Company: OXY-WT
Filing Date: 2025-02-18
Form Type: 10-K
Source: 0000797468-25-000029
Chunk: 153

Company: OCCIDENTAL PETROLEUM CORP /DE/
Filing Date: 2025-02-18
Form: 10-K
Item: Item 1C
Chunk 153
---
 regular updates and monitor detection, mitigation and remediation through reports from a team of experienced cybersecurity leaders responsible for actioning the Company’s cybersecurity incident response plan. As a material cybersecurity incident is handled by the team, the CIO will maintain communication and information flow to senior leadership as well as the Audit Committee and/or the Board, as appropriate.Cybersecurity risks and associated mitigation strategies and efforts are analyzed by senior leadership as part of the enterprise risk assessments that are reported to and discussed by the Board. Additional information on cybersecurity risks Occidental faces is discussed in Item 1A of Part I, “Risk Factors,” under the heading “Occidental is exposed to cyber-related risks,” which should be read in conjunction with the foregoing information.Occidental’s business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, including as a result of previously identified cybersecurity incidents, but Occidental cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents. For more information on Occidental’s cybersecurity related risks, see Item 1A “Risk Factors” of this Annual Report on Form 10-K.

GOVERNANCE

BOARDThe Audit Committee of the Board oversees the Company’s IT security programs, including cybersecurity, which includes review of possible external threats and potential mitigations. The Board also reviews the Company’s cybersecurity program at least annually. In this review, the CIO briefs the full Board on cybersecurity and data protection matters, including analysis and review of the measures implemented by the Company to identify and mitigate cybersecurity risks. Occidental also has protocols by which material cybersecurity incidents are to be reported to the Audit Committee and/or the Board.SENIOR MANAGEMENTOccidental’s CIO, who has over 20 years of IT and cybersecurity experience at the Company and elsewhere, heads the team responsible for implementing and maintaining cybersecurity and data protection practices across Occidental’s businesses and reports directly to the President and CEO. Occidental has a centrally coordinated team, led by its CIO, responsible for implementing and maintaining cybersecurity and data protection practices across the Company. Occidental’s 

22 OXY 2024 FORM 10-K

table of contentsOTHER INFORMATION

CIO regularly reviews risk management measures and the overall cyber risk strategy implemented and maintained by the Company. The CIO receives regular updates on Occidental’s cybersecurity program and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents through reports from the Company’s cybersecurity leaders, each of whom is supported by a team of trained cybersecurity professionals