Company: VIST
Filing Date: 2025-04-09
Form Type: 20-F
Source: 0001193125-25-076856
Chunk: 76

Company: Vista Energy, S.A.B. de C.V.
Filing Date: 2025-04-09
Form: 20-F
Item: Item 6
Chunk 76
---
 Cybersecurity Framework developed by the U. S. Department of Commerce’s National Institute of Standards and Technology (“ NIST”). We evaluate, in collaboration with a top-tierthird-party consultant, our maturity level against this framework, monitor current cybersecurity trends, and review disclosure research. Our cybersecurity strategy is aligned with NIST’s six core functions, as defined in the February 2024 release (version 2.0), to identify cybersecurity gaps and requirements. In 2024, we achieved and maintained a NIST maturity level that exceeds our target of 3.5.

We consolidate all information from the various applications and real-time databases, which come from our operational sensors, into multicloud Data Lakes. From there, we perform data integrations, develop products, and create AI solutions with a high-quality, data-driven approach focused on business value. The use of real-time acquired data to enable Near Real-Time decision-making is critical, which is why we have connected our field offices and facilities to the internet via a high-bandwidth fiber optic network (>200mbps) with sufficient redundancy to ensure +95% uptime, in line with our Cloud strategy.

We depend on digital technology, including information systems to process financial and operational data, analyze seismic and drilling information, estimate oil and gas reserves, and utilize real-time systems to monitor and control production. Due to the critical nature of this infrastructure and the increased accessibility provided by internet connectivity, our systems are exposed to a heightened risk of cyber-attacks. See “ Item 3 - Key Information - Risk Factors - Detailed Risk Factors - Risks Related to Our Business and Industry - Our industry has become increasingly dependent on digital technologies to carry out daily operations and is subject to increasing cybersecurity threats“ and “ Item 16K - Cybersecurity.”

Environmental Policy

In 2021, we announced our ambition to reduce GHG emissions through a multi-year decarbonization plan. This five-year plan prioritizes selected projects from our abatement cost curve based on their carbon abatement potential and cost efficiency. We forecast a reduction of more than 80% in our scope 1 and 2 GHG emissions intensity, from 39 kgCO2e/boe in 2020 to 7 kgCO2e/boe in 2026. In 2024, we recorded a scope 1 and 2 GHG emissions intensity of 8.8 kgCO2e/boe, representing a 44% reduction compared to 15.6 kgCO2e/boe in 202