Company: GPOR
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001628280-25-008043
Chunk: 56

Company: GULFPORT ENERGY CORP
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 56
---
 and our third party partners continually mature our cyber program as threats evolve.Engaging Third Parties on Risk ManagementRecognizing the complexity and evolving nature of cybersecurity risk, we leverage strategic external partnerships to assess and mitigate cybersecurity threats to us. For example, in addition to our security analysts, we partner with third parties that provide 24/7 security operations monitoring, enhancing our response time. We are also audited by third parties for compliance with information security standards and assess vulnerabilities annually, providing additional expertise that strengthens our security posture.Managing Third Party RiskWe also recognize the risks associated with the use of vendors, service providers and other third parties that provide information system services to us, process information on our behalf, or have access to our information systems, and we have processes in place to oversee and manage these risks. We maintain ongoing monitoring to ensure compliance with our cybersecurity standards.Risks from Cybersecurity Incidents

As of December 31, 2024, and for the past five years, we have identified no security incidents or breaches that are material, or likely to be material, to our business strategy, results or financial condition. 

Cybersecurity Governance

We involve multiple levels of oversight as a part of our approach to cybersecurity risk management.Risk Management PersonnelCybersecurity remains a top identified enterprise-wide risk for our business and is overseen by our Chief Information Officer who is responsible for identifying and mitigating information security risks. Our current CIO has 20 years of industry experience and over 10 years of experience with the development, training and controls of effective global enterprise cybersecurity programs. The CIO’s responsibilities include but are not limited to: (i) reviewing our enterprise risk register and functional risk register; (ii) maintaining adequate processes to manage the identified risks under our cybersecurity program; (iii) analyzing logs of cybersecurity threats and vulnerabilities; (iv) overseeing prevention, detection, mitigation and remediation efforts; and (v) developing, maintaining, and ensuring team familiarity with the above‑mentioned incident response plan. Additionally, we maintain an experienced information technology team at the employee level that supports our Chief Information Officer in implementing our cybersecurity program and internal reporting, security and mitigation functions.

37

Table of ContentsIndex to Financial Statements

Board of Director Oversight

The Audit Committee receives a detailed cybersecurity update annually from the Chief Information Officer and receives a cybersecurity update quarterly through the ERM program as a key risk. 

ITEM 2.PROPERTIES

Information regarding our properties is included in Item 1 and in the Supplemental Information on Oil and Gas Exploration and Production