Allstate added 20 new risks including geopolitical conflicts and strategic execution priorities, while modifying 53 existing disclosures on macro and operational impacts.
AI never invents facts. It only interprets the deterministic diff shown below.
Classification is based on semantic text similarity scoring and may include approximations. “No match” means no high-confidence textual match was found — not necessarily that a section was removed.
The Enterprise Risk and Return Council has delegated the power and authority to manage cybersecurity risks to the Information Security Council (“ISC”). The CISO chairs the ISC, with senior management representation from across the Company including representatives from Privacy,…
The Enterprise Risk and Return Council has delegated the power and authority to manage cybersecurity risks to the Information Security Council (“ISC”). The CISO chairs the ISC, with senior management representation from across the Company including representatives from Privacy, Legal and Technology. The ISC monitors, makes mitigating decisions about, and escalates information security risks that are outside the Company’s established risk tolerance. Additionally, it provides executive sponsorship of information security controls and oversees the development and review of the information security policy and enterprise security standards.
Allstate evaluates candidates for information security positions based on experience and qualifications. Senior leadership, team leads and subject matter experts conduct interviews to identify top candidates who represent the technical and behavioral acumen required of cybersecurity professionals at Allstate. Allstate provides cybersecurity employees with continuing education associated with their roles and responsibilities.
Information Security Program Allstate has implemented a robust Information Security Program to manage material risks from cybersecurity threats. The Company’s Program uses a risk-based, defense-in-depth approach to identify, assess and manage cybersecurity risks to the Company’s information assets and systems, enabling the business to achieve its objectives. The Information Security Program is aligned with industry best practices and standards including the ISO 27001/27002 standards, the Control Objectives for Information and Related Technologies
The Allstate Corporation 31
The Allstate Corporation 31
The Allstate Corporation 31
2023 Form 10-K Part I - Item 1A. Risk Factors and Other Disclosures
2023 Form 10-K Part I - Item 1A. Risk Factors and Other Disclosures
Framework and the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”).
Allstate conducts risk and control assessments to proactively identify and assess the likelihood and impact of specific information security risks using the NIST CSF. The Company conducts these risk assessments at multiple levels of scope, including applications, business processes, business units, and enterprise. Allstate documents the identified risks, tracking them based on potential impact and the likelihood that harm might occur. The Company manages the risks in accordance with its Information Security Program.
Allstate’s Information Security Program outlines the responsibilities and expectations for the security of Allstate information systems. The Program includes standards, policies and procedures requiring the implementation of technical, administrative and physical controls to manage the risk to Allstate information and systems. These standards, policies and procedures cover industry-standard information security domains, including risk assessment, third-party supplier risk management, vulnerability management, identity and access management, application security, network security, cybersecurity awareness training, encryption and incident management.
Allstate conducts periodic assessments, designed to evaluate effectiveness of implemented controls. The Company performs vulnerability scans and penetration tests to assess controls and proactively identify vulnerabilities for prioritization and remediation. Findings are managed and tracked in accordance with Allstate’s governance, risk and compliance standards.
Dedicated personnel support information security operations 24 hours per day, seven days per week. Allstate’s incident response program is designed to detect, respond and recover from a range of cybersecurity-related incidents.
Item 2. Properties
In Illinois, the Company has 11 locations totaling approximately 480 thousand square feet of office space.
In North America, we operate from approximately 780 retail stores, administrative, data processing, claims handling and other support facilities that total 710 thousand square feet owned and 4.3 million square feet leased.
Outside North America, we own one and lease two properties in Northern Ireland comprising approximately 200 thousand square feet. We also have two leased facilities in India for approximately 500 thousand square feet and two leased facilities in London for approximately seven thousand square feet.
The locations where Allstate exclusive agencies operate in the U.S. are typically leased by the agencies.
Item 3. Legal Proceedings
Information required for Item 3 is incorporated by reference to the discussion under the heading “Regulation and compliance” and under the heading “Legal and regulatory proceedings and inquiries” in Note 15 of the consolidated financial statements.
Item 4. Mine Safety Disclosures
Not applicable.
Framework and the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”).
Allstate conducts risk and control assessments to proactively identify and assess the likelihood and impact of specific information security risks using the NIST CSF. The Company conducts these risk assessments at multiple levels of scope, including applications, business processes, business units, and enterprise. Allstate documents the identified risks, tracking them based on potential impact and the likelihood that harm might occur. The Company manages the risks in accordance with its Information Security Program.
Allstate’s Information Security Program outlines the responsibilities and expectations for the security of Allstate information systems. The Program includes standards, policies and procedures requiring the implementation of technical, administrative and physical controls to manage the risk to Allstate information and systems. These standards, policies and procedures cover industry-standard information security domains, including risk assessment, third-party supplier risk management, vulnerability management, identity and access management, application security, network security, cybersecurity awareness training, encryption and incident management.
Allstate conducts periodic assessments, designed to evaluate effectiveness of implemented controls. The Company performs vulnerability scans and penetration tests to assess controls and proactively identify vulnerabilities for prioritization and remediation. Findings are managed and tracked in accordance with Allstate’s governance, risk and compliance standards.
Dedicated personnel support information security operations 24 hours per day, seven days per week. Allstate’s incident response program is designed to detect, respond and recover from a range of cybersecurity-related incidents.
Framework and the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”).
Allstate conducts risk and control assessments to proactively identify and assess the likelihood and impact of specific information security risks using the NIST CSF. The Company conducts these risk assessments at multiple levels of scope, including applications, business processes, business units, and enterprise. Allstate documents the identified risks, tracking them based on potential impact and the likelihood that harm might occur. The Company manages the risks in accordance with its Information Security Program.
Allstate’s Information Security Program outlines the responsibilities and expectations for the security of Allstate information systems. The Program includes standards, policies and procedures requiring the implementation of technical, administrative and physical controls to manage the risk to Allstate information and systems. These standards, policies and procedures cover industry-standard information security domains, including risk assessment, third-party supplier risk management, vulnerability management, identity and access management, application security, network security, cybersecurity awareness training, encryption and incident management.
Allstate conducts periodic assessments, designed to evaluate effectiveness of implemented controls. The Company performs vulnerability scans and penetration tests to assess controls and proactively identify vulnerabilities for prioritization and remediation. Findings are managed and tracked in accordance with Allstate’s governance, risk and compliance standards.
Dedicated personnel support information security operations 24 hours per day, seven days per week. Allstate’s incident response program is designed to detect, respond and recover from a range of cybersecurity-related incidents.
Item 2. Properties
In Illinois, the Company has 11 locations totaling approximately 480 thousand square feet of office space.
In North America, we operate from approximately 780 retail stores, administrative, data processing, claims handling and other support facilities that total 710 thousand square feet owned and 4.3 million square feet leased.
Outside North America, we own one and lease two properties in Northern Ireland comprising approximately 200 thousand square feet. We also have two leased facilities in India for approximately 500 thousand square feet and two leased facilities in London for approximately seven thousand square feet.
The locations where Allstate exclusive agencies operate in the U.S. are typically leased by the agencies.
Item 3. Legal Proceedings
Information required for Item 3 is incorporated by reference to the discussion under the heading “Regulation and compliance” and under the heading “Legal and regulatory proceedings and inquiries” in Note 15 of the consolidated financial statements.
Item 4. Mine Safety Disclosures
Not applicable.
Item 2. Properties
In Illinois, the Company has 11 locations totaling approximately 480 thousand square feet of office space.
In North America, we operate from approximately 780 retail stores, administrative, data processing, claims handling and other support facilities that total 710 thousand square feet owned and 4.3 million square feet leased.
Outside North America, we own one and lease two properties in Northern Ireland comprising approximately 200 thousand square feet. We also have two leased facilities in India for approximately 500 thousand square feet and two leased facilities in London for approximately seven thousand square feet.
The locations where Allstate exclusive agencies operate in the U.S. are typically leased by the agencies.
Item 3. Legal Proceedings
Information required for Item 3 is incorporated by reference to the discussion under the heading “Regulation and compliance” and under the heading “Legal and regulatory proceedings and inquiries” in Note 15 of the consolidated financial statements.
Item 4. Mine Safety Disclosures
Not applicable.
32 www.allstate.com
32 www.allstate.com
32 www.allstate.com
Part II
Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities
As of January 31, 2024, there were 56,831 holders of record of The Allstate Corporation’s common stock. The principal market for the common stock is the New York Stock Exchange, where our common stock trades under the trading symbol “ALL”. Our common stock is also listed on the Chicago Stock Exchange.
Common stock performance graph
The following performance graph compares the cumulative total shareholder return on Allstate common stock for a five-year period (December 31, 2018 to December 31, 2023) with the cumulative total return of the S&P Property and Casualty Insurance Index (S&P P/C) and the S&P 500 stock index.
And 77 more changes in the full comparison.
The complete historical comparison (2024 vs 2023) is available on the Pro plan.
Get Pro access Already a Pro subscriber? View full diff →Source filings: Find the 2024 10-K for ALL on SEC EDGAR · Find the 2023 10-K for ALL on SEC EDGAR