Company: BSM
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0001628280-25-007730
Chunk: 189

Company: Black Stone Minerals, L.P.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 189
---
itholders could lose confidence in our financial reporting, which would harm our business and the trading price of our units.

Effective internal controls are necessary for us to provide reliable financial reports, prevent fraud, and operate successfully as a publicly traded partnership. If we cannot provide reliable financial reports or prevent fraud, our reputation and operating results would be harmed. We cannot be certain that our efforts to develop and maintain our internal controls will be successful, that we will be able to maintain adequate controls over our financial processes and reporting in the future, or that we will be able to comply with our obligations under Section 404 of the Sarbanes-Oxley Act. For example, Section 404 requires us, among other things, to annually review and report on, and our independent registered public accounting firm to attest to, the effectiveness of our internal controls over financial reporting. Any failure to develop or maintain effective internal controls, or difficulties encountered in implementing or improving our internal controls, could harm our operating results or cause us to fail to meet our reporting obligations. Ineffective internal controls could also cause investors to lose confidence in our reported financial information, which would likely have a negative effect on the trading price of our common units.

Various security risks, including cybersecurity threats, data breaches, and other disruptions, could significantly affect us.

Various security risks, including cyber attacks on businesses, have escalated in recent years. As one of the largest owners and managers of oil and natural gas mineral interests in the United States, we rely on electronic systems and networks to control and manage our business and have multiple layers of security to monitor, mitigate and manage these risks. However, these systems and networks, as well as our operators’ systems and networks and third-party infrastructure and operations, such as pipelines and transportation facilities, may be subject to sophisticated and deliberate security attacks and security breaches, which could lead to the corruption or loss of sensitive and valuable data or other disruptions. If we or our operators were to experience an attack or a breach and security measures failed, the potential consequences to our businesses and the communities in which we operate could be significant, including the corruption or loss of sensitive and valuable data, legal claims or proceedings, liability under laws that protect the privacy of personal information, regulatory penalties, damage to our reputation, and other disruptions of our operations, any of which could adversely affect our business. In addition, as cyber attacks become increasingly sophisticated, and the regulatory framework for data privacy and security worldwide continues to evolve and develop, we may incur significant costs to modify, upgrade or enhance our security measures and