Search every filing
2,476,630 paragraphs from each company's last two 10-Ks, last four 10-Qs and a year of 8-Ks with press releases. All words must appear. Put a phrase in "quotes".
Get an email when a company on your watchlist files a new paragraph with these words (add them under "Words to watch for").
cybersecurity incidents or suspicions of cybersecurity incidents or threats. Further, we maintain a cybersecurity incident
Read in the filing ↗
A cybersecurity incident response plan, and incident response policy to respond to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 14, 2025
• Incident Response. We maintain a Cybersecurity Operations Center that is dedicated to monitoring for cybersecurity threats to our systems and responding to potential cybersecurity incidents. We also maintain cybersecurity incident response plans that establish a cross-functional incident response team and processes to guide our response to cybersecurity incidents, including processes for reporting and escalating cybersecurity incidents to senior management and the Audit Committee or the Board, as appropriate. We conduct tabletop exercises regularly to test our incident response processes.
Read in the filing ↗ Also in 10-K of Feb 20, 2025
Our CISO and other members of senior management are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan. If a cybersecurity incident is determined to be a material cybersecurity incident, our incident response plan and cybersecurity disclosure controls and procedures define the process to disclose such material cybersecurity incident.
Read in the filing ↗ Also in 10-K of Dec 19, 2024
• Cybersecurity incident response plan and testing: We have a cybersecurity incident response plan and dedicated teams to respond to cybersecurity incidents. When a cybersecurity incident occurs or we identify a vulnerability, we have cross-functional teams that are responsible for leading the initial assessment of priority and severity, and external experts may also be engaged as appropriate. GE Aerospace’s cybersecurity teams respond to incidents and seek to improve our cybersecurity incident management plan through periodic tabletops or simulations.
Read in the filing ↗ Also in 10-K of Feb 3, 2025
cybersecurity incident. In the event there is a cyber security incident, an Incident Response Team will assess the cybersecurity
Read in the filing ↗
We also maintain a privacy and cybersecurity incident response program to prepare for, detect, respond to, and recover from cybersecurity incidents, which include processes to triage, assess severity for, escalate, contain, investigate, and remediate the incident, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. Further, we conduct periodic tabletop exercises to test and fortify the controls of our cybersecurity incident response program. The incident response team assesses the severity and priority of incidents on a rolling basis, with escalations of higher severity cybersecurity incidents provided to our management team. If a cybersecurity incident is determined to be a potentially material cybersecurity incident, our disclosure controls and procedures define the steps to determine materiality and disclose such a material cybersecurity incident.
Read in the filing ↗ Also in 10-K of Mar 11, 2025
The Company has a dedicated cybersecurity incident response team responsible for managing and coordinating the Company’s cybersecurity incident response efforts. This team collaborates closely with other internal teams as well as with external experts such as legal advisors, communication specialists, and other key stakeholders, as appropriate, in identifying, protecting from, detecting, responding to, and recovering from cybersecurity incidents. Cybersecurity incidents that meet certain thresholds are escalated to the Cybersecurity Leaders and cross-functional teams on an as-needed basis for support and guidance. Additionally, this team tracks cybersecurity incidents to help identify and analyze them. The Company maintains a cybersecurity incident response plan to prepare for and respond to cybersecurity incidents. The incident response plan includes standard processes for reporting and
Read in the filing ↗ Also in 10-K of Feb 7, 2025
A cybersecurity operations team is in place to regularly monitor the environment for cybersecurity threats and incidents. We have incident response plans to assess and manage cybersecurity incidents. These plans include escalation procedures based on the nature and severity of the incident. The most critical incidents, which could be material to us, are escalated to executive management and the Enterprise Cybersecurity MRG. In addition, cyber insurance is in place, which may mitigate the impact of cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 11, 2025
• Cybersecurity Incident Monitoring and Response - Incident response plans that address our response to a cybersecurity incident, utilizing a cross-functional approach.
Read in the filing ↗ Also in 10-K of Feb 13, 2025
• A cybersecurity incident response plan and processes for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Aug 8, 2025
• A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents;
Read in the filing ↗ Also in 10-K of Feb 4, 2025
cybersecurity incidents, which may make us more vulnerable to cybersecurity incidents as well.
Read in the filing ↗
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Dec 6, 2024
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Mar 3, 2025
Incident Response and Recovery Planning: The Company has established and maintains incident response and recovery plans that address the Company’s response to a cybersecurity incident and the recovery from a cybersecurity incident, and such plans are assessed and evaluated on a regular basis. All meaningful cybersecurity incidents are reported to the Company’s legal department by our cybersecurity team.
Read in the filing ↗ Also in 10-K of Feb 18, 2025
NEE, including FPL, operates a cybersecurity operations center and has cyber threat intelligence capability to identify, monitor, detect and respond to cybersecurity threats which is led by a cybersecurity incident response team. NEE, including FPL, uses these resources, and leverages third-party resources, to identify cybersecurity threats and monitor for anomalies that may result in cybersecurity incidents on its systems, and monitors for impacts to its vendors or suppliers. Assessment of incidents includes, but is not limited to, analysis of the urgency and operational or business impact of an incident and the status and effectiveness of incident defenses. NEE, including FPL, invests in personnel and technologies with the objective of limiting the frequency and impact of cybersecurity incidents. Following documented cybersecurity incident response procedures, the cybersecurity incident response team escalates information about cybersecurity incidents depending on circumstances to oversight committees and personnel charged with managing specific aspects of cybersecurity risk, including, among others, the Cybersecurity and Resiliency Committee, the Cybersecurity Governance Executive Committee and NEE's Board of Directors.
Read in the filing ↗ Also in 10-K of Feb 14, 2025
We maintain a centralized incident response process with a third-party forensic partner on retainer. In addition, we have cybersecurity insurance policies in place. Roper maintains a Cybersecurity Incident Response Plan (“CSIRP”), which requires each Roper business to designate a Cybersecurity Incident Response Team that is responsible for receiving, reviewing, and responding to cybersecurity incident reports and activities. Cybersecurity incidents are required to be promptly reported to the Roper cybersecurity team, who then monitors such incidents through their resolution. We work on security awareness with our employees throughout the year with annual cybersecurity training and monthly simulated phishing campaigns to better identify and report unusual behavior and to mitigate the likelihood and impact of possible cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 24, 2025
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 5, 2025
a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 25, 2025
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 5, 2025
• a cybersecurity incident response plan and Security Operations Center to respond to cybersecurity incidents;
Read in the filing ↗ Also in 10-K of Feb 20, 2025
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 26, 2025
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Jan 31, 2025
a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 25, 2025
• a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and
Read in the filing ↗
The CISO leads Abbott’s cybersecurity strategy and program and its cybersecurity and privacy incident response team that is responsible for monitoring the detection of cybersecurity incidents and executing Abbott’s cybersecurity incident response process, as needed. Pursuant to the process, the team is responsible for the investigation and resolution of cybersecurity incidents, including reporting to an Abbott senior management-level committee on detection, mitigation, and remediation of significant cybersecurity incidents. The CISO reports to the CIO, who has overall responsibility for the cybersecurity program and organization.
Read in the filing ↗ Also in 10-K of Feb 21, 2025
• Defense and On-going Monitoring - Our SOC is responsible for the on-going monitoring and analysis of cybersecurity threats to the Company. The SOC evaluates cybersecurity incidents according to the Company’s cyber incident response plan, appropriate cybersecurity incident playbook, and crisis communications cybersecurity incident plan. The Company also utilizes endpoint detection and response services as well as data forensic investigation services for additional capability and timely assistance with potential cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 13, 2025
Response and Recovery. In the event of a cybersecurity incident, our initial focus is to contain the cybersecurity incident as quickly as possible consistent with our incident response plan. Once a cybersecurity incident is contained, we focus on remediation and recovery activities, which depend on the nature of the cybersecurity incident. We have relationships with third-party providers to assist with cybersecurity containment and remediation efforts, including for example, forensic investigations and incident response management. If a cybersecurity incident materially impacts us, or is expected to materially impact us, we promptly notify senior management, the Franklin Board of Directors (“Board”) and/or Franklin Audit Committee, as appropriate based on the severity of the incident. Our response plan also addresses engagement with appropriate individuals and committees with respect to disclosure determinations related to cybersecurity incidents. We review and, if necessary, update our cybersecurity incident response plan at least annually.
Read in the filing ↗ Also in 10-K of Nov 10, 2025
Our cybersecurity program focuses on (i) preventing and preparing for cybersecurity incidents, (ii) detecting and analyzing cybersecurity incidents, and (iii) containing, eradicating, recovering from, and reporting cybersecurity events.
Read in the filing ↗ Also in 10-K of Feb 24, 2025
PTC maintains a formal Cybersecurity Incident Response Policy to address cybersecurity incidents. The Policy is tested on a regular basis, including a continuous improvement program involving periodic tabletop exercises. Cybersecurity incident handling is managed by individual organizations with cybersecurity responsibility and monitored/guided by applicable corporate functions. All Cybersecurity Incident Response Plans under the Policy are based on industry standards, such as the NIST Computer Security Incident Handling Guide - Special Publication 800-61.
Read in the filing ↗
cybersecurity incidents are escalated within the Company. Cybersecurity incidents that meet specified criteria for financial,
Read in the filing ↗
In the event of a cybersecurity incident, we maintain incident response plans to investigate, classify, respond to, and manage cybersecurity incidents that may compromise the availability or integrity of our information systems, network resources, or data. In accordance with the incident response plans, cross-functional management teams assess and assign a threat level to each cybersecurity incident. A cybersecurity incident (or incidents, if aggregated together) assigned a critical threat level is escalated to the Critical Threat Committee for review.
Read in the filing ↗ Also in 10-K of Feb 11, 2025
evaluates cybersecurity incidents, escalating certain cybersecurity incidents to the CISO according to protocol. The CISO is
Read in the filing ↗
a cybersecurity incident response plan and Security Operations Center (“SOC”) to respond to cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 21, 2025
Pursuant to our Cybersecurity Incident Response Plan ("CIRP"), when a cybersecurity event has been identified through our detection processes, it is assessed in order to determine whether the event is a cybersecurity incident. Our CIRP designates the primary manager of a cybersecurity incident, describes the parties who should be informed about the incident, and outlines the processes for containment, eradication, recovery, and resolution of the incident. Depending on the severity and impact of a cybersecurity threat, members of our senior management team and Board of Directors are notified of an incident and kept informed of the mitigation and remediation of the incident. We are not aware of any material cybersecurity incidents in the last three years.
Read in the filing ↗ Also in 10-K of Feb 6, 2025
In addition to oversight by the Board of Directors, several cross-functional management teams focus on cybersecurity risk and report any identified cybersecurity incidents. Each of the Company's divisions has a Division Cyber Incident Response Team and protocols in place to communicate cybersecurity incidents to a central Cyber Incident Response Team. The Cyber Incident Response Team is led by the Chief Information Security Officer ("CISO") and is responsible for the initial assessment of cybersecurity incidents and oversight of any incident response.
Read in the filing ↗ Also in 10-K of Feb 14, 2025
• A cybersecurity incident response plan and scenario-specific playbooks for responding to various types of cybersecurity incidents;
Read in the filing ↗ Also in 10-K of Sep 3, 2025
or suspicions of cybersecurity incidents or threats. Further, we maintain a cybersecurity incident response plan, which is
Read in the filing ↗
• a cybersecurity incident response plan that includes procedures for responding to, escalating, and reporting cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 26, 2025
▪ cybersecurity incident response plans that include procedures for responding to and reporting, if applicable, certain cybersecurity incidents
Read in the filing ↗ Also in 10-K of Feb 25, 2025
• Cybersecurity incident response plan and testing. We have a cybersecurity incident response plan and a dedicated team to
Read in the filing ↗ Also in 10-K of Feb 6, 2025
respond to cybersecurity incidents. When a cybersecurity incident occurs or a vulnerability is identified, GE Vernova has cross-
Read in the filing ↗ Also in 10-K of Feb 6, 2025
Our cybersecurity risk management program includes a cybersecurity incident response plan (“CIRP”). Corning’s CIRP provides the Company with the capability for responding, reporting and remediating cybersecurity incidents. It has been established to reduce or minimize the impact of cybersecurity incidents on the Company’s networks, IT systems, users or business processes. Corning’s Cyber Security Incident Response Team, led by the Chief Information Security Officer (“CISO”), handles the response process for all cybersecurity incidents and Corning’s Corporate Crisis Response Team (“CCRT”) is mobilized and involved in any significant incidents.
Read in the filing ↗ Also in 10-K of Feb 13, 2025
Our cybersecurity team meets frequently to monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents. In the event of a cybersecurity incident, we have an incident response plan that governs our immediate response including detection, escalation, assessment, management and remediation. As part of incident response, the cybersecurity team will also coordinate with external advisors and other key stakeholders as needed. The cybersecurity team routinely tests this plan across the organization to validate the procedures for appropriately escalating potentially material cybersecurity risks and incidents. Also, we provide an annual, mandatory cybersecurity training program for employees that is intended to help them understand cybersecurity risks and comply with our cybersecurity policies.
Read in the filing ↗ Also in 10-K of Jul 17, 2025
potential vulnerabilities and improve decision-making, prioritization, monitoring, and overall response effectiveness. As part of our incident response plan, the Cybersecurity Team uses an established protocol to assess the severity of cybersecurity incidents. In addition, a cross-functional Cybersecurity Incident Response Team is responsible for cybersecurity incident oversight and response, as needed, depending on incident severity. Our cyber incident response plan also includes an escalation process to relevant senior management and/or members of the Board if a cybersecurity incident meets specific rating criteria to prompt response to attempt to minimize potential disruptions and protect the integrity of our operations.
Read in the filing ↗
As leaders of the Technology and CDT functions within ATMOS, respectively, the Company’s CIO and CISO are informed about and monitor significant cybersecurity threats and incidents through the Company’s internal cybersecurity reporting structure. Our CDT team is responsible for monitoring and detecting cybersecurity threats and incidents. Our CDT team, overseen by our CISO, is also responsible for the mitigation and remediation of cybersecurity incidents. When members of the CDT team detect a cybersecurity threat or incident or are made aware of a cybersecurity incident encountered by a third-party service provider, the discovery is communicated to the Incident Response team, which includes our CISO and other senior members of the CDT function. The Incident Response team evaluates the severity of the cybersecurity threat or incident and shares its findings with our CISO.
Read in the filing ↗ Also in 10-K of Feb 14, 2025
• Incident Response Plans: We maintain and update incident response plans that address the life cycle of a cybersecurity incident and routinely evaluate the effectiveness of such plans. Incident response plans focus on cybersecurity risk issues, including detection, response and recovery; cybersecurity threats, including external communication and legal compliance; and breach simulations and penetration testing through internal and external exercises. We have previously engaged a third-party expert to oversee a cybersecurity incident response exercise to test pre-planned response actions from our incident response plan and to facilitate group discussions regarding the effectiveness of our cybersecurity incident response strategies and tactics.
Read in the filing ↗
Our cybersecurity team promptly informs our Incident Response Team of potentially material cybersecurity incidents, including with respect to such incidents involving our third-party service providers. The Cybersecurity and Compliance Steering Committee, comprised of senior members of management, convenes on a quarterly basis to review matters related to strengthening our cybersecurity posture and providing cybersecurity governance.
Read in the filing ↗
mitigate, and remediate cybersecurity incidents, and the Company has been and continues to be the target of cybersecurity incidents
Read in the filing ↗ Also in 10-K of Mar 7, 2025
Cybersecurity and Privacy. The SEC maintains cybersecurity disclosure rules (“SEC Cybersecurity Rules”) mandating cybersecurity incident and risk management disclosure for public companies such as Arch. The SEC Cybersecurity Rules became effective in 2023 and mandate that public companies report a cybersecurity incident on a Form 8-K within four days after they determine that the incident is material. Additional disclosure by registrants in the Form 10-K annual report should describe their processes for assessing, identifying and managing material risks from cybersecurity threats, the material impacts of cybersecurity threats and previous cybersecurity incidents. See Item 1C, “Cybersecurity” for further information about our disclosures.
Read in the filing ↗ Also in 10-K of Feb 27, 2025
• A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents, including incidents that could be indicators of attack against availability, integrity and confidentiality of information systems.
Read in the filing ↗ Also in 10-K of Feb 27, 2025
Axon has implemented our cybersecurity and information security program and cybersecurity incident response plan to protect our and our customers’ data from, and mitigate the effects of, unintentional disclosure as well as cybersecurity threats and incidents of all severity levels. Our program and response plan outline actions to be taken after identifying a suspected cybersecurity threat or incident and the people responsible for managing those actions. We have also implemented disclosure controls and procedures for determining the materiality of a cybersecurity incident to outline disclosure and communications responsibilities during cybersecurity incidents of all severity levels.
Read in the filing ↗
Incident Response and Recovery Planning: We have established and maintain comprehensive cybersecurity incident response and recovery plans that coordinate multidisciplinary internal teams and cybersecurity partners to assess, triage, escalate, contain, mitigate, investigate, remediate, and recover from a potential cybersecurity incident. Through ongoing communications with these teams, management monitors the incidents and reports incidents to the Audit Committee when appropriate. Managem...
Read in the filing ↗ Also in 10-K of Feb 21, 2025
The Cybersecurity Group also has documented processes for identifying, responding to, and internally escalating cybersecurity incidents to management and the Board of Directors. Once an incident meets certain criteria, the Company’s Cybersecurity Incident Command or, in the most severe cases that
Read in the filing ↗
Our cybersecurity incident response processes are designed to escalate certain cybersecurity events to members of management depending on the circumstances. Key members of management, including representatives from information technology ("IT"), operations, legal, finance, risk management and internal audit, serve on the Company’s senior security incident response team to help the Company mitigate and remediate cybersecurity incidents of which they are notified, and certain cybersecurity incidents are escalated to the Company’s executives. In addition, the Company’s incident response processes include potential reporting to the Audit Committee of our Board of Trustees for certain cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 13, 2025