v3.25.4
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Dec. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]
We have a cybersecurity program for assessing, identifying, and managing material risks from cybersecurity threats. This includes compliance with the EISP. Our cybersecurity program performance and effectiveness are also frequently assessed and audited internally and by third parties.
We believe our cybersecurity program is reasonably designed to materially protect the integrity and availability of our information and technology. This program addresses information security governance, employee security and data privacy awareness and training, relevant access and end-point security, vulnerability management, penetration testing, security monitoring and incident response, and recovery from operational disruption. We use technologies to optimize our security risk detection and response capabilities, in addition to access controls and anti-malware protections. Data protection technology is deployed and monitored. We believe our practices align with the NIST Cybersecurity Framework in meeting and exceeding the industry average in cybersecurity practice.
When we engage third parties, we have policies and processes to assess and govern their access and services, and manage the related risks affecting Brookfield's information and technology. For example, all third-party access must be authorized and have a legitimate business need. Prior to authorization and granting access, the terms and conditions of such access must be agreed to as part of a formal agreement or contract. In addition, all authorized third-party access must be limited, monitored and controlled as appropriate.
In addition, all employees regularly undergo mandatory continuing cybersecurity training. Employees in higher-risk functions receive additional training and cybersecurity awareness education. Audits, cybersecurity simulations and employee testing results indicate that our program is effective in protecting our information. The effectiveness of these programs is evaluated regularly through both internal and third-party audits.
In 2025, we undertook the following initiatives: completed a complex network transition to Secure Access Service Edge (SASE) network technology with enhanced zero-trust based security implemented globally; further enhanced our vulnerability management and attack surface reduction capabilities; continued improving our data protection by implementing ransomware protected backup technology; continued mandatory cybersecurity education and increasingly difficult phishing simulations for all employees.
Our systems face cybersecurity risks, and we have in the past experienced threats to our data and systems. However, to date, these incidents have not had a material impact on our business strategy, results of operations, or financial condition. We can provide no assurance that we will not experience any material cybersecurity threats or incidents in the future. See “Part I—Item 1A. Risk Factors—Failure to maintain the security of our information and technology systems could have a material adverse effect on us”.
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block]
We believe our cybersecurity program is reasonably designed to materially protect the integrity and availability of our information and technology. This program addresses information security governance, employee security and data privacy awareness and training, relevant access and end-point security, vulnerability management, penetration testing, security monitoring and incident response, and recovery from operational disruption. We use technologies to optimize our security risk detection and response capabilities, in addition to access controls and anti-malware protections. Data protection technology is deployed and monitored. We believe our practices align with the NIST Cybersecurity Framework in meeting and exceeding the industry average in cybersecurity practice.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false