Company: DSX-PB
Filing Date: 2025-03-21
Form Type: 20-F
Source: 0001562762-25-000050
Chunk: 249

Company: DIANA SHIPPING INC.
Filing Date: 2025-03-21
Form: 20-F
Item: Item 16K
Chunk 249
---
Item 16K. Cybersecurity

Risk management and strategy
We have

security measures
in place
to mitigate the

risk of cybersecurity

threats affecting our

technology
environment and

our business.

Cybersecurity risk

management is

integrated into

our broader

enterprise
risk management

(ERM) framework

to protect

shareholder value

and ensure

business continuity.

Cyber
risks are assessed

alongside operational,

financial, and compliance

risks. By integrating

cybersecurity into
our broader risk management strategy, we aim to reduce exposure

to cyber incidents, safeguard sensitive
data, and maintain

investor confidence

in our

long-term resilience

and operational

stability. Since 2023, the
Company

has maintained

ISO

27001

certification,

demonstrating ongoing

compliance

with

the

rigorous
requirements of

this internationally

recognized standard.
The Company's

Chief Information

Security Officer
(CISO) regularly conducts internal reviews and enhancements to

ensure that our cyber risk management
framework remains

aligned with

ISO 27001

and integrated

into our

broader enterprise

risk management
strategy, considering financial, operational, and compliance impacts.
Additionally,

we

have

established structured

processes

for

third-party

risk

management.

During

vendor
onboarding and

ongoing monitoring,

information security

assessments are

conducted, including

security
questionnaires, contractual

requirements for

NDAs and

DPAs, and cybersecurity

liability clauses

to mitigate
supply chain risks.
Cybersecurity training

is carried

out on

a company-wide

basis to

all employees

and seafarers.

To help build
cultural

awareness

of

these

risks

within

the

Company,

additional

phishing

campaigns

have

been
implemented within

the organization

which have

motivated the

staff to

react, helping

to enhance

awareness
of these risks and mitigate their occurrence. The security team have further

enhanced our processes and
increased our defenses by implementing a cybersecurity testing program,

carried out on a yearly basis by
external

consultants.

Penetration

testing

was

also

carried

out

in

parallel

during

2024.

A

centralized
monitoring

system,

powered

by

Microsoft's

cloud-based