Company: DSX-PB
Filing Date: 2025-03-21
Form Type: 20-F
Source: 0001562762-25-000050
Chunk: 247

Company: DIANA SHIPPING INC.
Filing Date: 2025-03-21
Form: 20-F
Item: Item 16J
Chunk 247
---

risks

within

the

Company,

additional

phishing

campaigns

have

been
implemented within

the organization

which have

motivated the

staff to

react, helping

to enhance

awareness
of these risks and mitigate their occurrence. The security team have further

enhanced our processes and
increased our defenses by implementing a cybersecurity testing program,

carried out on a yearly basis by
external

consultants.

Penetration

testing

was

also

carried

out

in

parallel

during

2024.

A

centralized
monitoring

system,

powered

by

Microsoft's

cloud-based

Security

Information

and

Event

Management
(SIEM)

solution,

is

in

place

throughout

the

year.

This

system

aggregates

security

data

from

various
sources, uses built-in artificial

intelligence to detect and investigate

threats, and enables our security

team
to respond to incidents rapidly.

We have also created a comprehensive Business Continuity and Disaster
Recovery plan to ensure business resilience and minimize potential

disruptions.
For the

year 2025,

the security

team has

planned a

comprehensive

collaboration with

a
third-party
company
to enhance our cybersecurity awareness and training initiatives. This partnership includes the

design and
implementation

of

a

multi-faceted

approach

to

staff

training,

encompassing

synchronous

and
asynchronous

security

awareness

sessions,

custom-tailored

phishing

campaigns

and

the

creation

of
informative cybersecurity awareness

newsletters to keep

our staff

up to date

on the latest

best practices
and emerging risks. Furthermore, the

collaboration will focus on the

customization and digitalization of our
vessels' cybersecurity awareness program, ensuring that our seafarers

maintain a robust security posture
while at sea.

In addition to

awareness initiatives, we will

continue to acquire

relevant tools to

support the
identification of
third-party
risks and further strengthen our overall security posture.
As

part

of

our

continuous

efforts

to

enhance

threat

detection

and

incident

response,

we

will

leverage
Security Operations

Center (SOC)

services through

a trusted

external provider. This