Company: OC
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0001370946-25-000077
Chunk: 201

Company: Owens Corning
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 201
---
 of data or disruption of systems, operations or transactions, any of which could have a material adverse effect on our business strategy, results of operations or financial condition. See Item 1A. Risk Factors of this Annual Report on Form 10-K for further discussion of the risks related to cybersecurity threats.

Governance

The Board of Directors is responsible for overseeing risk for the Company and has delegated to the Audit Committee responsibility for overseeing the cybersecurity risk management strategy for the Company. The Audit Committee receives regular updates on our cybersecurity risk management process from members of management, including our Chief Information Officer (“CIO”). The Audit Committee reviews our comprehensive cybersecurity framework, including reviewing our cybersecurity reporting protocol that provides for the notification, escalation and communication of significant cybersecurity events to a crisis management team and appropriate levels of management, including our CIO, as well as to the Audit Committee. Management also provides the Audit Committee with a cybersecurity dashboard, which the full Board of Directors can access as well. Additionally, the Audit Committee regularly provides updates to the Board on the status of the Company’s cybersecurity risk management process.

19

ITEM 1C.CYBERSECURITY (continued)

The Company’s cybersecurity program is overseen by our CIO, who is responsible for global information technology, including cybersecurity. Our Vice President, Global Information Security, is primarily responsible for assessing and managing material risks from cybersecurity threats, including monitoring the measures used for prevention, detection, mitigation and remediation of cybersecurity incidents. Our CIO is responsible for our information security organization, which is comprised of internal Owens Corning employees and external security suppliers. Our information security organization provides security monitoring and response and provides regular reports to our CIO and Vice President, Global Information Security. These regular reports inform our CIO and Vice President, Global Information Security as they monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents under the oversight of the risk committee. Our Global Information Services team is regularly engaged in cybersecurity training and awareness and incorporates relevant reviews in technology design and development. 

Our CIO has 20 years of experience in the information technology industry, including engagement with cybersecurity strategy and oversight. Our CIO reports directly to our Chief Executive Officer. Our Vice President, Global Information Security has 28 years of experience in the cybersecurity industry, including previous experience in the U.S. Air Force, consulting, and 22 years with Owens Corning, and reports directly to our CIO.