Company: ASGN
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000890564-25-000008
Chunk: 43

Company: ASGN Inc
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 43
---
 risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial conditions. 

Governance

ASGN’s data protection and cybersecurity governance structure enables transparency and visibility to key stakeholders: the Company's Board and its Strategy and Technology and Audit Committees, and the Company's Chief Executive Officer. The Board's Strategy and Technology Committee focuses on technology and cybersecurity, while the Board's Audit Committee reviews data security breaches or other issues. Each committee reports to the full Board regarding its activities, including those related to cybersecurity. The full Board also receives briefings from management on our cyber risk management program. Board members receive presentations on cybersecurity topics from the Company's chief information officers across our brands ("CIOs") and external experts as part of the Board's continuing education on topics that impact public companies.

13

Two key enabling bodies, ASGN’s Enterprise Security Council ("Council") and the Security Operations Center (“SOC”), have primary responsibility for our overall cybersecurity risk management program and provide the structure necessary to set policy and direction as well as operationalize our required security posture.

•The Council includes the CIOs and is led by the Chief Information Security Officer ("CISO"). Our CISO joined the Company in 2018 in connection with the acquisition of ECS Federal, LLC ("ECS") and has decades of experience in oversight of cybersecurity operations. Collectively, the Council represents ASGN and its brands, and reports to the Chief Executive Officer and the Board's Strategy and Technology Committee. The Council members bring a wealth of experience in security operations, business process re-engineering, software development, ERP systems, and the management of multinational wide area networks. Complementing this expertise, the Council also includes a dedicated team of Cybersecurity Information Security Professionals, consisting of brand-specific system engineers and security administrators. The Council's primary mandate is to formulate comprehensive data protection and cybersecurity policies for ASGN, oversee the management of emerging security threats, proactively mitigate security risks, and safeguard our valuable assets.

•ECS, ASGN’s Federal Government Segment, plays a vital role in safeguarding ASGN through its essential security control function. Serving as a managed services provider for both clients and internal operations, ECS oversees the SOC which is dedicated to monitoring, detecting, and responding to cybersecurity threats across our organization. Operating 24 hours a day, seven days a week, our SOC diligently filters system logs, leveraging proprietary AI/ML tools to