Search every filing
2,477,667 paragraphs from 10-Ks, 10-Qs and 8-Ks with press releases.
Matching paragraphs
• a cybersecurity incident response plan that includes procedures for responding to, escalating, and reporting cybersecurity incidents; and
Read in the filing ↗ Also in 10-K of Feb 18, 2026
• a security team principally responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;
Read in the filing ↗ Also in 10-K of Feb 18, 2026
Our Cybersecurity Manager leads our cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our Cybersecurity Manager is responsible for assessing and managing risks from cybersecurity threats and reporting significant incidents to our Cybersecurity Committee, which includes our Chief Financial Officer, General Counsel and Corporate Secretary, Chief Information Officer, Cybersecurity Manager and Director of Internal Audit. Our Cybersecurity Manager has over 20 years of experience in information security and incident response and our internal cybersecurity team has over 50 years of combined experience in information security and maintains several cybersecurity certificates including but not limited to CISSP, CISM, SRISC, GSEC, and GCFE. Our Cybersecurity team regularly participates with private energy industry and federal security working groups and organizations.
Read in the filing ↗ Also in 10-K of Feb 18, 2026
Our Audit Committee receives bi-annual updates from management on our cybersecurity risks. In addition, management updates our Audit Committee, as necessary, regarding any significant cybersecurity incidents.
Read in the filing ↗ Also in 10-K of Feb 18, 2026
We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. See Item 1A. Risk Factors “Cyber-attacks targeting systems and infrastructure used by the gas and oil industry and related regulations may adversely impact our operations and, if we or our third-party providers are unable to obtain and maintain adequate protection for our key systems and data, our business may be harmed. ”
Read in the filing ↗ Also in 10-K of Feb 26, 2025
Our management team stays informed about and monitors efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including, as appropriate, briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, such as external consultants engaged by us, and alerts and reports produced by security tools deployed in the IT environment.
Read in the filing ↗
Our management team strives to stay informed about and monitors efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, including, as appropriate, briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, such as external consultants engaged by us, and alerts and reports produced by security tools deployed in the IT environment.
Read in the filing ↗
In the event of a cyber-attack, we may be required by federal and state laws or regulations to provide notification to regulators or individuals. For example, the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) was signed into law on March 15, 2022. CIRCIA mandates that all owners and operators of critical infrastructure report cyber incidents to the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) within 72 hours and ransomware payments within 24 hours. These new requirements will become effective once CISA promulgates rules pursuant to the CIRCIA. CISA issued a notice of proposed rulemaking on April 4, 2024 and is expected to publish the final rule in May 2026.
Read in the filing ↗ Also in 10-K of Feb 26, 2025
… Additionally, rapidly evolving laws and regulations governing cybersecurity pose increasingly complex compliance obligations and technical challenges, and failure to comply with these obligations, including incident notification requirements, could result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties and negative reputational impacts that could cause us to lose existing or future customers.
Read in the filing ↗
… Additionally, rapidly evolving laws and regulations governing cybersecurity pose increasingly complex compliance obligations and technical challenges, and failure to comply with these obligations, including incident notification requirements, could result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties and negative reputational impacts that could cause us to lose existing or future customers.
Read in the filing ↗