Search every filing
2,477,667 paragraphs from 10-Ks, 10-Qs and 8-Ks with press releases.
Matching paragraphs
Incident Response and Recovery Planning: The Company has established and maintains incident response and recovery plans that address the Company’s response to a cybersecurity incident and the recovery from a cybersecurity incident, and such plans are assessed and evaluated on a regular basis. All meaningful cybersecurity incidents are reported to the Company’s legal department by our cybersecurity team.
Read in the filing ↗ Also in 10-K of Feb 17, 2026
Vigilance: The Company operates cybersecurity threat functions 24/7 with the specific goal of identifying, attempting to prevent and mitigating cybersecurity threats and responding to cybersecurity incidents in accordance with our established incident response and recovery plans.
Read in the filing ↗ Also in 10-K of Feb 17, 2026
To date, the Company has not been materially affected by a cybersecurity incident or cybersecurity threat and no incident has occurred that is reasonably likely to affect the Company, including its business strategy, results of operations, or financial condition.
Read in the filing ↗ Also in 10-K of Feb 17, 2026
The Company’s Chief Technology Officer and Vice President, Information Security, in coordination with the ISMS, work collaboratively across the Company to implement a program designed to protect the Company’s information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents. To facilitate the success of this program, our IT security team and, when necessary, multidisciplinary teams throughout the Company are deployed to address cybersecurity threats and to respond to cybersecurity incidents in accordance with the Company’s incident response and recovery plans. Through the ongoing communications from these teams, the Chief Technology Officer and the Vice President, Information Security monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents, and report such incidents to the ISMS and other members of management and the Audit Committee or the Board when appropriate.
Read in the filing ↗ Also in 10-K of Feb 17, 2026
The Board, in coordination with the Audit Committee, oversees the management of risks from cybersecurity threats, including the policies, standards, processes and practices that the Company’s management implements to address risks from cybersecurity threats. The Board and the Audit Committee each receive presentations and reports on cybersecurity risks, which address a wide range of topics including, for example, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, new tools and vendors being used by the Company related to cybersecurity, technological trends and information security considerations arising with respect to the Company’s peers and third parties. The Board and the Audit Committee also receive information regarding any cybersecurity incident when appropriate, as well as ongoing updates regarding such incident until it has been addressed. At least once each year the Board and the Audit Committee at least quarterly discuss the Company’s approach to cybersecurity risk management with the Company’s Chief Technology Officer.
Read in the filing ↗ Also in 10-K of Feb 17, 2026
Third-Party Risk Management: The Company maintains a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of the Company’s systems, as well as the systems of third parties that could adversely impact our business in the event of a cybersecurity incident affecting those third-party systems. Third-party vendors are assessed against a standardized vendor risk assessment process before b...
Read in the filing ↗ Also in 10-K of Feb 17, 2026
Given the prevalence of cybersecurity threats, cybersecurity represents a critical component of the Company’s overall approach to risk management. The Company’s cybersecurity policies, standards and practices are integrated into the Company’s enterprise risk management (“ERM”) approach, and cybersecurity risks are among the core enterprise risks that are subject to oversight by the Company’s Board of Directors (the “Board”). The Company’s cybersecurity policies, standards and practices are derived from recognized frameworks established by the National Institute of Standards and Technology (“NIST”) and other applicable industry standards, and the Company is working to obtain NIST certification. Many members of the Company’s cybersecurity team are certified by and have received training from the International Information Security Consortium (“IISC”). The Company generally approaches cybersecurity threats through a cross-functional, multilayered approach, with specific the goals of: (i) identifying, attempting to prevent and mitigating cybersecurity threats to the Company; (ii) preserving the confidentiality, security and availability of the information that we collect and store to use in our business; (iii) protecting the Company’s intellectual property; (iv) protecting personally identifiable data and maintaining the confidence of our customers, clients and business partners; and (v) providing appropriate public disclosure of cybersecurity risks and incidents when required.
Read in the filing ↗ Also in 10-K of Feb 17, 2026