UNRESOLVED STAFF COMMENTS
−Removed: Index to Financial Statements
CYBERSECURITY
30 unchanged sentences
At Kinetik, we believe that the recognition and reporting of cybersecurity threats by every employee and contractor plays a key role in protecting and securing our network.
−Removed: We have mandatory annual training for our employees and contractors on security awareness annually, using a library of cybersecurity training modules.
+Added: We have mandatory annual training for our employees and contractors on
+Added: Index to Financial Statements
+Added: security awareness annually, using a library of cybersecurity training modules.
We deploy quarterly simulated phishing emails to all system users in an effort to gauge their cybersecurity awareness.
2 unchanged sentences
To keep our network secure, we have multifactor authentication (MFA) for all users, a password change policy, separation of duties in accounting systems, controlled access to network drives, endpoint protection, email security, mobile device management, device encryption, and ongoing active monitoring of threats.
−Removed: Index to Financial Statements
We have implemented devices designed to control third-party access to our plant systems and also provide 24/7 monitoring of our infrastructure.
7 unchanged sentences
Our Audit Committee oversees management’s assessment and management of cybersecurity risk.
−Removed: Our Senior IT Director, who reports to our Executive Vice President, Chief Administrative and Accounting Officer, leads the Information Technology team, is a member of our management-level.
−Removed: Cybersecurity Governance Committee and management-level Cybersecurity Risk Committee manage our information technology and cybersecurity function.
+Added: Our Senior IT Director, who reports to our Executive Vice President, Chief Administrative and Accounting Officer, leads the Information Technology team, is a member of our management-level Cybersecurity Governance Committee and management-level Cybersecurity Risk Committee and manages our information technology and cybersecurity function.
Through the Company’s ERM program, our Cybersecurity Governance Committee and Cybersecurity Risk Committee oversee the Company’s cybersecurity initiatives.
10 unchanged sentences
Despite the implementation of our cybersecurity processes, our security measures cannot guarantee that a significant cyberattack will not occur.
−Removed: No security measure is infallible.
−Removed: See “Risk Factors” in Part I —Item 1A of this Annual Report for additional information about the risks to our business associated with a breach or other compromise to our information and operational technology systems.
+Added: See “Risk Factors” in Part I—Item 1A of this Annual
+Added: Index to Financial Statements
+Added: Report for additional information about the risks to our business associated with a breach or other compromise to our information and operational technology systems.
LEGAL PROCEEDINGS
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.