NuStar Energy ESG Presentation Deck
As an Operator of Critical Energy Infrastructure, We Recognize the Importance of Cybersecurity, and We Have
Built and Continue to Test and Improve a Robust Program to Prevent, Detect and Respond to Potential Threats
Composed representatives from across the company,
our Cyber Risk Governance Committee oversees the
effectiveness of our Cybersecurity Program and reports to
our Board and executive management
Information
Services
Internal
Audit
RESPONSIBLE OPERATIONS:
CYBERSECURITY ACROSS THE COMPANY
NuStar
Legal
Human
Resources
A
Cyber Risk
Governance
Committee
Controller/
SOX
Operations
Responsibly Resilient
NuStar's
Cybersecurity Program includes:
ā
Participation in industry and
peer cybersecurity groups
Vulnerability scanning, patch
management, and
penetration tests across our
systems
Cyber Incident Response Plan
and cross-organizational
tabletop exercises
Regular risk assessments
Annual cybersecurity training
for all employees with
'refresher' activities
throughout the year
21View entire presentation