Company: ATO
Filing Date: 2025-11-14
Form Type: 10-K
Source: 0000731802-25-000056
Chunk: 49

Company: ATMOS ENERGY CORP
Filing Date: 2025-11-14
Form: 10-K
Item: Item 1C
Chunk 49
---
 and our Board of Directors. This plan, which is periodically reviewed and tested, is supported by third parties to provide guidance and support to our cybersecurity management team.We also address cybersecurity risks associated with third-party service providers, including those in our supply chain or who have access to our data or our information technology systems. Atmos Energy currently conducts cyber assessments on potential vendors that will have access to information technology systems, data or facilities that house such systems or data. Following approval, those vendors are contractually required to manage their cybersecurity risks and provide notification in the event of a cybersecurity incident.

Governance

Our Vice President and Chief Information Officer (CIO), who has over two decades of experience in information technology, is responsible for overseeing our cybersecurity program. The CIO oversees an IT Information security team responsible for our overall cybersecurity program. This team is comprised of several IT professionals with varying degrees of cybersecurity experience and is led by our Director – Cybersecurity who has over 30 years of experience in information technology and cybersecurity. The Director – Cybersecurity reports to the CIO, who reports to the Senior Vice President and Chief Financial Officer.The CIO is a member of the Company’s Risk Management and Compliance Committee (RMCC). The RMCC is comprised of members from the senior leadership team and is responsible for overseeing enterprise-wide risk management across all categories, including cybersecurity. The RMCC is overseen by the Company’s Management Committee, which is comprised of the President and Chief Executive Officer, Senior Vice President and Chief Financial Officer, Senior Vice President, Utility Operations, Senior Vice President, General Counsel & Corporate Secretary, Senior Vice President, Human Resources, and Senior Advisor. The CIO provides regular cybersecurity updates to the Audit Committee of the Board of Directors and the Management Committee. These updates address prevention, detection, mitigation, and remediation of cybersecurity incidents, as well as risks, threats, and the threat landscape.The Audit Committee of the Board of Directors oversees the company's cybersecurity risks. Additionally, our Board of Directors periodically engages with third-party advisors to provide further education about cybersecurity risks.

19