Company: DLNG
Filing Date: 2025-04-10
Form Type: 20-F
Source: 0001104659-25-033744
Chunk: 328

Company: Dynagas LNG Partners LP
Filing Date: 2025-04-10
Form: 20-F
Item: Item 16K
Chunk 328
---
ITEM 16K. CYBERSECURITY

Risk Assessment and Management

We believe that cybersecurity is fundamental in our operations and, as such, we are committed to maintaining robust governance and oversight of cybersecurity risks and to
implementing
comprehensive processes and procedures for identifying, assessing, and managing material risks from cybersecurity threats as part of our broader risk management system and processes. Our cybersecurity risk management strategy prioritizes detection, analysis, and response to known, anticipated or unexpected threats; effective management of security risks; and resiliency against incidents. With the ever-changing cybersecurity landscape and continual emergence of new cybersecurity threats, our Board of Directors, audit committee and senior management team ensure that significant resources are devoted to cybersecurity risk management and the technologies, processes and people that support it. We implement through our manager and other third parties, risk-based controls based on ISO 27001 framework, to protect our information, the information of our customers, suppliers, and other third parties, our information systems, our business operations, and our vessels. Additionally, our cybersecurity program provides mechanisms for employees to report any unusual or potentially malicious activity they observe.

Overall, our approach to cybersecurity risk management includes the following key elements:

  (i)      Continuous monitoring of cybersecurity threats, both internal and external, using data analytics and network monitoring systems.  

  (ii)      Engagement of third-party consultants and other advisors to assist in assessing points of vulnerability of our information security systems.  

  (iii)      Training and Awareness – We provide employee mandatory training that is administered on a periodic basis that reinforces our information technology policies, standards, and practices, as well a...  

Incident Response

As part of our cybersecurity risk management system and through our manager we have a dedicatedcybersecurity incident response teamconsisting of internal employees and third-party consultants who are responsible for managing and coordinating our cybersecurity incident response efforts. This team also collaborates closely with other internal teams in identifying, protecting from, detecting, responding to, and recovering from cybersecurity incidents. Cybersecurity incidents that meet certain thresholds are escalated to the senior management and cross-functional teams on an as-needed basis for support and guidance. Additionally, this team tracks cybersecurity incidents to help identify and analyze them. We maintain a cybersecurity incident response plan to prepare for and respond to cybersecurity incidents. The incident response plan includes standard processes for reporting and escalating cybersecurity incidents tosenior managementwho then consult with our Audit Committee and ultimately the Board of Directors if deemed necessary.

Cybersecurity Governance

Our
Audit Committee
along with our senior management have