Board cybersecurity-expertise record
Fabrinet: audit committee chair named with cybersecurity expertise
Fabrinet's 2026 proxy credits Audit Committee Chair Thomas F. Kelly with cybersecurity expertise, drawn from two decades running cyber-breach and cloud-security firms.
Fabrinet's proxy statement for its 2026 annual meeting, filed October 20, 2026, names one director, Audit Committee Chair Thomas F. Kelly, under "Board Skills and Qualifications" as bringing "a strong focus on technology, operations and cybersecurity."
Kelly, a director since October 2010 and the current Audit Committee chair, spent more than 40 years in executive management, the bulk of it running security-focused companies: chief executive officer and president of IDX, a provider of software and services for cyber breach and identity fraud protection, from August 2017 until its acquisition by ZeroFox Holdings in 2022; a cybersecurity industry consultant from 2016 to 2017; and, earlier, chief executive officer of several software and security firms, including AccelOps (acquired by Fortinet in 2016). He is currently a venture consultant at Forgepoint Capital, a cybersecurity-focused venture firm, and briefly served as chief executive officer of its portfolio company Anitian, Inc., a cloud security and compliance automation provider, from February to November 2024.
The proxy's separate risk-oversight section ties the same credential to a specific board duty: Fabrinet's board has delegated primary oversight of cybersecurity and data security risk to the Audit Committee, and states that "Mr. Kelly, an independent director and Chair of the Audit Committee, has significant information security risk oversight and management expertise, most recently as chief executive officer and president of IDX."
No SEC rule requires naming a director's cybersecurity background this way: a 2022 proposal to add Item 407(j) of Regulation S-K was dropped from the SEC's final 2023 cybersecurity-disclosure rule. Fabrinet's proxy does it for one of its directors, and goes further than most entries on this record by tying the credential directly to a committee's formal risk-oversight charge. See the board cybersecurity-expertise record for the others, with no comparison or ranking implied.