EASTMAN CHEMICAL CO 10-K Cybersecurity GRC - 2024-02-14

Page last updated on July 16, 2024

EASTMAN CHEMICAL CO reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-14 13:15:32 EST.

Filings

10-K filed on 2024-02-14

EASTMAN CHEMICAL CO filed a 10-K at 2024-02-14 13:15:32 EST
Accession Number: 0000915389-24-000016

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Risk Management and Strategy Cybersecurity is an integral part of the Company’s overall risk management program. The Company takes a comprehensive approach to cybersecurity and involving key stakeholders in oversight and decision-making processes. The Company utilizes a risk-based, multi-layered information security strategy based on the U.S. National Institute of Standards and Technology Cybersecurity Framework to assess, identify, and manage risks from cybersecurity threats. This approach includes: (i) dedicated security operations center monitoring; (ii) network-based and host-based protections; (iii) a Privacy Council focused on privacy regulation adherence; (iv) privilege access management controls; (v) annual and ongoing information security training for all employees and targeted tabletop and other exercises; (vi) encryption of data, backup, recovery, and testing; (vii) regular internal and external audits against information security best practices; and (viii) benchmarking using external third parties. The Company employs these measures, and others, to protect its information assets and operations from internal and external cyber threats while ensuring business resiliency. It also aims to protect employee, customer and supplier information from unauthorized access or attack, as well as secure the Company’s networks, systems, devices, products, and services. The Company maintains cybersecurity policies, standards, and procedures, which include cyber incident response plans. These policies and procedures are continually refined to adapt to changes in regulations, identify potential and emerging security risks, and develop mitigation strategies and protocols for those risks. Regular exercises, tests, incident simulations, and system assessments are conducted to discover and address potential vulnerabilities, and improve decision-making, prioritization, monitoring, and reporting. The Company also engages external parties, such as consultants, independent assessors, computer security firms, and risk management and governance experts, to enhance its cybersecurity oversight and to identify and mitigate risks from third-party service providers. 26 The Company does not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect the Company or its business strategy, results of operations, or financial condition. However, the Company could face risks from cybersecurity threats in the future that could have a material adverse effect on its business strategy, results of operations, or financial condition. See “Risk Factors - Risks Related to the Company’s Business and Strategy” in Part I, Item 1A of this Annual Report. Governance The Board of Directors provides oversight of the Company’s cybersecurity program. The Audit Committee, which consists of non-employee independent directors, receives updates from the Chief Information Officer (“CIO”) on cybersecurity performance and recent industry trends at least quarterly. In addition to regular cybersecurity briefings from the Audit Committee, the Board also receives periodic, but at least annual, updates from management regarding cybersecurity, including prompt notice of cybersecurity threats or incidents that could materially impact the Company. The Board is informed about risk profile status, adversary assessments, training initiatives, cybersecurity projects, emerging global policies and regulations, cybersecurity technologies and best practices, cyber readiness, third-party assessments, mitigation efforts, and response plans. The Company has a dedicated CIO and an Information Security Director who are supported by a team of cybersecurity professionals (the “Cybersecurity Team”) that are responsible for leading the company-wide cybersecurity program and risk mitigation efforts. The CIO, the Information Security Director, and Cybersecurity Team work across all organizations within the Company to protect the Company and its employees, customers and suppliers against cybersecurity risks. The CIO and Information Security Director have cybersecurity expertise as well as extensive experience in information technology strategy, operations, incident response, and business continuity. The Company also has a cross-functional Cybersecurity Incident Response Team consisting of senior-level management. This team is responsible for cybersecurity incident oversight and meets as needed, depending on the nature of an incident. The Company’s internal audit team also provides independent assurance on the overall operations of the Company’s cybersecurity program. The Company ensures that all employees, including part-time and temporary employees, undergo cybersecurity training and compliance programs at least annually. 27 INFORMATION ABOUT OUR EXECUTIVE OFFICERS Certain information about Eastman’s executive officers is provided below: Mark J. Costa, age 57, is Chair of the Eastman Chemical Company Board of Directors and Chief Executive Officer. Mr. Costa joined the Company in June 2006 as Chief Marketing Officer and leader of corporate strategy and business development; was appointed Executive Vice President, Specialty Plastics and Performance Polymers Head and Chief Marketing Officer in August 2008; was appointed Executive Vice President, Specialty Products and Chief Marketing Officer in May 2009; and became President and a member of the Board of Directors in May 2013. Prior to joining Eastman, Mr. Costa was a senior partner with Monitor Group, a global management consulting firm. He joined Monitor in 1988, and his experience included corporate and business unit strategies, asset portfolio strategies, innovation and marketing, and channel strategies across a wide range of industries. Mr. Costa was appointed Chief Executive Officer in January 2014 and named Board Chair effective July 2014. Mr. Costa also serves on the Board of Directors of International Flavors & Fragrances Inc. William T. McLain, Jr., age 51, is Executive Vice President and Chief Financial Officer. Mr. McLain joined Eastman in 2000 and has served in high-level finance and accounting roles throughout the organization in the United States, Asia, and Europe. In 2011, Mr. McLain served as Director, Asia Pacific Finance, and in 2013 was appointed to International Controller. In 2014, Mr. McLain was appointed Corporate Controller until 2016 when he became Vice President of Finance. Prior to Eastman, Mr. McLain worked for the public accounting firm PricewaterhouseCoopers LLP. Mr. McLain was appointed to his current position effective February 2020. Stephen G. Crawford, age 59, is Executive Vice President, Manufacturing and Chief Sustainability Officer, with executive responsibility for global manufacturing and engineering and the corporate sustainability strategy. Mr. Crawford joined Eastman in 1984 and held leadership positions of increasing responsibility in both the manufacturing and technology organizations. From 2007 until January 2014 he served as Vice President of Global R&D in the AM and AFP segments. He was appointed Senior Vice President and Chief Technology Officer effective January 2014, and Senior Vice President, Chief Technology and Sustainability Officer effective October 2019. Mr. Crawford was appointed to his current position effective October 2022. Brad A. Lich, age 56, is Executive Vice President and Chief Commercial Officer, with responsibility for the AM segment, including the circular platform, as well as leadership of marketing, sales, supply chain, corporate strategy, and regional leadership. Mr. Lich joined Eastman in 2001 as Director of Global Product Management and Marketing for the Coatings business. Other positions of increasing responsibility followed, including General Manager of Emerging Markets of the former Coatings, Adhesives, Specialty Polymers, and Inks (“CASPI”) segment. In 2006, Mr. Lich became Vice President of Global Marketing with direct responsibility for company-wide global marketing functions. In 2008, Mr. Lich was appointed Vice President and General Manager of the former CASPI segment, and in 2012 was appointed Vice President and General Manager of the AFP segment. In January 2014, Mr. Lich was appointed Executive Vice President, with responsibility for the AFP and AM segments and the marketing, sales, and pricing organizations. In March 2016, Mr. Lich assumed executive responsibility for outside-U.S. regional business leadership. Mr. Lich was appointed to his current position effective July 2016. Kellye L. Walker, age 57, is Executive Vice President and Chief Legal Officer. Ms. Walker has overall leadership responsibility for Eastman’s legal organization, including corporate governance, compliance and litigation management, as well as government affairs, product stewardship and regulatory affairs, global business conduct, global trade, global security, and the Company’s global health, safety and environment organization. Before joining Eastman, Ms. Walker served as executive vice president and chief legal officer of Huntington Ingalls Industries. Prior to that, Ms. Walker’s work experience includes serving as general counsel and chief legal officer at American Water Works Company, Diageo North America, and BJ’s Wholesale Club. Ms. Walker was appointed to her current position effective April 2020. Adrian J. Holt, age 54, is Senior Vice President and Chief Human Resources Officer. Mr. Holt is responsible for human resources strategy and services worldwide, which includes inclusion and diversity, total rewards, learning and leadership development, and global talent acquisition and management. Mr. Holt joined Eastman in 2016 as Vice President, Global Talent Acquisition and HR Client Support, Americas and EMEA. Prior to Eastman, Mr. Holt served as Chief Human Resources Officer for WireCo World Group and as Vice President of Corporate Human Resources for BASF North America. Mr. Holt was appointed to his current position effective May 2023. 28 Christopher M. Killian, age 54, is Senior Vice President and Chief Technology Officer. Dr. Killian has responsibility for Eastman’s global technology and innovation organization. Prior to this position he served as Vice President of Technology for the AFP, CI, and AM segments. Dr. Killian joined Eastman in 1996 as a research chemist. During his career at Eastman, he has held various leadership positions in technology and the business including Director, Tritan Growth Platform early in his career. Dr. Killian was appointed to his current position effective June 2021. Julie A. McAlindon, age 56, is Senior Vice President, Regions and Chief Supply Chain Officer. Ms. McAlindon has responsibility for overseeing global supply chain, sourcing and procurement, and regional leadership outside of North America. Ms. McAlindon also leads the transformation of Eastman, building the capabilities and culture required to support Eastman’s strategy. Prior to this role, Ms. McAlindon was Chief Procurement Officer and Vice President, Transformation. Ms. McAlindon joined Eastman in 2016. Before joining Eastman, Ms. McAlindon was with Avient Corporation as senior vice president, designed structures and solutions; and vice president of marketing. Prior to that, Ms. McAlindon’s work experience includes a variety of leadership positions with The Dow Chemical Company. Ms. McAlindon was appointed to her current position effective June 2021. Travis Smith, age 50, is Senior Vice President with responsibility for the AFP segment. Mr. Smith joined the Company in December 1992 as a chemical engineer and has held various positions of increasing responsibility within manufacturing, the chemicals business, corporate innovation, specialty plastics, and advance materials during his career at Eastman. Mr. Smith assumed the position of Vice President and General Manager, Performance Films in July 2012 and for both Performance Films and Advance Interlayers in April 2018. Mr. Smith was appointed to his current position effective October 2022. Michelle R. Stewart, age 52, is Vice President, Chief Accounting Officer and Corporate Controller. Since joining Eastman in 1995, Ms. Stewart has served in a number of positions with increasing responsibility in the financial organization. Prior to joining Eastman, Ms. Stewart worked for the public accounting firm KPMG Peat Marwick. Ms. Stewart was appointed to her current position effective October 2021. 29

Company Information