Company: NE-WTA
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0001628280-25-006184
Chunk: 102

Company: Noble Corp plc
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1C
Chunk 102
---
Governance

The Audit Committee of the Board provides oversight of the Company’s cyber security program. The Information Security Team keeps management informed about initiatives, threats, incidents, training, and best practices on an on-going basis via circulated memos or meetings.In addition to reporting through the Audit Committee and Enterprise Risk Management Program, the Board may periodically include cyber security as an independent agenda item and engages with the CIO and Information Security Team as well as external experts on cyber security matters.The Information Security Team advises the CIO via cyber reports on prevention, detection, mitigation, and remediation of cyber security incidents. The CIO is responsible for the Information Security Team risk strategy, assessment, exceptions, risk acceptance, and management of the Company’s material risks from cyber security risk appetites. Ongoing assessments cover applicable information technology and operations technology systems, applications, and software used to support Noble’s corporate and rig operations. The outcome of these various assessments influences the IT risk appetite and risk identification, and acceptance is discussed and shared with the CIO, executive management, the Audit Committee, and the Board of Directors.

36

The CIO has extensive cyber security knowledge and skills gained from over ten years of relevant work experience at Noble including two years as Deputy CIO as well as Director, IT prior to the merger with Maersk Drilling with responsibility for cyber security. The CIO has multiple years of experience managing OT data and secure remote access for data management on and offshore. Prior to serving as Director, IT the CIO was the Manager, Business Systems responsible for application management and Enterprise Architecture. The Information Security Team advises the CIO on prevention, detection, mitigation, and remediation of cyber security incidents.