developments and industry changes by developing or introducing new and enhanced solutions on a timely basis.

We have in the past incurred, and will continue to incur, significant research and development expenses as we strive to remain competitive. If we are unable to anticipate or react to competitive challenges or if existing or new competitors gain market share in any of our markets, our competitive position could weaken, and we could experience a decline in our sales that could adversely affect our business and operating results. Additionally, we must continually address the challenges of dynamic and accelerating market trends and competitive developments, such as the emergence of advanced persistent threats in the security space, the continued decline in the PC market and the market shift towards mobility and the increasing transition towards cloud-based solutions, all of which continue to make it more difficult for us to compete effectively. For example, although we have been investing heavily in solutions that address the cloud security market, we cannot be certain that it will develop at a rate or in the manner we expect or that we will be able to compete successfully with new entrants or more established competitors. Customers may require features and capabilities that our current solutions do not have. Our failure to develop new solutions and improve our existing solutions that satisfy customer preferences and effectively compete with other market offerings in a timely and cost-effective manner may harm our ability to renew our subscriptions with existing customers and to create or increase demand for our solutions, which may adversely impact our operating results. The development and introduction of new solutions involves a significant commitment of time and resources and are subject to a number of risks and challenges including:

15

If we are not successful in managing these risks and challenges, or if our new or improved solutions are not technologically competitive or do not achieve market acceptance, our business and operating results could be adversely affected.

If we are unable to attract and retain qualified employees, lose key personnel, fail to integrate replacement personnel successfully, or fail to manage our employee base effectively, we may be unable to develop new and enhanced solutions, effectively manage or expand our business, or increase our revenues.

Our future success depends upon our ability to recruit and retain key management, technical, sales, marketing, finance and other personnel. Our officers and other key personnel are employees-at-will, and we cannot assure you that we will be able to retain them. Competition for people with the specific skills that we require is significant, especially in and around our headquarters in Silicon Valley, and we face difficulties in attracting, retaining and motivating employees as a result. In order to attract and retain personnel in a competitive marketplace, we believe that we must provide a competitive compensation package, including cash and equity-based compensation. Additionally, changes in immigration laws could impair our ability to attract and retain highly qualified employees. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could suffer. The volatility in our stock price may from time to time adversely affect our ability to recruit or retain employees. In addition, we may be unable to obtain required stockholder approvals of future increases in the number of shares required for issuance under our equity compensation plans. As a result, we may issue fewer equity-based incentives and may be impaired in our efforts to attract and retain necessary personnel. If we are unable to hire and retain qualified employees, or conversely, if we fail to manage employee performance or reduce staffing levels when required by market conditions, our business and operating results could be adversely affected.

Effective succession planning is also important to our long-term success. Failure to ensure effective transfer of knowledge and smooth transitions involving key employees could hinder our strategic planning and execution. From time to time, key personnel leave our company. Although we strive to reduce the negative impact of changes in our leadership, the loss of any key employee could result in significant disruptions to our operations, including adversely affecting the timeliness of product releases, the successful implementation and completion of company initiatives, the effectiveness of our disclosure controls and procedures, our internal control over financial reporting, and our results of operations. In addition, hiring, training, and successfully integrating replacement sales and other personnel could be time consuming and expensive, may cause additional disruptions to our operations, and may be unsuccessful, which could negatively impact future financial results. These risks may be exacerbated by the uncertainty associated with the acquisitions, divestitures and transitions we have experienced over the last few years.

We operate in a highly competitive environment, and our competitors may gain market share in the markets for our solutions that could adversely affect our business and cause our revenues to decline.

We operate in intensely competitive markets that experience rapid technological developments, changes in industry standards, changes in customer requirements and frequent new product introductions and improvements. If we are unable to anticipate or react to these competitive challenges or if existing or new competitors gain market share in any of our markets, our competitive position could weaken and we could experience a decline in our sales that could adversely affect our business

16

and operating results. To compete successfully, we must maintain an innovative research and development effort to develop new solutions and enhance our existing solutions, effectively adapt to changes in the technology or product rights held by our competitors, appropriately respond to competitive strategies and effectively adapt to technological changes and changes in the ways that our information is accessed, used and stored within our enterprise and consumer markets. If we are unsuccessful in responding to our competitors or to changing technological and customer demands, our competitive position and our financial results could be adversely affected.

Our competitors include software and cloud-based vendors that offer solutions that directly compete with our offerings. In addition to competing with these vendors directly for sales to end-users of our solutions, we compete with them for the opportunity to have our solutions bundled with the offerings of our strategic partners such as computer hardware OEMs and ISPs. Our competitors could gain market share from us if any of these strategic partners replace our solutions with those of our competitors or if these partners more actively promote our competitors’ solutions than our own. In addition, software and cloud-based vendors who have bundled our solutions with theirs may choose to bundle their solutions with their own or other vendors’ solutions or may limit our access to standard interfaces and inhibit our ability to develop solutions for their platform. In the future, further product development by these vendors could cause our solutions to become redundant, which could significantly impact our sales and financial results.

We face growing competition from network equipment, computer hardware manufacturers, large operating system providers and other technology companies, as well as from companies in the identity threat protection space such as credit bureaus. Many of these competitors are increasingly developing and incorporating into their products data protection software that competes at some levels with our offerings. Our competitive position could be adversely affected to the extent that our customers perceive the functionality incorporated into these products as replacing the need for our solutions.

Security protection is also offered by some of our competitors at prices lower than our prices or, in some cases is offered free of charge. Some companies offer lower-priced or free security products within their computer hardware or software products. Our competitive position could be adversely affected to the extent that our customers perceive these lower cost or free security products as replacing the need for more effective, full featured solutions, such as those that we provide. The expansion of these competitive trends could have a significant negative impact on our sales and operating results by causing, among other things, price reductions of our solutions, reduced profitability and loss of market share.

Many of our competitors have greater financial, technical, sales, marketing or other resources than we do and consequently, may have the ability to influence customers to purchase their products instead of ours. Further consolidation within our industry or other changes in the competitive environment could result in larger competitors that compete with us on several levels. We also face competition from many smaller companies that specialize in particular segments of the markets in which we compete.

Our cloud offerings present execution and competitive risks.

Our cloud offerings are critical to our business. Our competitors are rapidly developing and deploying cloud offerings for consumers and business customers. Pricing and delivery models are evolving. Devices and form factors influence how users access services in the cloud. We have made and are continuing to make significant investments in, and devoting significant resources to develop and deploy, our own cloud strategies. We cannot assure you that our ongoing investments in and development of cloud offerings will achieve the expected returns for us or that we will be able to compete successfully in the marketplace. In addition to software development costs, we are incurring significant costs to build and maintain infrastructure to support cloud offerings. These costs may

17

reduce the operating margins we have previously achieved. Whether we are successful in this business model depends on our execution in a number of areas, including:

Over the long term we intend to invest in research and development activities, and these investments may achieve delayed, or lower than expected, benefits which could harm our operating results.

While we continue to focus on managing our costs and expenses, over the long term, we also intend to invest significantly in research and development activities as we focus on organic growth through internal innovation in each of our business segments. We believe that we must continue to dedicate a significant amount of resources to our research and development efforts to maintain our competitive position, and that the level of these investments will increase in future periods. We recognize the costs associated with these research and development investments earlier than the anticipated benefits, and the return on these investments may be lower, or may develop more slowly, than we expect. If we do not achieve the benefits anticipated from these investments, or if the achievement of these benefits is delayed, our operating results may be adversely affected.

Changes in industry structure and market conditions could lead to charges related to discontinuance of certain of our products or businesses and asset impairments.

In response to changes in industry structure and market conditions, we may be required to strategically reallocate our resources and consider restructuring, disposing of or otherwise exiting certain businesses. Any decision to limit investment in or dispose of or otherwise exit businesses may result in the recording of special charges, such as inventory and technology-related write-offs, workforce reduction costs, charges relating to consolidation of excess facilities or claims from third parties who were resellers or users of discontinued products. Our estimates with respect to the useful life or ultimate recoverability of our carrying basis of assets, including purchased intangible assets, could change as a result of such assessments and decisions. Although in certain instances our supply agreements allow us the option to cancel, reschedule and adjust our requirements based on our business needs prior to firm orders being placed, our loss contingencies may include liabilities for contracts that we cannot cancel, reschedule or adjust with contract manufacturers and suppliers.

Further, our estimates relating to the liabilities for excess facilities are affected by changes in real estate market conditions. Additionally, we are required to evaluate goodwill impairment on an annual basis and between annual evaluations in certain circumstances, and future goodwill impairment evaluations may result in a charge to earnings.

We may need to change our pricing models to compete successfully.

The intense competition we face, in addition to general and economic business conditions, can put pressure on us to change our prices. If our competitors offer deep discounts on certain solutions or develop products or support offerings that the marketplace considers more valuable, we may need to lower prices or offer other favorable terms in order to compete successfully. Any such changes may reduce margins and could adversely affect our operating results.

Any broad-based change to our prices and pricing policies could cause our revenues to decline or be delayed as our sales force implements and our customers adjust to the new pricing policies. We or our competitors may bundle solutions for promotional purposes or as a long-term go-to-market or

18

pricing strategy or provide guarantees of prices. These practices could, over time, significantly constrain the prices that we can charge for certain of our offerings.

Defects, disruptions or risks related to our cloud offerings could impair our ability to deliver our services and could expose us to liability, damage our brand and reputation or otherwise negatively impact our business.

Our cloud offerings may contain errors or defects that users identify after they begin using them that could result in unanticipated service interruptions, which could harm our reputation and our business. Since our customers use our cloud offerings for mission-critical protection from threats to electronic information, endpoint devices, and computer networks, any errors, defects, disruptions in service or other performance problems with our cloud offerings could significantly harm our reputation and may damage our customers’ businesses. If any such performance problems occur, customers could elect not to renew, or delay or withhold payment to us, we could lose future sales or customers may make warranty or other claims against us, which could result in an increase in our provision for doubtful accounts or warranty, an increase in collection cycles for accounts receivable or the expense and risk of litigation.

We currently serve our cloud-based customers from hosting facilities, including third-party hosting facilities, located across the globe. Damage to, or failure of, any significant element of these hosting facilities could result in interruptions in our service, which could harm our customers and expose us to liability. The occurrence of a natural disaster or an act of terrorism, a decision to close the facilities without adequate notice or other unanticipated problems could result in lengthy interruptions in the delivery of our solutions. Interruptions or failures in our service delivery could cause customers to terminate their subscriptions with us, could adversely affect our renewal rates, and could harm our ability to attract new customers. Our business would also be harmed if our customers believe that our cloud offerings are unreliable.

Our solutions are complex and operate in a wide variety of environments, systems, applications and configurations, which could result in failures of our solutions to function as designed.

Because we offer very complex solutions, undetected errors, failures or bugs may occur, especially when solutions are first introduced or when new versions are released. Our products are often installed and used in large-scale computing environments with different operating systems, system management software, and equipment and networking configurations, which may cause errors or failures in our solutions or may expose undetected errors, failures, or bugs in our solutions. Our customers’ computing environments are often characterized by a wide variety of standard and non-standard configurations that make pre-release testing for programming or compatibility errors very difficult and time-consuming. In addition, despite testing by us and others, errors, failures, or bugs may not be found in new solutions or releases until after they are delivered to customers. In the past, we have discovered software errors, failures, and bugs in certain of our solutions after their introduction and, in some cases, have experienced delayed or lost revenues as a result of these errors.

Errors, failures, or bugs in solutions released by us could result in negative publicity, damage to our brand and reputation, returns, loss of or delay in market acceptance of our products, loss of competitive position, or claims by customers or others. Many of our end-user customers use our solutions in applications that are critical to their businesses and may have a greater sensitivity to defects in our solutions than to defects in other, less critical, software products. In addition, if an actual or perceived breach of information integrity, security or availability occurs in one of our end-user customer’s systems, regardless of whether the breach is attributable to our products, the market perception of the effectiveness of our solutions could be harmed. Alleviating any of these problems could require significant expenditures, our capital and other resources and could cause interruptions,

19

delays, or cessation of our licensing, which could cause us to lose existing or potential customers and could adversely affect our operating results.

Our products, solutions, cloud offerings, systems and website may be subject to intentional disruption that could adversely impact our reputation and future sales.

Despite our precautions and significant ongoing investments to protect against security risks, data protection breaches, cyber-attacks and other intentional disruptions of our solutions, we expect to be an ongoing target of attacks specifically designed to impede the performance and availability of our offerings and harm our reputation as a company. Similarly, experienced computer programmers or other sophisticated individuals or entities may attempt to penetrate our network security or the security of our systems and website and misappropriate proprietary information or cause interruptions of our services, including the operation of our global civilian cyber intelligence threat network. While we invest and devote significant resources to maintain and continually enhance and update our methods to detect and alert us to such breaches, attacks and disruptions, these efforts may not be sufficient, even with rapid detection, to prevent the damage such a breach of our products, solutions, cloud offerings, systems, and website may cause.

Our inability to successfully recover from a disaster or other business continuity event could impair our ability to deliver our products and services and harm our business.

We are heavily reliant on our technology and infrastructure to provide our products and services to our customers. For example, we host many of our products using third-party data center facilities and we do not control the operation of these facilities. These facilities are vulnerable to damage, interruption or performance problems from earthquakes, hurricanes, floods, fires, power loss, telecommunications failures and similar events. They are also subject to break-ins, computer viruses, sabotage, intentional acts of vandalism and other misconduct. The occurrence of a natural disaster or an act of terrorism, a decision to close the facilities without adequate notice or other unanticipated problems could result in lengthy interruptions in the delivery of our products and services.

Furthermore, our business administration, human resources and finance services depend on the proper functioning of our computer, telecommunication and other related systems and operations. A disruption or failure of these systems or operations because of a disaster or other business continuity event could cause data to be lost or otherwise delay our ability to complete sales and provide the highest level of service to our customers. In addition, we could have difficulty producing accurate financial statements on a timely basis, which could adversely affect the trading value of our stock. Although we endeavor to ensure there is redundancy in these systems and that they are regularly backed-up, there are no assurances that data recovery in the event of a disaster would be effective or occur in an efficient manner, including the operation of our global civilian cyber intelligence threat network.

Any errors, defects, disruptions or other performance problems with our products and services could harm our reputation and may damage our customers’ businesses. For example, we may experience disruptions, outages and other performance problems due to a variety of factors, including infrastructure changes, human or software errors, capacity constraints due to an overwhelming number of users accessing our website simultaneously, fraud or security attacks. In some instances, we may not be able to identify the cause or causes of these performance problems within an acceptable period of time. Interruptions in our products and services, including the operation of our global civilian cyber intelligence threat network, could impact our revenues or cause customers to cease doing business with us. In addition, our business would be harmed if any of events of this nature caused our customers and potential customers to believe our services are unreliable. Our operations are dependent upon our ability to protect our technology infrastructure against damage from business

20

continuity events that could have a significant disruptive effect on our operations. We could potentially lose customer data or experience material adverse interruptions to our operations or delivery of services to our clients in a disaster recovery scenario.

We collect, use, disclose, store or otherwise process personal information, which subjects us to privacy and data security laws and contractual commitments, and our actual or perceived failure to comply with such laws and commitments could harm our business.

We collect, use, store or disclose (collectively, “process”) an increasingly large amount of personal information, including from employees and customers, in connection with the operation of our business, particularly in relation to our identity and fraud protection offerings. We process an increasingly high volume, variety and velocity of personal information as a result of our identity and fraud protection offerings that rely on large data repositories of personal information and consumer transactions. The personal information we process is subject to an increasing number of federal, state, local and foreign laws regarding privacy and data security, as well as contractual commitments. Any failure or perceived failure by us to comply with such obligations may result in governmental enforcement actions, fines, litigation, or public statements against us by consumer advocacy groups or others and could cause our customers to lose trust in us, which could have an adverse effect on our reputation and business. Additionally, changes to applicable privacy or data security laws could impact how we process personal information, and therefore limit the effectiveness of our solutions or our ability to develop new solutions. For example, the European Union General Data Protection Regulation, which becomes fully effective on May 25, 2018, imposes more stringent data protection requirements, and provides for greater penalties for noncompliance of up to the greater of € 20 million or four percent of worldwide annual revenues. Our customers may also accidentally disclose their passwords or store them on a device that is lost or stolen, creating the perception that our systems are not secure against third-party access.

Additionally, third parties with whom we work, such as vendors or developers, may violate applicable laws or our policies and such violations can place personal information of our customers at risk. This could have an adverse effect on our reputation and business. In addition, such third parties could be the target of cyberattack and other data breaches which could impact our systems or our customers’ records.

Our acquisitions and divestitures create special risks and challenges that could adversely affect our financial results.

As part of our business strategy, we may acquire or divest businesses or assets. These activities can involve a number of risks and challenges, including:

21

We have invested and continue to invest and devote significant resources in the integration of businesses we acquire, including our August 2016 acquisition of Blue Coat, Inc. (“Blue Coat”) and February 2017 acquisition of LifeLock, Inc. (“Life Lock”). The success of each acquisition depends in part on our ability to realize the anticipated business opportunities, including certain cost savings and operational efficiencies or synergies and growth prospects from integrating these businesses in an efficient and effective manner. If integration of our acquired businesses is not successful, we may not realize the potential benefits of an acquisition or suffer other adverse effects. To integrate acquired businesses, we must integrate and manage the personnel and business systems of the acquired operations. We also must effectively integrate the different cultures of acquired business organizations into our own in a way that aligns various interests, and may need to enter new markets in which we have no or limited experience and where competitors in such markets have stronger market positions. Moreover, to be successful, large complex acquisitions depend on large-scale product, technology and sales force integrations that are difficult to complete on a timely basis or at all, and may be more susceptible to the special risks and challenges described above.

In addition, we have in the past, and may in the future, divest businesses, product lines or assets. For example, in January 2016 we completed the sale of Veritas, and in October 2017 we divested our WSS and PKI solutions. These and similar initiatives may require significant separation activities that could result in the diversion of management’s time and attention, loss of employees, substantial separation costs and accounting charges for asset impairments.

Any of the foregoing, and other factors, could harm our ability to achieve anticipated levels of profitability or other financial benefits from our acquired or divested businesses, product lines or assets or to realize other anticipated benefits of divestitures or acquisitions.

If we fail to manage our sales and distribution channels effectively, or if our partners choose not to market and sell our solutions to their customers, our operating results could be adversely affected.

We sell our solutions to customers around the world through multi-tiered sales and distribution networks.

Sales through these different channels involve distinct risks, including the following:

Direct Sales . A significant portion of our revenues from enterprise products is derived from sales by our direct sales force to end-users. Risks associated with direct sales include:

Indirect Sales Channels . A significant portion of our revenues is derived from sales through indirect channels, including distributors that sell our products to end-users and other resellers. This channel involves a number of risks, including:

22

OEM Sales Channels. A portion of our revenues is derived from sales through our OEM partners that incorporate our products into, or bundle our products with, their products. Our reliance on this sales channel involves many risks, including:

If we fail to manage our sales and distribution channels successfully, these channels may conflict with one another or otherwise fail to perform as we anticipate, which could reduce our sales and increase our expenses as well as weaken our competitive position. Some of our distribution partners have experienced financial difficulties in the past, and if our partners suffer financial difficulties in the future because of general economic conditions or for other reasons, these partners may delay paying their obligations to us and we may have reduced revenues or collections that could adversely affect our operating results. In addition, reliance on multiple channels subjects us to events that could cause unpredictability in demand, which could increase the risk that we may be unable to plan effectively for the future, and could adversely affect our operating results.

We face heightened regulation in our Consumer Digital Safety segment, which could impede our ability to market and provide our solutions or adversely affect our business, financial position and results of operations.

We are subject to heightened regulation in our Consumer Digital Safety segment as a result of the sale of our identity and information protection products, which we began selling at the end of fiscal 2017 as a result of our acquisition of LifeLock , including a wide variety of federal, state, and local laws and regulations, including the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the Federal Trade Commission Act (“FTC Act”), and comparable state laws that are patterned after the FTC Act. Moreover, LifeLock entered into consent decrees and similar arrangements with the Federal Trade

23

Commission (the “FTC”) and 35 states’ attorneys general in 2010, and a settlement with the FTC in 2015 relating to allegations that certain of LifeLock’s advertising and marketing practices constituted deceptive acts or practices in violation of the FTC Act, which impose additional restrictions on the LifeLock business, including prohibitions against making any misrepresentation of “the means, methods, procedures, effects, effectiveness, coverage, or scope of” LifeLock’s identity theft protection services. Any of the laws and regulations that apply to our business are subject to revision or new or changed interpretations, and we cannot predict the impact of such changes on our business.

Additionally, the nature of our identity and information protection products subjects us to the broad regulatory, supervisory, and enforcement powers of the Consumer Financial Protection Bureau (CFPB) which may exercise authority with respect to our services, or the marketing and servicing of those services, by overseeing our financial institution or credit reporting agency customers and suppliers, or by otherwise exercising its supervisory, regulatory, or enforcement authority over consumer financial products and services.

Our international operations involve risks that could increase our expenses, adversely affect our operating results, and require increased time and attention of our management.

We derive a substantial portion of our revenues from customers located outside of the U.S. and we have significant operations outside of the U.S., including engineering, sales, customer support, and production. Our international operations are subject to risks in addition to those faced by our domestic operations, including:

24

A significant portion of our transactions outside of the U.S. is denominated in foreign currencies. Accordingly, our revenues and expenses will continue to be subject to fluctuations in foreign currency rates. We have in the past and expect in the future to be affected by fluctuations in foreign currency rates, especially if international sales continue to grow as a percentage of our total sales or our operations outside the U.S. continue to increase.

If we fail to accurately predict our manufacturing requirements and manage our supply chain we could incur additional costs or experience manufacturing delays that could harm our business.

We generally provide forecasts of our requirements to our supply chain partners on a rolling basis. If our forecast exceeds our actual requirements, a supply chain partner may assess additional charges or we may have liability for excess inventory, each of which could negatively affect our gross margin. If our forecast is less than our actual requirements, the applicable supply chain partner may have insufficient time or components to produce or fulfill our product requirements, which could delay or interrupt manufacturing of our products or fulfillment of orders for our products, and result in delays in shipments, customer dissatisfaction, and deferral or loss of revenue. Further, we may be required to purchase sufficient inventory to satisfy our future needs in situations where a component or product is being discontinued. If we fail to accurately predict our requirements, we may be unable to fulfill those orders or we may be required to record charges for excess inventory. Any of the foregoing could adversely affect our business, financial condition or results of operations.

We are dependent on original design manufacturers, contract manufacturers and third-party logistics providers to design and manufacture our hardware-based products and to fulfill orders for our hardware-based products.

We depend primarily on original design manufacturers (each of which is a third-party original design manufacturer for numerous companies) to co-design and co-develop the hardware platforms for our products. We also depend on independent contract manufacturers (each of which is a third-party contract manufacturer for numerous companies) to manufacture and fulfill our hardware-based products. These supply chain partners are not committed to design or manufacture our products, or to fulfill orders for our products, on a long-term basis in any specific quantity or at any specific price. In addition, certain of our products or key components of our products are currently manufactured by a single third-party supplier. There are alternative suppliers that could provide components, as our agreements do not provide for exclusivity or minimum purchase quantities, but the transition and qualification from one supplier to another could be lengthy, costly and difficult. Also, from time to time, we may be required to add new supply chain partner relationships or new manufacturing or fulfillment sites to accommodate growth in orders or the addition of new products. It is time consuming and costly to qualify and implement new supply chain partner relationships and new manufacturing or fulfillment sites, and such additions increase the complexity of our supply chain management. Our ability to ship products to our customers could be delayed, and our business and results of operations could be adversely affected if we fail to effectively manage our supply chain partner relationships; if one or more of our original design manufacturers does not meet our development schedules; if one or more of our independent contract manufacturers experiences delays, disruptions or quality control problems in manufacturing our products; if one or more of our third-party logistics providers experiences delays or disruptions or otherwise fails to meet our fulfillment schedules; or if we are required to add or replace original design manufacturers, independent contract manufacturers, third-party logistics providers or fulfillment sites.

25

In addition, these supply chain partners have access to certain of our critical confidential information and could wrongly disclose or misuse such information or be subject to a breach or other compromise that introduces a vulnerability or other defect in the products manufactured by our supply chain partners. While we take precautions to ensure that hardware manufactured by our independent contractors is reviewed, any espionage acts, malware attacks, theft of confidential information or other malicious cyber incidents perpetrated either directly or indirectly through our independent contractors, may compromise our system infrastructure, expose us to litigation and associated expenses and lead to reputational harm that could result in a material adverse effect on our financial condition and operating results. In addition, we are subject to risks resulting from the perception that certain jurisdictions, including China, do not comply with internationally recognized rights of freedom of expression and privacy and may permit labor practices that are deemed unacceptable under evolving standards of social responsibility. If manufacturing or logistics in these foreign countries is disrupted for any reason, including natural disasters, IT system failures, military or government actions or economic, business, labor, environmental, public health, or political issues, or if the purchase or sale of products from such foreign countries is prohibited or disfavored, our business, financial condition and results of operations could be adversely affected.

If we do not protect our proprietary information and prevent third parties from making unauthorized use of our products and technology, our financial results could be harmed.

Most of our software and underlying technology is proprietary. We seek to protect our proprietary rights through a combination of confidentiality agreements and procedures and through copyright, patent, trademark and trade secret laws. However, these measures afford only limited protection and may be challenged, invalidated or circumvented by third parties. Third parties may copy all or portions of our products or otherwise obtain, use, distribute, and sell our proprietary information without authorization.

Third parties may also develop similar or superior technology independently by designing around our patents. Our shrink-wrap license agreements are not signed by licensees and therefore may be unenforceable under the laws of some jurisdictions. Furthermore, the laws of some foreign countries do not offer the same level of protection of our proprietary rights as the laws of the U.S., and we may be subject to unauthorized use of our products in those countries. The unauthorized copying or use of our products or proprietary information could result in reduced sales of our products. Any legal action to protect proprietary information that we may bring or be engaged in with a strategic partner or vendor could adversely affect our ability to access software, operating system, and hardware platforms of such partner or vendor, or cause such partner or vendor to choose not to offer our products to their customers. In addition, any legal action to protect proprietary information that we may bring or be engaged in, could be costly, may distract management from day-to-day operations, and may lead to additional claims against us, which could adversely affect our operating results.

From time to time we are a party to lawsuits and investigations, which typically require significant management time and attention and result in significant legal expenses, and which could negatively impact our business, financial condition, results of operations, and cash flows.

We have initiated and been named as a party to lawsuits, including patent litigation, class actions and governmental claims and we may be named in additional litigation. The expense of initiating and defending, and in some cases settling, such litigation may be costly and divert management’s attention from the day-to-day operations of our business, which could adversely affect our business, results of operations, and cash flows. In addition, an unfavorable outcome in such litigation could result in significant fines, settlements, monetary damages or injunctive relief that could negatively impact our ability to conduct our business, results of operations, and cash flows.

26

Third parties claiming that we infringe their proprietary rights could cause us to incur significant legal expenses and prevent us from selling our products.

From time to time, third parties may claim that we have infringed their intellectual property rights, including claims regarding patents, copyrights, and trademarks. Because of constant technological change in the segments in which we compete, the extensive patent coverage of existing technologies, and the rapid rate of issuance of new patents, it is possible that the number of these claims may grow. In addition, former employers of our former, current, or future employees may assert claims that such employees have improperly disclosed to us confidential or proprietary information of these former employers. Any such claim, with or without merit, could result in costly litigation and distract management from day-to-day operations. If we are not successful in defending such claims, we could be required to stop selling, delay shipments of, or redesign our products, pay monetary amounts as damages, enter into royalty or licensing arrangements, or satisfy indemnification obligations that we have with some of our customers. We cannot assure you that any royalty or licensing arrangements that we may seek in such circumstances will be available to us on commercially reasonable terms or at all. We have made and expect to continue making significant expenditures to investigate, defend and settle claims related to the use of technology and intellectual property rights as part of our strategy to manage this risk.

In addition, we license and use software from third parties in our business. These third-party software licenses may not continue to be available to us on acceptable terms or at all, and may expose us to additional liability. This liability, or our inability to use any of this third-party software, could result in delivery delays or other disruptions in our business that could materially and adversely affect our operating results.

Changes to our effective tax rate could increase our income tax expense and reduce (increase) our net income (loss).

Our effective tax rate could be adversely affected by several factors, many of which are outside of our control, including:

We report our results of operations based on our determination of the aggregate amount of taxes owed in the tax jurisdictions in which we operate. From time to time, we receive notices that a tax authority in a particular jurisdiction believes that we owe a greater amount of tax than we have reported to such authority. We are regularly engaged in discussions and sometimes disputes with these tax authorities. If the ultimate determination of our taxes owed in any of these jurisdictions is for an amount in excess of the tax provision we have recorded or reserved for, our operating results, cash flows, and financial condition could be adversely affected.

27

We cannot predict our future capital needs and we may be unable to obtain financing, which could have a material adverse effect on our business, results of operations and financial condition.

Adverse economic conditions or a change in our business performance may make it more difficult to obtain financing for our operations, investing activities (including potential acquisitions or divestitures) or financing activities. Any required financing may not be available on terms acceptable to us, or at all. If we raise additional funds by obtaining loans from third parties, the terms of those financing arrangements may include negative covenants or other restrictions on our business that could impair our financial or operational flexibility, and would also require us to fund additional interest expense. If additional financing is not available when required or is not available on acceptable terms, we may be unable to successfully develop or enhance our software and services through acquisitions in order to take advantage of business opportunities or respond to competitive pressures, which could have a material adverse effect on our software and services offerings, revenues, results of operations and financial condition.

Failure to maintain our credit ratings could adversely affect our liquidity, capital position, ability to hedge certain financial risks, borrowing costs and access to capital markets.

Our credit risk is evaluated by the major independent rating agencies, and such agencies have in the past and could in the future downgrade our ratings. We cannot assure you that we will be able to maintain our current credit ratings, and any additional actual or anticipated changes or downgrades in our credit ratings, including any announcement that our ratings are under further review for a downgrade, may have a negative impact on our liquidity, capital position, ability to hedge certain financial risks and access to capital markets. In addition, changes by any rating agency to our outlook or credit rating could increase the interest we pay on outstanding or future debt.

There are risks associated with our outstanding and future indebtedness that could adversely affect our financial condition.

As of March 30, 2018, we had an aggregate of $5.1 billion of outstanding indebtedness that will mature in calendar years 2018 through 2025, including approximately $4.0 billion in aggregate principal amount of existing senior notes and $1.1 billion of outstanding term loans under our senior credit facilities, and we may incur additional indebtedness in the future and/or enter into new financing arrangements. In addition, as of March 30, 2018, we had $1.0 billion available for borrowing under our revolving credit facility. Our ability to meet expenses, to remain in compliance with the covenants under our debt instruments and to pay interest and repay principal for our substantial level of indebtedness depends on, among other things, our operating performance, competitive developments and financial market conditions, all of which are significantly affected by financial, business, economic and other factors. We are not able to control many of these factors. Accordingly, our cash flow may not be sufficient to allow us to pay principal and interest on our debt, including the notes, and meet our other obligations.

Our substantial level of indebtedness could have important consequences, including the following:

28

There can be no assurance that we will be able to manage any of these risks successfully.

In addition, we conduct a significant portion of our operations through our subsidiaries, which are generally not guarantors of our debt. Accordingly, repayment of our indebtedness will be dependent in part on the generation of cash flow by our subsidiaries and their ability to make such cash available to us by dividend, debt repayment or otherwise. In general, our subsidiaries will not have any obligation to pay amounts due on our debt or to make funds available for that purpose. Our subsidiaries may not be able to, or may not be permitted to, make distributions to enable us to make payments in respect of our indebtedness. Each subsidiary is a distinct legal entity, and under certain circumstances legal and contractual restrictions may limit our ability to obtain cash from our subsidiaries. In the event that we do not receive distributions from our subsidiaries, we may be unable to make the required principal and interest payments on our indebtedness.

Our existing credit agreements impose operating and financial restrictions on us.

The existing credit agreements contain covenants that limit our ability and the ability of our restricted subsidiaries to:

All of these covenants may adversely affect our ability to finance our operations, meet or otherwise address our capital needs, pursue business opportunities, react to market conditions or otherwise restrict activities or business plans. A breach of any of these covenants could result in a default in respect of the related indebtedness. If a default occurs, the relevant lenders could elect to declare the indebtedness, together with accrued interest and other fees, to be immediately due and payable and, to the extent such indebtedness is secured in the future, proceed against any collateral securing that indebtedness.

Some of our products contain “open source” software, and any failure to comply with the terms of one or more of these open source licenses could negatively affect our business.

Certain of our products are distributed with software licensed by its authors or other third parties under so-called “open source” licenses, which may include, by way of example, the GNU General Public License, GNU Lesser General Public License, the Mozilla Public License, the BSD License, and the Apache License.

29

Some of these licenses contain requirements that we make available source code for modifications or derivative works we create based upon the open source software, and that we license such modifications or derivative works under the terms of a particular open source license or other license granting third parties certain rights of further use. By the terms of certain open source licenses, we could be required to release the source code of our proprietary software if we combine our proprietary software with open source software in a certain manner. In addition to risks related to license requirements, usage of open source software can lead to greater risks than use of third party commercial software, as open source licensors generally do not provide warranties or controls on origin of the software. We have established processes to help alleviate these risks, including a review process for screening requests from our development organizations for the use of open source, but we cannot be sure that all open source is submitted for approval prior to use in our products. In addition, many of the risks associated with usage of open source cannot be eliminated, and could, if not properly addressed, negatively affect our business.

Our contracts with the U.S. government include compliance, audit and review obligations. Any failure to meet these obligations could result in civil damages and/or penalties being assessed against us by the government.

We sell products and services through government contracting programs directly and via partners, though we no longer hold a GSA contract. In the ordinary course of business, sales under these government contracting programs may be subject to audit or investigation by the U.S. government. Noncompliance identified as a result of such reviews (as well as noncompliance identified on our own) could subject us to damages and other penalties, which could adversely affect our operating results and financial condition.

We believe that our existing facilities are adequate for our current needs and that the productive capacity of our facilities is substantially utilized.