Company: NE-WTA
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001628280-25-006184
Chunk: 101

Company: Noble Corp plc
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 101
---
Item 1C. Cyber Security.

Risk Management and StrategyCyber security risk management at Noble, along with all enterprise risks, is part of the Company’s Enterprise Risk Management Program and risks from cyber security threats are assessed, identified, and managed by our Information Security Team. The Information Security Team reports to the Chief Information Officer (“CIO”). The Information Security Team is composed of the Director of Information Security, managers, and security analysts.The Information Security Team is responsible for all of Noble’s cyber security-related activities such as advising on governance requirements, setting cyber security policies, standards, and procedures, reporting, determining current risk appetite, setting security posture, evaluating security maturity, and ensuring compliance to cyber security frameworks. The team monitors both internal and external threats, potential compromising internet-based attacks, phishing activities, and aims to adapt with protective measures.The Director of Information Security and information security managers carry broad manager level cyber security certifications, and the technical teams carry relevant specific technical certifications related to both Information Technology and Operational Technology security.Noble’s cyber security program encompasses mandatory cyber training, awareness, phishing exercises, and cyber security incident response plan testing to assist with our cyber security risk management process and ensure various applicable implemented cyber controls are working as intended.Noble works with various third-party partners to help execute and advise on cyber security and evaluate maturity assessments as needed.Noble has a process of monitoring all third parties with direct access into the Noble network via various implemented security tools that act as both detective and preventive controls. All third parties with such direct access are also monitored via procurement processes and are subject to specific legal terms and conditions. Noble also engages with various third-party partners in order to share intelligence regarding external threats. For any cyber incidents, Noble may engage applicable third-party partners for forensic purposes.Noble also engages with various cyber security service providers, such as Crowdstrike, Fortinet, NTT, and Microsoft, which share applicable reports with Noble.In the last fiscal year, Noble has not identified any known cyber security threats, incidents, or exposures that have materially affected Noble’s business strategy, results of operations, or financial condition, but Noble faces certain ongoing cyber security risks that, if realized, could materially and adversely affect Noble. This does not guarantee that future incidents or threats will not have a material impact or that we are not currently the subject of an undetected incident or threat that may have such an impact. Potential cyber security risks to Noble are shared in Part I, Item 1A, “Risk Factors,” which should be read in conjunction with the foregoing information.