The settlements each include charges, on a no-admit, no-deny basis, under Sections 17(a)(2) and 17(a)(3) of the Securities Act of 1933, based on the companies' allegedly negligent material misstatements regarding cybersecurity risks and intrusions. In addition, the orders charge violations of the periodic reporting requirements of Section 13(a) of the Securities Exchange Act of 1934 and Rule 12b-20 thereunder and, as to Avaya, Rule 13a-13 (relating to Form 10-Q); as to Check Point, Rule 13a-1 (relating to annual reports); as to Mimecast, Rule 13a-11 (relating to Form 8-K); and as to Unisys, Rules 13a-1 and 13a-15(a), the latter relating to disclosures controls.