SPINDLETOP OIL & GAS CO 10-K Cybersecurity GRC - 2024-04-16

Page last updated on April 16, 2024

SPINDLETOP OIL & GAS CO reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-04-16 12:15:29 EDT.

Filings

10-K filed on 2024-04-16

SPINDLETOP OIL & GAS CO filed an 10-K at 2024-04-16 12:15:29 EDT
Accession Number: 0001017386-24-000085

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity The Company utilizes information technology systems throughout its business. As its reliance on information technology systems and data has increased, the Company obtained cybersecurity insurance and utilizes third party risk assessments. Cyber Risk Management & Strategy As part of its overall risk management system, the Company utilizes a third party to assess the Company s processes and practices for managing and mitigating cybersecurity risks. The Company focuses on building cybersecurity awareness with its employees and other end-users through training and security exercises and communicates the Company’s expectations of employees and contractors with respect to cybersecurity matters. The Company uses third-party cybersecurity professionals to review and assess the Company s cybersecurity controls and procedures. Although the Company has implemented policies and procedures to try to protect against cyber-attacks, there can be no assurance that they will be effective in avoiding disruption and business impacts. See Item 1A, Risk Factors for related discussion. Cyber Expertise and Experience The Company relies on third party cybersecurity professionals to provide risk assessments to help assess cybersecurity risks. Cyber Governance & Oversight Members of management report to the Company s Board of Directors regarding cybersecurity matters, including the cyber risk assessments performed for the Company. As part of its risk oversight responsibility, the Board oversees our policies and strategies for mitigating cybersecurity risks. 26

Company Information