Company: BWXT
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0001486957-25-000008
Chunk: 134

Company: BWX Technologies, Inc.
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1C
Chunk 134
---
Table of Contents

Item 1C.    CYBERSECURITY

We seek to provide a secure working environment by establishing and maintaining effective security measures to protect the Company’s employees, properties, technology and our customers’ assets from potential threats, including cybersecurity threats. Accordingly, we have implemented numerous controls, technologies and processes and have integrated operational measures into our overall risk management system to assess, identify and manage material risks from internal and external cybersecurity threats.The Governance Committee of our Board of Directors oversees the Company’s guidelines, policies and processes to assess and manage the Company’s exposure to risks, which include cybersecurity risks. The Committee meets periodically with management to review and discuss major financial risk exposures, including from cybersecurity threats, and the steps management has taken to monitor and control those exposures. As necessary, our Cybersecurity Incident Management Team (“CIMT”) (described below) reports significant cybersecurity threats and incidents to the Governance Committee. The Governance Committee is also periodically briefed by management, including our Chief Digital Officer (“CDO”), with respect to our cybersecurity posture to facilitate its role in overseeing the Company’s overall cybersecurity program.

As a general matter, our CDO is responsible for defining our entire cybersecurity posture. The CDO has oversight in planning the strategy, programs, policies and procedures to protect the organization’s digital assets, information and infrastructure. Our IT Director, Cyber Security serves as the CIMT’s Incident Manager and is the member of management primarily responsible for assessing, identifying, mitigating and managing cybersecurity risks; supervising IT security design, development, implementation and testing; and running the day-to-day operations of our cybersecurity team. Our CDO holds a bachelor’s degree in electronics and telecommunications engineering and has more than 35 years of information technology and cybersecurity experience in various leadership and executive roles. In addition, our IT Director, Cyber Security holds a bachelor’s degree in computer information systems and the Certified Information Systems Security Professional (CISSP) and Information Systems Security Architecture Professional (ISSAP) certifications, as well as over 30 years of experience as an information technology professional with the most recent 15 years specializing in cybersecurity.The CIMT is responsible for coordinating the containment, response, investigation, reporting and recovery related to a cybersecurity incident, and is an internally led management team made up of leaders from our Communications, Human Resources, IT and Cybersecurity, Legal and Compliance, Risk Management and other departments, including our IT Director, Cyber Security. Team members possess a broad scope of expertise, including cybersecurity, information technology, legal, compliance, risk management, insurance