Company: MSEX
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001174947-25-000251
Chunk: 153

Company: MIDDLESEX WATER CO
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 153
---
-in-depth strategy, utilizing multiple security
measures to protect our information technology system. Collaboration with third-party experts, industry peers and ongoing training initiatives
ensures our cybersecurity strategy remains robust and responsive to evolving threats. We understand the importance of maintaining a vigilant
and adaptive stance in the ever-evolving landscape of cybersecurity to safeguard our business operations, financial stability, and as
a direct result, our overall success.

Key elements of our cybersecurity risk mitigation
approach are comprised of:

    ●
    A dedicated cybersecurity team;

    ●
    Collaboration with a third-party managed detection and response company for 24/7 monitoring and response; 
  
    ●
    Cybersecurity insurance to cover a portion of losses and damages resulting from cyber-attacks or security breaches;
  
    ●
    An incident response team that is comprised of various departments required for an effective response;

18 

    ●
    Conducting periodic drills and exercises, including industry collaborations and participation from the executive team;
  
    ●
    Continuous information security awareness training and phishing simulation exercises;
  
    ●
    Regular security assessments to address evolving risks and threats;
  
    ●
    Deployment of automation solutions to strengthen detection and response capabilities; and
  
    ●
    Utilizing services offered by the United States Department of Homeland Security to assist with resiliency planning.

Third-Party Relationships

The Company utilizes partners and third-party
service providers to help deliver safe and reliable water and wastewater services across its regulated operations. In connection with
these relationships, we perform due diligence, cyber risk scoring, cybersecurity related contractual obligations, and periodic reviews
of third-party control environments to ensure alignment with the Company's risk exposure, business requirements, and risk tolerances.

We extend our cybersecurity focus to third-party
service providers by evaluating and monitoring their cybersecurity risks. High-risk vendors undergo continuous monitoring, and we maintain
contractual agreements that mandate our third-party providers’ commitment to managing cybersecurity risks, providing incident notifications,
and being subject to cybersecurity audits.

Cybersecurity Governance 

The Corporate Governance and Nominating Committee
of the Board is tasked with serving as the Board of Director’s primary body to oversee management’s risk identification, management
and mitigation strategies related to, among other risks, information technology, cybersecurity and data security risks. Management, including
the CTO, provides regular reports to the Board covering aspects such as risks, threats, the evolving threat landscape, enhancements to
the cybersecurity program, and the preparedness of internal responses.

ITEM 2.PROPERTIES.

Utility