Skip to content
CISO Spotlights

Board cybersecurity-expertise record

ADP: two directors named with cybersecurity expertise

ADP's 2026 proxy names directors Linnie M. Haynesworth and Nazzic S. Keene as bringing cybersecurity expertise to the board, one of sixteen named skills.

Company
Automatic Data Processing, Inc. (ADP)
Directors named
Linnie M. Haynesworth, Nazzic S. Keene
Filing
DEF 14A
Filed
24 September 2026

By the CISO Spotlights Desk · Published · Updated

Automatic Data Processing's proxy statement for its 2026 annual meeting, filed September 24, 2026, lists "Cybersecurity" as one of sixteen named board skills and credits two of its thirteen director nominees with it in their individual "Key Skills & Qualifications" write-ups: Linnie M. Haynesworth and Nazzic S. Keene.

Haynesworth, a director since 2020 and a member of the Audit and Corporate Development and Technology (CDTC) committees, retired in 2019 as sector vice president and general manager of Northrop Grumman's Cyber and Intelligence Mission Solutions Division, a role she held since 2016 after leading the company's former Intelligence, Surveillance and Reconnaissance Division. The proxy credits her with "extensive expertise in technology integration, cybersecurity, enterprise strategy, risk management and large complex system development, delivery and deployment" from 40 years in the industry.

Keene, a director since 2020 and chair of the Nominating/Corporate Governance committee, is the former chief executive officer of Science Applications International Corporation (SAIC), a government technology and engineering contractor. The proxy credits her "strategic leadership in technology-driven solutions, digital transformation, including AI technology, and cybersecurity expertise" as instrumental to shaping ADP's technology portfolio.

ADP's proxy separately states its board has delegated oversight of its cybersecurity program to the full board rather than to a single committee, with quarterly reports from the company's chief security officer and an annual third-party assessment of the program against the NIST Cybersecurity Framework.

No SEC rule requires naming a director's cybersecurity background this way: a 2022 proposal to add Item 407(j) of Regulation S-K was dropped from the SEC's final 2023 cybersecurity-disclosure rule. ADP's proxy does it for two of its directors. See the board cybersecurity-expertise record for the others, with no comparison or ranking implied.

Sources

  1. 1.
    Automatic Data Processing, Inc., Schedule 14A (SEC EDGAR)sec.gov · published 24 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.