Company: MSEX
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001174947-25-000251
Chunk: 272

Company: MIDDLESEX WATER CO
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1B
Chunk 272
---
 An incident response team that is comprised of various departments required for an effective response;

18 

    ●
    Conducting periodic drills and exercises, including industry collaborations and participation from the executive team;
  
    ●
    Continuous information security awareness training and phishing simulation exercises;
  
    ●
    Regular security assessments to address evolving risks and threats;
  
    ●
    Deployment of automation solutions to strengthen detection and response capabilities; and
  
    ●
    Utilizing services offered by the United States Department of Homeland Security to assist with resiliency planning.

Third-Party Relationships

The Company utilizes partners and third-party
service providers to help deliver safe and reliable water and wastewater services across its regulated operations. In connection with
these relationships, we perform due diligence, cyber risk scoring, cybersecurity related contractual obligations, and periodic reviews
of third-party control environments to ensure alignment with the Company's risk exposure, business requirements, and risk tolerances.

We extend our cybersecurity focus to third-party
service providers by evaluating and monitoring their cybersecurity risks. High-risk vendors undergo continuous monitoring, and we maintain
contractual agreements that mandate our third-party providers’ commitment to managing cybersecurity risks, providing incident notifications,
and being subject to cybersecurity audits.

Cybersecurity Governance 

The Corporate Governance and Nominating Committee
of the Board is tasked with serving as the Board of Director’s primary body to oversee management’s risk identification, management
and mitigation strategies related to, among other risks, information technology, cybersecurity and data security risks. Management, including
the CTO, provides regular reports to the Board covering aspects such as risks, threats, the evolving threat landscape, enhancements to
the cybersecurity program, and the preparedness of internal responses.

ITEM 2.PROPERTIES.

Utility Plant 

The water utility plant in our systems consists
of source of supply, pumping, water treatment, transmission and distribution, general facilities and all appurtenances, including all
connecting pipes.

The wastewater utility plant in our systems consist
of pumping, treatment, collection mains, general facilities and all appurtenances, including all connecting pipes.

Middlesex System 

The Middlesex System’s principal source
of surface supply is the Delaware & Raritan Canal owned by the State of New Jersey and operated as a water resource by the NJWSA.

Water is withdrawn from the Delaware & Raritan
Canal at New Brunswick, New Jersey through our intake and pumping station, located on state-owned land bordering the canal. Water is transported
through two raw water pipelines for