NuStar Energy Investor Conference Presentation Deck
NuStar
I/S
Department
Internal Audit
Department
Cyber Risk
Including Our Comprehensive
Governance Program to Protect Our Operations
Legal
Department
A
Cyber Risk
Governance
Committee
Controller
/Financial
Reporting
/SOX
Operations
Composed of representatives from across the
company, our Cyber Risk Governance Committee
oversees the effectiveness of our Cybersecurity
Program and reports to our Board and executive
management
NuStar's
Cybersecurity Program
includes:
➤ Participation in industry
and peer cybersecurity
groups
➤ Vulnerability scanning,
patch management, and
penetration tests across
our systems
> Cyber Incident Response
Plan and cross-
organizational tabletop
exercises
➤ Regular risk assessments
► Annual cybersecurity
training for all employees
with 'refresher' activities
throughout the year
14View entire presentation