Interim and acting CISO record
Amedisys: an Acting CISO and Acting CIO share cybersecurity oversight, 2025
Amedisys's 10-K names an Acting CISO, paired with an Acting CIO, as responsible for cyber risk, without naming either person.
Amedisys's 10-K cybersecurity-governance section assigns responsibility for the company's cyber risk program to two acting executives rather than a single named officer.
"The members of management who are responsible for assessing and managing cyber risk are the Acting Chief Information Security Officer and the Acting Chief Information Officer of the Company who, combined, have over 30 years of experience in managing cybersecurity," the filing states.
The filing states the Acting CISO is responsible for the company's cybersecurity risk management program and reports directly to the Acting CIO, who in turn sits on the company's Enterprise Risk Management Committee (ERMC) and is accountable for keeping that committee informed on cybersecurity matters. Amedisys does not name either acting executive, state when either acting appointment began, or describe a search for permanent replacements in either role.
See the interim and acting CISO record for other companies naming a temporary security leader in an SEC filing, with no comparison or ranking implied.