Company: WELPM
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000107815-25-000105
Chunk: 78

Company: WISCONSIN ELECTRIC POWER CO
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1C
Chunk 78
---
ITEM 1C. CYBERSECURITY

As a wholly-owned subsidiary of WEC Energy Group, our cybersecurity-related risks are managed by WEC Energy Group's cybersecurity risk management program.

WEC Energy Group's Board of Directors is responsible for general oversight of the risk environment and associated management policies and practices of WEC Energy Group and its subsidiaries, including us. The WEC Energy Group Board of Directors has delegated to its AOC the responsibility for oversight of our major risk categories and exposures, including with respect to cybersecurity, and management's processes to monitor and control them. The AOC meets regularly throughout the year and receives and reviews various risk management reports about IT/OT cybersecurity, data security, and physical security risk management reports, and discusses these matters with appropriate management and other personnel. WEC Energy Group's CEO (who also serves as our CEO) and its CAO regularly report to the AOC and the WEC Energy Group Board of Directors about cybersecurity matters and risks as well as the adequacy and effectiveness of the cybersecurity risk management program.

To foster an enterprise-wide approach to risk management, WEC Energy Group has established an ERSC chaired by its CEO and comprised of a cross-functional group of senior leaders from across WEC Energy Group's organization. The ERSC regularly reviews key risk areas and oversees the development and implementation of effective compliance and risk management practices, including the use of internal and external audits. WEC Energy Group's Board of Directors and the AOC receive reports regarding the same. Governance of WEC Energy Group's cybersecurity risk management program is overseen by the ERSC, along with steering committees for information security, operational technology security, third-party vendor security controls, Sarbanes-Oxley security controls, and North American Electric Reliability Corporation Critical Infrastructure Protection compliance. 

2024 Form 10-K29Wisconsin Electric Power Company

Table of Contents

WEC Energy Group's CAO is responsible for enterprise-wide information technology services and cybersecurity system strategy. In this capacity, the CAO oversees the cybersecurity risk management program, which is maintained and implemented by the Enterprise Security Director. WEC Energy Group's CAO has 25 years of experience at the company, during which time she has held a number of management and leadership positions, including Chief Information Officer, through which she has developed expertise in WEC Energy Group's IT/OT cybersecurity, data security, and physical security environment and risk profile. 

The Enterprise Security Director, in collaboration with her team, is responsible for IT/OT cybersecurity, data security, and physical