Company: MTZ
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000015615-25-000021
Chunk: 1005

Company: MASTEC INC
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 1005
---
 For more information on the cybersecurity risks we face, please refer to “We rely on information, communications and data systems in our operations.  Systems and information technology interruptions and/or data security breaches could adversely affect our ability to operate, our operating results, our data security or our reputation.” in Item 1A. “Risk Factors.”

Governance

Our Chief Information Officer (“CIO”) and our Chief Information Security Officer (“CISO”), who report to our executive management team, are responsible for identifying, assessing and managing material cybersecurity risks, establishing processes to monitor such risks, putting appropriate mitigation measures in place, maintaining appropriate policies and procedures for our cybersecurity program and providing periodic 

30

updates to the Audit Committee of our Board of Directors.  To this end, our cybersecurity team conducts annual reviews of enterprise-level cybersecurity risks.  Additionally, we maintain company-wide policies and procedures concerning cybersecurity matters, which are subject to annual internal review, or more frequent, as warranted.  MasTec's CISO oversees the development and implementation of our information security program and reports on cybersecurity matters to the Audit Committee.  Our CIO and CISO each has over 15 years of experience in cybersecurity oversight, and our cybersecurity team is composed of personnel with a broad range of professional cybersecurity experience and expertise, and includes members with cybersecurity certifications, such as the Certified Information Systems Security Professional (CISSP) certification.Our CIO and CISO routinely inform our Chief Financial Officer and other members of management, as appropriate, about threats, including assessments of threat levels, trends, incidents and related remediation plans, including matters related to the prevention, detection and remediation of any incidents in accordance with our cybersecurity program.Our Board of Directors has oversight of our enterprise risk assessment and risk management processes, as well as the steps taken to mitigate these risks, including for cybersecurity matters.  The Audit Committee of our Board of Directors has oversight of cybersecurity risk assessment and risk management policies as part of its risk management oversight responsibilities, and is responsible for ensuring that the Company has processes in place to identify, evaluate and manage cybersecurity risks, as well as appropriate processes and programs to mitigate cybersecurity incidents if they occur.  The Audit Committee actively engages in cybersecurity risk discussions and receives periodic updates on the Company's cybersecurity program from our CISO, including updates on various cybersecurity matters such as risk assessments, threats, incidents, prevention, detection and remediation of incidents, mitigation strategies, areas of emerging risk and industry trends, among other topics.  Significant cybersecurity matters, including those related to incidents, are escalated