DXC TECHNOLOGY COMPANY

DXC Technology's 10-K Item 1C cybersecurity disclosure describes their NIST CSF-aligned risk management program, ERM integration, Board-level oversight via the Nominating/Corporate Governance Committee, and a Security Steering Committee led by the Global CISO. The filing states no prior cybersecurity incidents have materially affected operations, and does not disclose any specific breach or incident.

DXC Technology is a leading global IT services company that specializes in helping businesses drive digital transformation. Originally formed as a result of the merger between CSC and the Enterprise Services business of Hewlett Packard Enterprise (HPE) in 2017, DXC provides end-to-end IT services in over 70 countries, catering to various industries and sectors. It offers a broad range of services including analytics, consulting, application development, and security.

DXC Technology's 10-K Item 1C describes its cybersecurity risk management program (NIST CSF-aligned), governance structure (Nominating/Corporate Governance Committee oversight, Global CISO reporting), and Security Steering Committee. The filing states no prior cybersecurity incidents have materially affected the company. This is a programmatic disclosure, not an incident disclosure — no specific breach is reported.

HP Enterprise Services (Business Associate, KY) reported to HHS on 2012-12-28 a Theft affecting 1,090 individuals. An employee of a subcontractor responded to a telephone phishing (vishing) attack and permitted a hacker to remotely access the subcontractor's laptop, which improperly stored PHI including names, dates of birth, diagnosis codes, SSNs, and treatment descriptions. The subcontractor terminated the responsible employee, initiated laptop PHI audits, and retrained staff. OCR obtained assurances that corrective actions were completed. Breached information located on Laptop.