AmazonScience/document-haystack
Document Haystack Dataset This repository contains the dataset for the paper “Document Haystack: A Long Context Multimodal Image/Document Understanding Vision LLM Benchmark”. 📑 Abstract Paper The proliferation of multimodal Large Language Models has significantly advanced the ability to analyze and understand complex data inputs from different modalities. However, the processing of long documents remains under-explored, largely due to a lack of suitable… See the full description on the dataset page: https://huggingface.co/datasets/AmazonScience/document-haystack.
2090k
1Technology Risk and Controls Committee (TRCC): The TRCC is used as a platform to assess risk and controls components 2across the information technology (IT) landscape including cybersecurity. It manages the risk assessment process, escalation and 3implementation of risk acceptance thresholds with the help of the GRC.4Regional, Country Risk and IT Risk Committees5• Asia Pacific (APAC) Technology Risk and Controls (TRC) Forum6• APAC - TRC Zone / Country Monthly Forums7• Japan IT Risk Committee 8• Europe, Middle East and Africa region/UK and Latin America and Caribbean TRC Forum 9The above forums are set up for regional focus on IT, cybersecurity, regulations and overall issue management. The forums engage 10with the Company's relevant IT leaders and functional leaders within Enterprise Risk Management, Legal, Compliance, and Internal 11Audit.12Each of the Board and regional and country leadership boards may receive periodic presentations and reports on cybersecurity risks. 13In the event of a material cybersecurity incident, the Board will receive prompt information and ongoing updates about the incident. 14The Company has an established issue escalation protocol for technology incidents, including cyber related incidents. The Company’s 15technology incidents and risks are tracked and rated. Items that are rated as "critical" are discussed in the TRCC, and escalated to 16the GRC as appropriate. At least once each year, the Board discusses the Company’s approach to cybersecurity risk management 17with the Company’s Global Chief Information Security Officer. The CISO and regional/country information security officers regularly 18present to the Company’s regional and country leadership boards on material cyber risks and the Company’s information security 19posture and strategy. 20The CISO works collaboratively with business and functional colleagues to implement a program designed to protect the Company’s 21information system from cybersecurity threats and promptly respond to potential cybersecurity incidents. Multidisciplinary teams are 22deployed to respond to cybersecurity incidents in accordance with the Company’s incident response plans. Through ongoing 23communication from these teams, the CISO monitors the prevention, detection, mitigation and remediation of cybersecurity incidents 24in real time, and reports such incidents to the Board when appropriate. 25The CISO reports to the CIO and is principally responsible for overseeing the Program, in partnership with other business leaders 26across the Company including regional information security and technology officers. The Company’s cybersecurity personnel maintain 27current knowledge through specific training programs, professional certifications, and participation in industry groups (e.g., Financial 28Services Sector Coordinating Council, Financial Services Information Sharing and Analysis Center, Analysis and Resilience Center, 29Securities Industry and Financial Markets Association, Cybersecurity and Infrastructure Security Agency, etc.). Company 30cybersecurity personnel expand and test their knowledge of cyber threats and countermeasures through additional on-the-job training 31and quarterly sponsored simulated exercises to practice their response to real-life threats. In addition, personnel are encouraged to 32obtain industry approved certifications as appropriate for their roles and responsibilities. Below are some examples of certifications 33held by the Company’s cybersecurity personnel: Certified in the Governance of Enterprise IT, Certified Information Systems Security 34Professional, Certified Information Security Manager, Certified Risk Information Systems Control, Global Information Assurance 35Certification (GIAC) Certified Incident Handler, GIAC Assessing and Auditing Wireless Networks, and GIAC Continuous Monitoring 36Certification.37Our CISO has more than 30 years’ leadership experience in the field of information technology, cybersecurity, and adjacent roles 38spanning both military, corporate, and advisory roles. He maintains multiple professional certifications and has completed various 39academic and professional training courses, including the Federal Bureau of Investigation CISO Academy. In addition, he continues to 40serve on cybersecurity advisory councils and on the faculty of educational institutions focused on network security and information 41technology. 42There have been no material cybersecurity incidents that have affected AIG for the period covered by this annual report. For a 43discussion regarding risks associated with cybersecurity threats, see Part I, Item 1A. Risk Factors – Business and Operations – "Our 44risk management policies, standards and procedures may prove to be ineffective and leave us exposed to unidentified or 45unanticipated risk, which could adversely affect our businesses, results of operations, financial condition and liquidity" and “We are 46exposed to certain risks if we are unable to maintain the availability of our critical technology systems and data and safeguard the 47confidentiality and integrity of our data, which could compromise our ability to conduct business and adversely affect our consolidated 48business, results of operations, financial condition and liquidity.”49ITEM 1C | Cybersecurity50AIG | 2023 Form 10-K 39