15 unchanged sentences
These risk assessments help evaluate the likelihood and potential impact of cybersecurity incidents.
−Removed: Our Chief Administrative Officer (“CAO”) oversees these risk assessments and meets regularly with the security and compliance team to review cybersecurity risks and threats, and also participates in our enterprise risk management process.
+Added: Our Vice President – IT oversees these risk assessments and meets regularly with the security and compliance team to review cybersecurity risks and threats, and also participates in our enterprise risk management process.
In addition, the Company engages several third-party consultants in connection with the risk assessments, and we have established separate processes and procedures to oversee and identify cybersecurity risks associated with third parties.
5 unchanged sentences
Incident Identification and Response
−Removed: We have implemented a monitoring and detection system, with oversight from our CAO to help promptly identify cybersecurity incidents.
+Added: We have implemented a monitoring and detection system, with oversight from our Vice President – IT to help promptly identify cybersecurity incidents.
In the event of any breach or cybersecurity incident, we have a formal incident response plan designed to provide for immediate action to contain the incident, mitigate the impact and restore normal operations efficiently.
5 unchanged sentences
Our IT polices are designed to address and manage all aspects of our IT environment, including cybersecurity, and we review and update our policies regularly as part of our risk management processes.
−Removed: We deploy both an internal Protection of Personal
−Removed: Identifiable Information Policy and a publicly available Privacy Notice to help us understand and respect the privacy of the individuals whose data we have custody over.
+Added: We deploy both an internal Protection of Personal Identifiable Information Policy and a publicly available Privacy Notice to help us understand and respect the privacy of the individuals whose data we have custody over.
We monitor our data collection practices, policies and notices in an effort to comply with the evolving nature of applicable data privacy and security laws.
5 unchanged sentences
Cybersecurity risks are overseen at the board level through the Audit Committee .
−Removed: Our CAO, together with the security and compliance team, is responsible for the monitoring, assessment and management of cybersecurity risk, and seeks to maintain the security and continuity of our operations.
−Removed: Our CAO oversees the Company’s cybersecurity strategy, cybersecurity and data privacy policies, measures and controls, and Board of Directors and Audit Committee communications on cybersecurity matters.
−Removed: Our CAO regularly briefs senior management, the Board of Directors and the Audit Committee on cybersecurity issues as part of our overall enterprise risk management program, including quarterly updates to the Audit Committee, which may include information regarding our exposure to privacy and cybersecurity risks, plans and activities to monitor and mitigate privacy and cybersecurity risks, IT governance policies and programs, including our cybersecurity incident response plan, and legislative and regulatory developments that could impact our privacy and cybersecurity risks.
+Added: Our Vice President – IT, together with the security and compliance team, is responsible for the monitoring, assessment and management of cybersecurity risk, and seeks to maintain the security and continuity of our operations.
+Added: Our Vice President – IT oversees the Company’s cybersecurity strategy, cybersecurity and data privacy policies, measures and controls, and Board of Directors and Audit Committee communications on cybersecurity matters.
+Added: Our Vice President – IT regularly briefs senior management, the Board of Directors and the Audit Committee on cybersecurity issues as part of our overall enterprise risk management program, including quarterly updates to the Audit Committee , which may include information regarding our exposure to privacy and cybersecurity risks, plans and activities to monitor and mitigate privacy and cybersecurity risks, IT governance policies and programs, including our cybersecurity incident response plan, and legislative and regulatory developments that could impact our privacy and cybersecurity risks.
Additionally, our Vice President – Risk Management oversees our enterprise risk management process and apprises the Audit Committee and our Board of Directors of all significant risks facing the Company, including cybersecurity risks.
−Removed: Our CAO, Aaron S.G.
−Removed: Merrick, has more than 25 years of experience in the technology sector and 16 years of experience in managing cybersecurity risk.
−Removed: Merrick was named CAO in 2022 and previously served as our Vice President – IT since 2016.
−Removed: Prior to joining Antero, he held IT leadership positions of increasing responsibility at Apache Corporation, including Director of IT from 2006 to 2009 and Vice President of IT from 2009 to 2015.
−Removed: Additionally, Mr.
−Removed: Merrick was President of a computer consulting business from 2002 to 2006, and he also held several positions of increasing responsibility at T-NETIX, Inc., including Vice President of IT, during his tenure from 1995 to 2000.
−Removed: Merrick graduated from Bob Jones University in 1984 with a Bachelor of Science degree in Accounting.
+Added: Our Vice President – IT, Biren Kumar, has more than 16 years of experience serving as a Chief Information Officer (“CIO”) or in similar roles, which have included responsibility for managing cybersecurity risk.
+Added: Kumar was named Vice President – IT in 2024.
+Added: Prior to joining Antero, he served as the CIO for several companies, including Dynegy Inc.
+Added: from 2005 to 2011, Rockwater Energy Solutions Inc.
+Added: from 2011 to 2014, KLX Inc.
+Added: from 2014 to 2018 and KLX Energy Services Holdings, Inc.
+Added: from 2018 to 2021.
+Added: Kumar holds a Bachelor of Business Administration in Management Information Systems and a Master of Business Administration from the University of Houston.
Impact of Risks from Cybersecurity Threats
+Added: The energy industry’s growing reliance on information technology and operational technology to support critical operations, such as energy production, distribution, and management activities, has made it more susceptible to cybersecurity incidents.
+Added: As a result, the global rise of cybersecurity incidents, whether from intentional attacks or accidental events, poses a significant challenge to our industry.
+Added: As cybersecurity threats continue to evolve in complexity and scale, it remains an ongoing and increasingly difficult task for the industry to prevent, detect, mitigate, and remediate these incidents.
As of the date of this Annual Report on Form 10-K, we are not aware of any cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us.
7 unchanged sentences
Risk Factors” for additional information about the risks to our business associated with a breach or compromise to our information technology systems.
+Added: LEGAL PROCEEDINGS
+Added: The information required by this item is included in Note 15—Contingencies to our consolidated financial statements and is incorporated herein.
+Added: MINE SAFETY DISCLOSURES
+Added: Not applicable.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.