Data Privacy and Information Security Data privacy and information security remain key priorities as Boeing continues transforming to meet the needs of our workforce and the changing compliance landscape, and to counter sophisticated cyber threats. Innovative and effective security controls and the safeguarding of personal information are central to every one of our processes at every layer. Protecting Privacy Boeing’s Global Privacy Office is responsible for overseeing the management, use and security of personal information held by the company, including personal data from employees, customers and suppliers. To manage the varying requirements for safeguarding personal information, we employ a principles-based approach to data privacy that aligns with applicable privacy laws and frameworks in the United States, European Union members and other countries. Our privacy team works across the enterprise to collaborate and advise on privacy compliance. The program is deployed through a community structure, with Privacy Focals and Privacy Champs embedded in business areas across the company to promote data protection awareness and best practices. At the heart of our privacy program is the “Privacy by Design” approach, which factors privacy requirements into the development of products, services or systems that utilize personal information. This approach ensures that technical controls and administrative processes implement data protection principles, and that necessary safeguards are in place to comply with applicable privacy laws and regulations. Information Security Information security is critical to Boeing’s operations around the world. We continue to employ industry-leading security practices while leveraging software and product security engineering to protect networks, systems and information from cyber threats. With our global presence and the continued growth of malicious cyber activities, we maintain a dynamic, risk-based approach to cybersecurity that is structured around the National Institute of Standards and Technology (NIST) Cybersecurity Framework, contractual requirements and other global standards. To counter the ever-changing threat environment, we continue to focus on bolstering our perimeter and internal systems, and on honing processes for secure development and security review. Our ongoing efforts include incorporating zero trust principles building security into our products and services to better anticipate, withstand, recover and adapt to cyberattacks or other disruptions. We also are continuing to work jointly with our supply chain and other partners to align our cybersecurity strategies and adopt the latest best practices to protect our data and systems. As we evaluate and test our processes, we continue to engage industry and government associations — to employ third-party benchmarking, audits and threat intelligence feeds — to strengthen our cybersecurity efforts and allocate resources. Cyber Governance Boeing has established a Global Cybersecurity Governance Council to further strengthen governance and enhance coordination of our cybersecurity activities. The Council comes at an important time as Boeing enhances its cybersecurity posture around the world. Inside the company, digital transformation is speeding adoption of advanced technologies, while outside the company, sophisticated cyber actors who increasingly target critical infrastructure systems and operations pose a significant risk. The Council is a decision-making body responsible for developing and coordinating enterprise cybersecurity policy and strategy, as well as providing direction and guidance to Boeing cybersecurity functions and other stakeholders to integrate and align operations with the company’s priorities. Cross-enterprise action teams will be formed as needed to manage and implement key decisions. With our Chief Information Security Officer (CISO) serving as the chair, the Council will meet at least quarterly and report directly to the company’s Executive Council on progress toward specific cybersecurity objectives. Engineer During the Week, Environmental Steward on the Weekend Ankita Sharma, an early-career Boeing engineer, plants trees along the banks of the Snoqualmie River near Seattle in her free time. Sharma joined other Boeing volunteers working with Stewardship Partners, a nonprofit that creates people- based solutions to engage Puget Sound communities as caretakers of the land and water that sustain us. The trees she planted at Changing Seasons Farm will shade the river, cooling the waters to improve the habitat for salmon spawning. 2022 Sustainability Report 60 Contents People Introduction Communities Operations Reporting Approach & Governance Products & Services
The Boeing Company 2022 Sustainability Report Page 59 Page 61