Employee Well-Being and Community Impact

During the first weeks of March 2020, as the impact of the global pandemic was first recognized, Maxar activated its standing business continuity crisis response program, stood up a COVID-19 Crisis Response Team and successfully postured the business for ongoing business operations. Consistent with our standing crisis response protocols, we regularly consulted with government, public health and business leaders at the county, state and national levels to help protect and support our workforce and continue to serve our customers.

Maxar’s response was immediate, multi-faceted, and effective at addressing the evolving needs of the business. While we highlight below a few of our actions, more information is available in our 2020 Impact Report.

• In less than one week in March, we transitioned approximately 75% of our workforce to full-time work-from-home status, enabling greater protection of our workforce whose jobs require them to work on-site.
• At-home workers were supported through enterprise collaboration tools, enhanced secure remote connections, and financial stipends to help set up home offices.
• On-site essential workers were supported through enhanced air quality installations, stringent cleaning protocols, state-of-the-art temperature screenings, modified workstations to facilitate social distancing, company-provided PPE, and complimentary daily meals.
• Our pipeline of employees was well supported as well. Maxar’s 2020 Intern Program was preserved entirely, with 154 interns gaining valuable experience through a converted-to-virtual experience.
• Employee well-being was prioritized and supported through a variety of strategies including increased and regular communications from executive leadership and Human Resources, employee surveys, enhanced leave programs, expanded mental health benefits, special programs and training hosted by internal and external experts to avoid, detect and address mental health issues, and an emergency response program to assist employees impacted by the confluence of COVID-19 and natural disasters (such as hotel room reimbursements and PTO donations for California employees evacuated from their homes due to wildfires).
• Job security was protected with Maxar able to avoid widespread layoffs and pay reductions.

Community engagement during COVID-19:

• During Covid-19, our employees are committed to serving the communities in which they live and work.  In California, for example, our essential workers in our manufacturing facilities designed, produced and delivered over 4,000 face shields to front-line medical workers.
• Maxar held a Virtual GIS day to support STEM programming remotely
• Maxar continued to support fundraising for local food banks, homeless shelters, disaster relief programs, and underprivileged youth organizations
   

• Maxar's SVP, Chief Internal Operations Officer has overall responsibility for the company’s information security organization. Maxar’s Enterprise Cyber Security team, which reports to the SVP, encompasses cyber security, security engineering, security architecture, and cyber risk management. This includes the continuous monitoring of IT assets to mitigate tactical and emerging risks. 
• Maxar has established a data-centric approach to ensure resilience and enable growth of the business while protecting data privacy, security and the confidentiality of employee and customer information. Maxar adheres to strict requirements for the confidentiality, integrity and availability of information assets through robust policies aligned to the NIST 800-171 framework. 
• Maxar has created a risk-aware culture as part of a continuous process for effective enterprise risk management. Security Awareness and Training activities are done regularly to address the current cyber threats. Training topics include safeguarding protected information, role-based security training. Confidentiality expectations and best practices are reinforced at the time of hire, throughout employment and upon departure.
• Maxar executes defined operational processes that facilitate timely, effective and orderly management of information security incidents based on their nature, severity and risk. Maxar performs end-to-end testing of its Incident Response processes on an annual basis with tabletop exercises on new or emerging threat scenarios with Board engagement in the simulation. The Cyber Incident Response Plan is typically tested quarterly to help ensure personnel understand their roles and responsibilities and help ensure the plan is updated to reflect new roles or processes. 
• Maxar conducts multiple audits, assessments and tests to independently identify risk and assist with compliance to information security requirements. Maxar’s Internal Audit organization, third parties and U.S. government auditors support this effort.
• Maxar executes a Threat Program, leveraging monitoring and assessment tools, integrated with Maxar Enterprise Risk Management. This program prevents the willful and/or inadvertent disclosure of company information, by education and by detecting behaviors that may be a threat to Maxar.
• Maxar carries cyber security insurance to help provide coverage for damages and costs sustained by a cyber-attack or business interruption loss caused by a malicious act.