Search every filing
2,477,667 paragraphs from 10-Ks, 10-Qs and 8-Ks with press releases.
Matching paragraphs
▪ cybersecurity incident response plans that include procedures for responding to and reporting, if applicable, certain cybersecurity incidents
Read in the filing ↗ Also in 10-K of Feb 26, 2026
▪ cybersecurity teams principally responsible for developing and implementing (1) cybersecurity risk assessment processes, (2) cybersecurity controls, and (3) response plans to cybersecurity incidents
Read in the filing ↗
▪ information security teams principally responsible for developing and implementing (1) cybersecurity risk assessment processes, (2) information security controls, and (3) response plans to cybersecurity incidents
Read in the filing ↗
Our cybersecurity materiality assessment teams, which include chief information security officers, chief information officers, chief accounting officers or chief financial officers, and general counsels, help assess the materiality of certain cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 25, 2025
Our cybersecurity management teams supervise efforts designed to prevent, detect, mitigate, and remediate cybersecurity risks and incidents. The cybersecurity management teams receive intelligence on emerging cybersecurity threats through various means, including internal cybersecurity personnel; governmental, public and private sources; subject matter experts and consultants; and cybersecurity tools deployed in the environment. Cybersecurity management also supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Sempra’s director of cybersecurity governance & chief information security officer provides additional oversight and support for the operational cybersecurity activities at our consolidated entities.
Read in the filing ↗ Also in 10-K of Feb 25, 2025
We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our results of operations, financial condition, cash flows and/or prospects.
Read in the filing ↗ Also in 10-K of Feb 26, 2026
Sempra, SDG&E and SoCalGas have cybersecurity risk management processes in place that are intended to protect the confidentiality, integrity, and availability of our critical infrastructure, systems and information. These cybersecurity risk management processes include cybersecurity incident response plans that are integrated into each entity’s respective enterprise risk management and emergency management programs.
Read in the filing ↗ Also in 10-K of Feb 26, 2026
The cybersecurity management teams, cybersecurity councils and materiality assessment teams include professionals with decades of experience in their respective fields of cybersecurity, information and operational technology, legal, compliance, financial reporting and enterprise risk management. Some of these professionals hold relevant degrees and certifications that we believe enhance our ability to manage and respond to cybersecurity risks, including, among others, bachelor’s and/or master’s degrees in cybersecurity and computer science as well as certified information systems security professional, certified incident handler, and certified information security manager certifications.
Read in the filing ↗
The cybersecurity councils, cybersecurity management teams and materiality assessment teams include members with decades of operational experience as cybersecurity professionals as well as management with decades of service in the areas of information and operational technology and legal, compliance, financial reporting and enterprise risk management. Some of these members hold relevant degrees and certifications that we believe enhance our ability to manage and respond to cybersecurity risks, including, among others, bachelor’s and/or master’s degrees in cybersecurity and computer science as well as certified information systems security professional, certified incident handler, and certified information security manager certifications.
Read in the filing ↗
Sempra’s, SDG&E’s and SoCalGas’ respective boards of directors consider cybersecurity risk as part of their risk oversight function. The Sempra board of directors has delegated to its SST Committee oversight of cybersecurity and other information and operational technology risks. The SST Committee reports to the Sempra board of directors regarding the Committee’s activities, including those related to cybersecurity. The SST Committee receives briefings on cybersecurity topics from Sempra’s chief information security officer, internal information technology leadership or external experts in part for continuing education on topics that impact public companies. The SST Committee as well as the SDG&E and SoCalGas boards of directors oversee management’s implementation of our cybersecurity risk management processes and receive regular reports from management on our material cybersecurity risks. In addition, as needed, management updates the SST Committee and SDG&E and SoCalGas boards of directors about certain cybersecurity incidents. The SDG&E and SoCalGas boards of directors receive briefings from SDG&E’s and SoCalGas’ chief information officer and internal information technology and cybersecurity leadership. SDG&E’s and SoCalGas’ boards of directors also have safety committees that, at times, may oversee the matters described above on behalf of those companies’ respective boards of directors.
Read in the filing ↗ Also in 10-K of Feb 25, 2025
Although we have not experienced a material breach of our information systems or data, we and some of our vendors have been and will likely continue to be subject to breaches of and attempts to gain unauthorized access to our systems or data or efforts to otherwise disrupt our operations. Any actual or perceived noncompliance with applicable legal or regulatory requirements or any incidents impacting our or our vendors’ systems, the integrity of our data or assets or the energy grid could result in disruptions to our business operations; legal or regulatory compliance failures; inability to produce accurate and timely financial statements; energy delivery failures; financial and reputational loss; litigation; and fines or penalties, any of which could have a material adverse effect on our results of operations, financial condition, cash flows and/or prospects. Although we currently maintain cyber liability insurance, this insurance is limited in scope and subject to exceptions, conditions and coverage limitations and may not cover the costs associated with a cybersecurity incident, and this insurance may not continue to be available on acceptable terms.
Read in the filing ↗
… Although Sempra currently maintains cyber liability insurance, this insurance is limited in scope and subject to exceptions, conditions and coverage limitations and may not cover the costs associated with a cybersecurity incident, and there is no guarantee that the insurance we currently maintain will continue to be available at rates we believe are reasonable.
Read in the filing ↗