Want to see ROK full AI Analyst Report?
Rockwell Automation (ROK) Risk Analysis
Risk Overview Q2, 2026
Source: the company's latest filing for the period ended Jun 30, 2026, filed Aug 04, 2026
Risk Change Over Time
- Cyber Security - Risk 1Product and Services Security
Our hardware and software products, services and solutions are used by our customers in applications that may be subject to information theft, tampering, sabotage, or cyber-attacks. Careless or malicious actors could cause a customer's process to be disrupted or could cause equipment to operate in an improper manner, resulting in harm to people or property. In April 2026, U.S. government agencies issued a joint cybersecurity advisory warning of active exploitation by Iranian-affiliated threat actors of internet-facing operational technology (OT) devices, including programmable logic controllers, across multiple U.S. critical infrastructure sectors. According to this advisory, threat actors have successfully accessed and manipulated industrial control systems by leveraging legitimate engineering software and targeting unsecured customer network connections, resulting in operational disruption, unauthorized modification of control logic, and manipulation of human machine interface and supervisory control and data acquisition displays. The advisory further indicates that this activity is ongoing, has escalated since at least March 2026, and may expand to additional OT products and vendors due to widespread deployment of industrial automation technologies. To a significant extent, the security of our customers' systems depends on how those systems are designed, installed, protected, configured, updated, and monitored, and much of this is typically outside our control. In addition, both software and hardware supply chains can introduce security vulnerabilities into many technologies across the industry. Past global cyber-attacks have also been perpetuated by compromising software updates in widely used software products, posing the risk that vulnerabilities or malicious content could be inserted into our products. In some cases, it is possible that malware attacks could spread throughout the supply chain, moving from one company to the next via authorized network connections. We have designed a Secure Development Lifecycle Program that incorporates appropriate security activities into the necessary development and support practices for our commercial product offerings. The Secure Development Lifecycle Program is audited annually by third-party firms. Our Third-Party Risk Program manages risk posed by our suppliers used in the development of our commercial product offerings. While we continue to improve the security attributes of our commercial product offerings, we can reduce risk, but not eliminate it.
- Cyber Security - Risk 2Enterprise Security
Our business uses technology resources across a dispersed, global basis for a variety of functions including development, engineering, manufacturing, sales, accounting and financial reporting, and human resources. Our vendors, partners, employees, and customers have access to, and share, information across multiple locations via various digital technologies. In addition, we rely on partners and vendors, including cloud providers, for a wide range of products and outsourced activities as part of our internal IT infrastructure and our commercial product offerings. Secure connectivity is important to these ongoing operations. Also, our partners and vendors frequently have access to our confidential information as well as confidential information about our customers, employees, and others. We design our security architecture to reduce the risk that a compromise of our partners' infrastructure, for example a cloud platform, could lead to a compromise of our internal systems or customer networks. In addition, our Third-Party Risk Program manages risk posed by our suppliers that have access to our confidential information, systems, or network, but this risk cannot be eliminated and vulnerabilities at third parties could result in unknown risk exposure to our business and information. In addition, cybersecurity threats may pose a significant risk to our third-party partners and could have a material adverse impact on their businesses, operations, products, and services that we use in our day-to-day operations.
- Technology - Risk 3Artificial Intelligence
As we broaden the application of AI across product development, manufacturing, customer operations, and enterprise operations, we face evolving risks related to safety, data governance, regulatory compliance, intellectual property, and ethical use. Integrating AI into our offerings and internal processes may lead to unintended consequences, including biased outputs, inaccurate decision-making, and increased vulnerability to adversarial attacks, that could significantly impact our business, reputation, and financial results.
Risk Highlights Q2, 2026
Risk Word Cloud
Risk Factors Full Breakdown - Total Risks 20
- Economy & Political Environment - Risk 1Adverse changes in macroeconomic or industry conditions may result in decreases in our sales and profitability.
We are subject to macroeconomic cycles and when recessions occur, we may experience reduced, canceled or delayed orders, payment delays or defaults, supply chain disruptions, or other adverse events as a result of the economic challenges faced by our customers, prospective customers, and suppliers. As our distributor partners and customers work to manage working capital and inventory levels, we may experience volatility in orders. Demand for our hardware and software products, solutions, and services is sensitive to changes in levels of production and the financial performance of major industries that we serve. As economic activity slows, credit markets tighten, or sovereign debt concerns arise, companies tend to reduce their levels of capital spending, which could result in decreased demand for our hardware and software products, solutions, and services. As a global company operating in over 100 countries, we face risks related to foreign currency markets. A strengthening U.S. Dollar (USD) may adversely impact our sales and profitability related to business we do outside the U.S. Economic, political, regulatory, and compliance risks, particularly in emerging markets, can restrict our ability to exchange, transact, or pay dividends with foreign currencies we hold. See Item 7A for additional information about foreign currency risks. We conduct significant operations outside the United States and hold derivative instruments that we designate as hedges of certain net investment positions in our foreign subsidiaries. While these instruments are intended to mitigate the impact of exchange rate volatility, our hedging strategies may not be effective. Foreign currency exchange rate fluctuations could result in gains or losses on the derivative instruments that are not fully offset by corresponding changes in the value of our foreign net investments. In addition, the use of hedge accounting is subject to complex accounting requirements, and the inability to qualify for or maintain hedge accounting treatment could result in increased volatility in our reported earnings. Furthermore, counterparties to our derivative contracts could default on their obligations, exposing us to potential losses. Any of these events could adversely affect our financial condition, results of operations, and cash flows.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.