Company: BEP
Filing Date: 2025-02-28
Form Type: 20-F
Source: 0001533232-25-000006
Chunk: 506

Company: Brookfield Renewable Partners L.P.
Filing Date: 2025-02-28
Form: 20-F
Item: Item 16K
Chunk 506
---
ITEM 16K.    CYBERSECURITY
Risk Management and Strategy
We have a cybersecurity program for assessing, identifying, and managing material risks from cybersecurity threats. This includes compliance with Brookfield Renewable’s Cybersecurity Policy (“CSP”). Our cybersecurity policy defines the expectations and requirements for the secure and reliable operation of information technology and operating technology environments. Cybersecurity is one element of our comprehensive approach to strong governance and risk management practices, which also includes an emphasis on responsible corporate governance and ethical business conduct.
Key highlights of our cybersecurity program include a comprehensive policy framework, reviewed and updated annually; security awareness training for all employees, completed annually; risk assessments for critical technology systems and applications, performed annually and following all changes to these systems; regular vulnerability scans; technology risk assessments and the use of software and technology to protect the confidentiality, integrity and availability of our systems, including the use of end-point detection and response, anti-malware applications and the use of programs that log, monitor and audit system activities.
Our cybersecurity program performance and effectiveness are frequently assessed and audited internally and by third parties. We regularly complete business-wide phishing tests and promptly address any areas of weakness identified. We monitor and assess cybersecurity and data privacy programs business-wide and regulatory changes in the countries where we operate, as well as monitor and assess cybersecurity threat intelligence for any potential impacts to our business. Where we engage third parties, we have policies and processes to govern third party access and reduce the risks associated with such access.
We conduct pre-acquisition due diligence on a potential investment’s cybersecurity and data privacy programs to identify any material risks that may need to be addressed as part of the acquisition or post-acquisition.
Our group’s policies, standards, and guidance are structured to help our group respond effectively to the dynamically changing environment of cybersecurity threats, cybersecurity risks, technologies, laws, and regulations. Our group modifies its policies, standards, and guidance as needed to adjust to this changing environment.

Page 319    
No risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected us, our business strategy, results of operations, or financial condition. However, we can provide no assurance that we will not experience any material cybersecurity threats or incidents in the future. See “Item 3D. Risk Factors— Risks Relating to Our Operations and Our Industry”.
Governance
Cybersecurity at Brookfield Renewable is overseen by the board of directors of the Managing General Partner, the Audit Committee and management.
We employ a decentralized approach to overseeing cybersecurity