Cybersecurity Risk Management and Strategy Disclosure |
12 Months Ended |
|---|---|
Dec. 31, 2025 | |
| Cybersecurity Risk Management, Strategy, and Governance [Line Items] | |
| Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | The Company’s Board through its audit committee (Audit Committee) is responsible for overseeing the Company’s risk management program. The Company integrates cybersecurity risk management into its broader risk management framework to ensure that cybersecurity considerations form an integral part of our risk management program. Our Information Technology department works closely with the risk management team to evaluate and address cybersecurity risks. The Company’s cybersecurity strategy and risk management processes align with the National Institute of Standards and Technology (NIST) and CMMC governance requirements and cybersecurity framework. For additional information on CMMC requirements, see Item 1A. Risk Factors - Our business is subject to audits, reviews, cost adjustments, and investigations by the U.S. government, which, if resolved unfavorably to us, could adversely affect our profitability, cash position or growth prospects in this Annual Report on Form 10-K. Cybersecurity Risk Management Strategy Identification, Response and Reporting: The Company has adopted a cyber incident response procedure to primarily: •assess, identify and manage material cybersecurity threats and incidents; •comply with our contractual obligation to safeguard CDI; and •report on cyber incidents in accordance with the relevant DFARS. The Company has established and maintains comprehensive incident response, business continuity, and disaster recovery plans designed to address the Company’s response to a cybersecurity incident. We have an established incident response team (IRT) comprised of cross-functional leaders from Finance, Human Resources, Legal, Security and IT groups, to identify, assess and address cyber incidents. The IRT coordinates closely with the risk management team on cybersecurity risks and threats facing the Company. The Company conducts regular exercises to test these plans and ensure personnel are familiar with their roles in a response scenario. Technical Safeguards: The Company implements technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence, as well as through external audits and certifications. Third-party Engagements: The Company maintains a comprehensive, risk-based approach to identifying and overseeing material cybersecurity threats presented by our use of third-party vendors, service providers, and other external users of the Company’s systems. We also monitor our use of systems of third parties that could adversely impact our business in the event of a material cybersecurity incident affecting those third-party systems, including any outside auditors or consultants who advise on the Company’s cybersecurity systems. Recognizing the complexity and evolving nature of cybersecurity threats, we engage external experts, including managed security service provider (MSSP) and consultants, to evaluate our cyber governance and monitor our risks. These partnerships enable us to leverage their specialized knowledge to help ensure that our cybersecurity strategies and processes reflect industry best practices. Education and Awareness: The Company provides regular, mandatory training for employees on safeguarding against cybersecurity threats, and communicates the Company’s evolving information security policies, standards, processes, and practices.
|
| Cybersecurity Risk Management Processes Integrated [Flag] | true |
| Cybersecurity Risk Management Processes Integrated [Text Block] | Identification, Response and Reporting: The Company has adopted a cyber incident response procedure to primarily: •assess, identify and manage material cybersecurity threats and incidents; •comply with our contractual obligation to safeguard CDI; and •report on cyber incidents in accordance with the relevant DFARS. The Company has established and maintains comprehensive incident response, business continuity, and disaster recovery plans designed to address the Company’s response to a cybersecurity incident. We have an established incident response team (IRT) comprised of cross-functional leaders from Finance, Human Resources, Legal, Security and IT groups, to identify, assess and address cyber incidents. The IRT coordinates closely with the risk management team on cybersecurity risks and threats facing the Company. The Company conducts regular exercises to test these plans and ensure personnel are familiar with their roles in a response scenario.
|
| Cybersecurity Risk Management Third Party Engaged [Flag] | true |
| Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true |
| Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | true |
| Cybersecurity Risk Board of Directors Oversight [Text Block] | Board of Directors Oversight: The Audit Committee oversees cybersecurity risks. The Audit Committee reviews the Company’s cybersecurity program, including the review of reports on cyber incident response processes, emerging cybersecurity developments and threats, and cyber risk assessment. The Audit Committee meets regularly with management to discuss our cybersecurity program. Management’s Role: Our Chief Information Security Officer (CISO) is primarily responsible for assessing, monitoring and managing our cybersecurity risks. With over 30 years of experience in the field of information technology and cybersecurity, the CISO brings a wealth of expertise to his role. His background includes experience as a cybersecurity professional and system security engineer at the Pentagon, the State Department, and several other Federal agencies, as well as serving as Chief Information Officer (CIO) for international federal contractors and a Maryland state agency, resulting in extensive knowledge and experience in developing and executing cybersecurity strategies. The CISO holds a Doctorate degree in Information Assurance and a Master's degree in Computer Systems Management from the University of Maryland, and holds a Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP) certification, awarded and maintained since 2010 and 2015, respectively. The CISO coordinates with senior management, including members of the IRT, to implement a program designed to protect the Company’s information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents or threats in accordance with the Company’s incident response procedure. Through ongoing communications between the CISO, IRT and other members of senior management (including the CEO), senior management stays informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and reports significant threats and incidents to the Audit Committee, when appropriate. Management provides comprehensive briefings to the Audit Committee on a regular basis. These briefings may include topics such as the current cybersecurity landscape and emerging threats, reports on significant incidents and breaches, and compliance with new regulatory requirements.
|
| Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | Our Chief Information Security Officer (CISO) is primarily responsible for assessing, monitoring and managing our cybersecurity risks. |
| Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | Our Chief Information Security Officer (CISO) is primarily responsible for assessing, monitoring and managing our cybersecurity risks. With over 30 years of experience in the field of information technology and cybersecurity, the CISO brings a wealth of expertise to his role. His background includes experience as a cybersecurity professional and system security engineer at the Pentagon, the State Department, and several other Federal agencies, as well as serving as Chief Information Officer (CIO) for international federal contractors and a Maryland state agency, resulting in extensive knowledge and experience in developing and executing cybersecurity strategies. The CISO holds a Doctorate degree in Information Assurance and a Master's degree in Computer Systems Management from the University of Maryland, and holds a Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP) certification, awarded and maintained since 2010 and 2015, respectively. |
| Cybersecurity Risk Role of Management [Text Block] | Our Chief Information Security Officer (CISO) is primarily responsible for assessing, monitoring and managing our cybersecurity risks. With over 30 years of experience in the field of information technology and cybersecurity, the CISO brings a wealth of expertise to his role. His background includes experience as a cybersecurity professional and system security engineer at the Pentagon, the State Department, and several other Federal agencies, as well as serving as Chief Information Officer (CIO) for international federal contractors and a Maryland state agency, resulting in extensive knowledge and experience in developing and executing cybersecurity strategies. The CISO holds a Doctorate degree in Information Assurance and a Master's degree in Computer Systems Management from the University of Maryland, and holds a Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP) certification, awarded and maintained since 2010 and 2015, respectively. The CISO coordinates with senior management, including members of the IRT, to implement a program designed to protect the Company’s information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents or threats in accordance with the Company’s incident response procedure. Through ongoing communications between the CISO, IRT and other members of senior management (including the CEO), senior management stays informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and reports significant threats and incidents to the Audit Committee, when appropriate. Management provides comprehensive briefings to the Audit Committee on a regular basis. These briefings may include topics such as the current cybersecurity landscape and emerging threats, reports on significant incidents and breaches, and compliance with new regulatory requirements.
|
| Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true |
| Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | Chief Information Security Officer (CISO) is primarily responsible for assessing, monitoring and managing our cybersecurity risks. |
| Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | With over 30 years of experience in the field of information technology and cybersecurity, the CISO brings a wealth of expertise to his role. His background includes experience as a cybersecurity professional and system security engineer at the Pentagon, the State Department, and several other Federal agencies, as well as serving as Chief Information Officer (CIO) for international federal contractors and a Maryland state agency, resulting in extensive knowledge and experience in developing and executing cybersecurity strategies. |
| Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | The CISO coordinates with senior management, including members of the IRT, to implement a program designed to protect the Company’s information systems from cybersecurity threats and to promptly respond to any material cybersecurity incidents or threats in accordance with the Company’s incident response procedure. Through ongoing communications between the CISO, IRT and other members of senior management (including the CEO), senior management stays informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and reports significant threats and incidents to the Audit Committee, when appropriate.
|
| Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] | true |