CAMBER ENERGY, INC. 10-K Cybersecurity GRC - 2024-03-25

Page last updated on April 11, 2024

CAMBER ENERGY, INC. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-03-25 08:55:57 EDT.

Filings

10-K filed on 2024-03-25

CAMBER ENERGY, INC. filed an 10-K at 2024-03-25 08:55:57 EDT
Accession Number: 0001477932-24-001445

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Board Oversight of Cybersecurity Matters The Company s Board of Directors recognizes the critical importance of developing, implementing, and maintaining a robust cybersecurity risk management strategy and governance program in order to safeguard the confidentiality, integrity and availability of the Company s systems and information. The Board s Audit Committee is tasked with overseeing cybersecurity threats, risk management strategy and governance. The management of cybersecurity risk has been integrated into the Company s overall risk management processes. Management of Cybersecurity Matters The Company s management is responsible for assessing, identifying and managing cybersecurity risks, threats and incidents. The Company has no internal IT function and engages third party providers that possess the requisite skills, systems and processes to effectively manage day-to-day IT operations, including cybersecurity. This includes, but is not limited to: Employing appropriate incident prevention and detection software (e.g., antivirus, anti-malware, firewall, endpoint detection and response, identity and access management, multifactor authentication, virtual private network, web content filter, spam filter, data loss protection software, security information and event management software) Employing industry-standard encryption protocols Employing backup/disaster recovery software Conducting regular vulnerability scans of Company systems and networks. Cybersecurity incidents are communicated to the Company s senior management, including the CEO and CFO, who direct the Company s response with the assistance of third-party specialists. Management notifies the Audit Committee of any cybersecurity incidents, including the nature of the incident, the Company s remediation actions and any required improvements and changes to systems and processes. Material Impact on Company The Company has not been materially affected by, and is not likely to be materially affected by, any significant cybersecurity incidents. 33 Table of Contents

Company Information