Company: MSEX
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001174947-25-000251
Chunk: 390

Company: MIDDLESEX WATER CO
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1C
Chunk 390
---
 program aims to protect the
uninterrupted availability of critical information technology resources. Regular assessments, conducted both internally and by third parties,
evaluate our program against industry standards, including the National Institute of Standards and Technology Cybersecurity Standard and
the Risk Management Framework.

Although we have not experienced cybersecurity
breaches or incidents that have significantly impacted our financial condition, results of operations, or business strategy, the effectiveness
of our measures to prevent, detect, mitigate, or recover is based on currently known threats and recovery methods. There is no guarantee
that cybersecurity breaches or incidents will not impact our business operations, strategy, financial condition, or operations.

The ever-evolving landscape of cybersecurity threats
introduces ongoing challenges. The Company recognizes the increasing frequency and sophistication of these threats. Despite implementing
measures to secure operational and technology systems and fostering a culture of continuous improvement, the dynamic nature of cyber-attacks
and vulnerabilities implies that these defenses may not be foolproof.

Cybersecurity Risk Management Program and
Strategy

Cybersecurity risk management strategy is an integral
component of our operations and our overall risk management process. Recognizing the dynamic nature of cybersecurity threats, we have
implemented a comprehensive risk management program that aims to identify, assess, and mitigate potential risks. Our strategy involves
a proactive approach, incorporating preventative measures, continuous monitoring, and adaptive response mechanisms. We prioritize the
safeguarding of our operational network environment, sensitive data, including confidential business information and personal details
of our customers and employees. Regular assessments conducted both internally and by third parties ensure our cybersecurity program aligns
with industry standards. In addition to a dedicated cybersecurity team, we employ a defense-in-depth strategy, utilizing multiple security
measures to protect our information technology system. Collaboration with third-party experts, industry peers and ongoing training initiatives
ensures our cybersecurity strategy remains robust and responsive to evolving threats. We understand the importance of maintaining a vigilant
and adaptive stance in the ever-evolving landscape of cybersecurity to safeguard our business operations, financial stability, and as
a direct result, our overall success.

Key elements of our cybersecurity risk mitigation
approach are comprised of:

    ●
    A dedicated cybersecurity team;

    ●
    Collaboration with a third-party managed detection and response company for 24/7 monitoring and response; 
  
    ●
    Cybersecurity insurance to cover a portion of losses and damages resulting from cyber-attacks or security breaches;
  
    ●
    An incident response team that is comprised of various departments required for an effective