Company: OXY-WT
Filing Date: 2025-03-20
Form Type: DEF 14A
Source: 0000797468-25-000054
Chunk: 26

Company: OCCIDENTAL PETROLEUM CORP /DE/
Filing Date: 2025-03-20
Form: DEF 14A
Chunk 26
---
-related risks and opportunities, and external investor-oriented reporting thereon►Oversees the company’s sustainability and social responsibility programs, policies andpractices, including the Human Rights Policy►Oversees Occidental’s Political Contributions and Lobbying Policy and Charitable Contributionsand Matching Gift Program►Oversees the shareholder engagement program |
| ROLE OF MANAGEMENTSenior leadership, including the ERM Council (a group of senior executives responsible for governance and oversight of the ERMprogram), manages risks. Occidental maintains internal processes and controls to facilitate risk identification and management. Aspart of Occidental’s governance and risk management processes, senior management regularly reports to the Board and/or itscommittees on financial, operational, human capital, cyber security, HSE and sustainability matters. |                                         |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |

| 2025Proxy Statement |
| 29                  |

Corporate Governance

|                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | OVERSIGHT OF CYBERSECURITY             |
| Occidental recognizes the importance of monitoring cyber risk. At the management level, Occidental’s Chief Information Officer (CIO),who has over 20 years of IT and cybersecurity experience, heads the team responsible for implementing and maintaining cybersecurityand data protection practices across Occidental’s businesses and reports directly to the President and CEO. Occidental has a centrallycoordinated team, led by its CIO, responsible for implementing and maintaining cybersecurity and data protection practices across thecompany. Occidental’s CIO regularly reviews risk management measures and the overall cyber risk strategy implemented andmaintained by the company. The CIO receives regular updates on Occidental’s cybersecurity program and monitors the prevention,detection, mitigation and remediation of cybersecurity incidents through reports from the company’s cybersecurity leaders, each ofwhom is supported by a team of trained cybersecurity professionals. In addition to Occidental’s extensive in-house cybersecuritycapabilities, Occidental also engages assessors, consultants, auditors or other third parties when necessary to assist with assessing,identifying and managing cybersecurity risks.At the Board level, the Audit Committee oversees Occidental’s IT security programs, including cybersecurity, which includes review ofpossible external threats and potential mitigations. The Board also reviews the company’s cybersecurity program at least annually. Inthis review, the CIO briefs the full Board on cybersecurity and data protection matters, including analysis and review of the measuresimplemented by the company to identify and mitigate cybersecurity risks. Occidental also has protocols by which material cybersecurityincidents are to be reported to the Audit Committee