Company: TDY
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0001094285-25-000053
Chunk: 136

Company: TELEDYNE TECHNOLOGIES INC
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1C
Chunk 136
---
Item 1C.    Cybersecurity

We face many cybersecurity threats including ransomware and more advanced and persistent threats from state-affiliated groups.  We have experienced cyber-attacks in the past and may experience cybersecurity incidents going forward.  Our customers and suppliers face similar cybersecurity threats.  While prior incidents have not materially affected our business, results of operations or financial condition, there is no guarantee that a future cyber incident would not affect our business strategy, results of operations or financial condition.  See Item 1A. Risk Factors for more information on our cybersecurity risks.Risk Management and StrategyOur cybersecurity strategy prioritizes risk identification, quantification, communication, and mitigation, and this strategy is aligned with our overall Enterprise Risk Management strategy.  Our strategy focuses on the deterrence, early detection, interception, and interruption of potential cyber-attacks.  We strive to continuously monitor, evaluate, prioritize and mitigate vulnerabilities and attacks.  Our policies and processes are compliant with applicable control frameworks provided by the U.S. National Institute of Standards and Technology (“NIST”) and other applicable standards.Our employees are required to take cybersecurity-related training which promotes awareness of how to detect and respond to cybersecurity threats.  We utilize benchmarking against peers in the industry to validate our defense posture, and we conduct internal and external assessments to evaluate our controls around information technology, operating technology, and product and service information security.  We work with government, customer, industry and/or supplier partners, such as the National Defense Cyber Alliance to gather and develop best practices and share information to address cyber threats, and we contribute to overall cyber-safety of the defense industrial base through contributions of threat intelligence to law enforcement agencies.We deploy layered defenses and connect them to allow automated responses to urgent threats, which aims to provide continued protection for mobile computing systems when they are outside the company perimeter.  We conduct active threat hunting and vulnerability scanning to anticipate and pro-actively mitigate risks.  We utilize third-party risk scoring services to quantify cybersecurity risks associated with our supply chain and service providers. We also use cybersecurity vetting procedures to maintain lists of approved and disallowed applications and services.We have incident response plans and procedures, the goal of which is to enable the company to respond effectively and compliantly should a cyber-incident arise.  “Tabletop” exercises are held at both the technical and executive level to maintain readiness to respond and to identify any areas where improvements or updates are required.  We engage third-party expertise and utilize threat intelligence feeds to supplement and enhance our internal team of cybersecurity professionals