NuStar Energy Investor Conference Presentation Deck slide image

NuStar Energy Investor Conference Presentation Deck

As an Operator of Critical Energy Infrastructure, We Recognize the Importance of Cybersecurity, and We Have Built and Continue to Test and Improve a Robust Program to Prevent, Detect and Respond to Potential Threats Composed of representatives from across the company, our Cyber Risk Governance Committee oversees the effectiveness of our Cybersecurity Program and reports to our Board and executive management Information Services Internal Audit RESPONSIBLE OPERATIONS: CYBERSECURITY ACROSS THE COMPANY NuStar Legal Human Resources A Cyber Risk Governance Committee Controller/ SOX Operations Responsibly Resilient NuStar's Cybersecurity Program includes: ā— Participation in industry and peer cybersecurity groups Vulnerability scanning, patch management, and penetration tests across our systems Cyber Incident Response Plan and cross-organizational tabletop exercises Regular risk assessments Annual cybersecurity training for all employees with 'refresher' activities throughout the year 21
View entire presentation