Company: BEP
Filing Date: 2025-02-28
Form Type: 20-F
Source: 0001533232-25-000006
Chunk: 497

Company: Brookfield Renewable Partners L.P.
Filing Date: 2025-02-28
Form: 20-F
Item: Item 16
Chunk 497
---
 one element of our comprehensive approach to strong governance and risk management practices, which also includes an emphasis on responsible corporate governance and ethical business conduct.

Key highlights of our cybersecurity program include a comprehensive policy framework, reviewed and updated annually; security awareness training for all employees, completed annually; risk assessments for critical technology systems and applications, performed annually and following all changes to these systems; regular vulnerability scans; technology risk assessments and the use of software and technology to protect the confidentiality, integrity and availability of our systems, including the use of end-point detection and response, anti-malware applications and the use of programs that log, monitor and audit system activities.

Our cybersecurity program performance and effectiveness are frequently assessed and audited internally and by third parties. We regularly complete business-wide phishing tests and promptly address any areas of weakness identified. We monitor and assess cybersecurity and data privacy programs business-wide and regulatory changes in the countries where we operate, as well as monitor and assess cybersecurity threat intelligence for any potential impacts to our business. Where we engage third parties, we have policies and processes to govern third party access and reduce the risks associated with such access.

We conduct pre-acquisition due diligence on a potential investment’s cybersecurity and data privacy programs to identify any material risks that may need to be addressed as part of the acquisition or post-acquisition.

Our group’s policies, standards, and guidance are structured to help our group respond effectively to the dynamically changing environment of cybersecurity threats, cybersecurity risks, technologies, laws, and regulations. Our group modifies its policies, standards, and guidance as needed to adjust to this changing environment.

No risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected us, our business strategy, results of operations, or financial condition. However, we can provide no assurance that we will not experience any material cybersecurity threats or incidents in the future. See “ Item 3D. Risk Factors - Risks Relating to Our Operations and Our Industry”.

Governance

Cybersecurity at Brookfield Renewable is overseen by the board of directors of the Managing General Partner, the Audit Committee and management.

We employ a decentralized approach to overseeing cybersecurity at our businesses. The aim is to provide governance and guidance from the center to our regional businesses who have management accountability. Regional management and local experts in each country are responsible for controlling and managing the assets and processes in their business. We believe these individuals maintain the best knowledge of country cybersecurity standards and measures to ensure compliance. Within each business, we segregate systems that manage critical assets from all other