Unisys Corp. 8-K Summary: SEC Settlement
Business Context and Reporting Period
Unisys Corporation (NYSE: UIS) filed this Current Report on Form 8-K on October 22, 2024. The filing addresses the resolution of an ongoing investigation by the U.S. Securities and Exchange Commission (SEC) regarding the Company's cybersecurity incident disclosures and related internal controls.
Key Financial Metrics
- Civil Penalty: $4 million.
- Accrual Status: The penalty was fully accrued in the Company's 2023 financial statements.
- Cash Flow Impact: The cash impact was assumed in the Company's 2024 free cash flow projections.
- Payment Terms: Payment is due within ten days of the entry of the SEC Order.
Material Changes and Event Details
The Company reached a non-scienter-based administrative proceeding settlement with the SEC on a "neither admit nor deny" basis. The settlement resolves the investigation into violations of non-scienter-based provisions of federal securities laws related to:
- Policies, procedures, and risk disclosures concerning cybersecurity incidents.
- Cybersecurity incident escalation matters originally disclosed in November 2022.
The SEC issued a cease and desist order. The Company did not admit to any wrongdoing, as the violations were determined to be without knowledge, intent, or recklessness.
Management Commentary and Remediation
Management concluded that resolving the matter constructively is in the best interests of the Company and its stockholders. The SEC acknowledged the Company's cooperation and noted significant remediation steps taken since November 2022, including:
- Enhancing disclosure policies and procedures.
- Augmenting cybersecurity personnel and tools, both internally and externally.
- Strengthening overall cybersecurity risk management and protections.
Investor Verification Checklist
- Confirm the $4 million penalty was fully accrued in 2023 financials and does not represent a new charge in 2024.
- Verify the specific enhancements made to cybersecurity personnel and tools since the 2022 disclosure.
- Review the Company's updated disclosure policies and procedures for cybersecurity incidents.
- Monitor the cash outflow timing, as payment is due within ten days of the Order entry.