Skip to content
CISO Spotlights

Board cybersecurity-expertise record

Greenbrier Companies: five directors named with cybersecurity expertise

Greenbrier's 2025 proxy lists five directors, including board chair Admiral Thomas B. Fargo, with cybersecurity among their stated qualifications.

Company
The Greenbrier Companies, Inc. (GBX)
Directors named
Thomas B. Fargo, Stevan B. Bobb, Graeme A. Jack, Jeffrey M. Songer, Lorie L. Tekorius
Filing
DEF 14A
Filed
17 November 2025

By the CISO Spotlights Desk · Published

Greenbrier's proxy statement for its 2026 annual meeting, filed November 17, 2025, lists cybersecurity among the stated qualifications of five directors, more than any other company on this record so far: Thomas B. Fargo, Stevan B. Bobb, Graeme A. Jack, Jeffrey M. Songer and Lorie L. Tekorius.

Board chair Admiral Thomas B. Fargo gets the fullest treatment. The proxy's Cybersecurity Risk Oversight section says he "has significant experience in cybersecurity including supervising extensive, national level cybersecurity programs and teams," tracing that experience to his service as Commander of the U.S. Pacific Command.

The other four appear in shorter per-director qualification summaries, each pairing cybersecurity with other named skills rather than detailing its source: Bobb "brings expertise in business strategy, cybersecurity, the rail industry and financial matters"; Jack, a retired PricewaterhouseCoopers partner, is credited with accounting, financial-reporting and cybersecurity expertise; Songer's summary pairs railroad-industry experience with cybersecurity expertise among other qualifications; and Tekorius, a 30-plus-year Greenbrier executive, is credited with organizational leadership, cybersecurity expertise, and financial and operational expertise.

No SEC rule requires naming directors this way: the SEC proposed Item 407(j) of Regulation S-K in 2022 to require it, then dropped the requirement from its final 2023 cybersecurity-disclosure rule. Greenbrier's proxy does it anyway, for five of its directors. See the board cybersecurity-expertise record for other companies making the same voluntary disclosure, with no comparison or ranking implied.

Sources

  1. 1.
    The Greenbrier Companies, Inc., Schedule 14A (SEC EDGAR)sec.gov · published 17 November 2025 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.

See an error? Request a correction.