NORFOLK SOUTHERN CORP

ent_019fa556485d3e0d06c69a68a1402c01

Compliance scorecard →🔔 Follow entity

Disclosures

— · 0 jurisdictions

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

none in sample

Identity resolution

Canonical name: NORFOLK SOUTHERN CORP
Normalized: norfolk southern— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: 0000702165
Domain: None on record

Disclosure history (0)newest first

No disclosures linked to this entity yet.

Subsidiary disclosures (1)filed by group companies

◈ These filings were made by or about subsidiaries of NORFOLK SOUTHERN CORP — not by NORFOLK SOUTHERN CORP itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.

Tracked subsidiaries✦ Norfolk Southern Railway Company

FEDERALSEC 10-K Item 1Cvia Norfolk Southern Railway Company2026-02-09
Norfolk Southern Railway Company (NSC) filed its 10-K Item 1C disclosing its cybersecurity risk management and governance. NSC employs a multi-layered defense strategy based on the NIST Cybersecurity Framework (NIST CSF). The Board has direct oversight of cybersecurity risks, receiving periodic reports from the CISO and CIDO. NSC has experienced prior technology outages and cybersecurity events but states future events could have a materially adverse effect. The company conducts internal and third-party assessments of IT vulnerabilities and resiliency. NSC engages third-party service providers for periodic reviews and requires vendors to maintain security protections. Management reports material incidents to the Board prior to filing 8-Ks. NSC provides cybersecurity awareness training to employees and uses technology-based tools to mitigate risks.