Company: DTK
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0000936340-25-000065
Chunk: 98

Company: DTE ENERGY CO
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1C
Chunk 98
---
 of Directors and may include any significant matters involving cybersecurity within its reporting.  All members of the Board of Directors, including the Audit Committee, have either managerial knowledge or working knowledge of technology and cybersecurity matters.

DTE Energy’s Chief Information Officer leads the cybersecurity team and has responsibility for assessing and managing cybersecurity risks.  The Chief Information Officer has held this position for over 10 years and has decades of experience in IT, including oversight of information protection security (IPS).  The IPS cybersecurity team is also led by two full-time directors with over 40 combined years of industry experience, including (1) the director of cybersecurity operations responsible for the CSDC, identity and access assurance, and cloud security and (2) the IPS director of cybersecurity strategy, risk, and engagement who is also responsible for engagement and outreach to internal and external stakeholders.The Chief Information Officer provides regular updates to the Audit Committee and senior leaders regarding DTE Energy’s management of cyber risks, including but not limited to the status of various training metrics to safeguard against phishing, malware, and other cyber threats.  The Chief Information Officer also provides an annual cybersecurity update directly to the Board of Directors.  If cybersecurity risks arise, the CSDC executes the incident response plan and communicates the appropriate details to executive management, the Board of Directors, or any related committees.A cybersecurity incident may also require various levels of external reporting.  The CSDC coordinates with the legal department and controller’s organization in reporting incidents externally.  Depending on the nature of the incident, reporting may be required to various federal and state government agencies.  DTE Energy has forged trusted partnerships with such agencies and with other companies and organizations to share best practices, tools, and threat information.  This includes partnering with others in the utilities industry to form the Electricity Subsector Coordination Council (ESCC).  The ESCC is the principal liaison between the energy sector and the federal government in coordinating efforts to prepare for and respond to any threats to critical infrastructure.

25