Kosmos Energy Ltd

At Kosmos Energy, cybersecurity risk management is an integral part of our overall Information Technology Disaster Recovery and Security Incident Response Plan. Our cybersecurity risk management program is designed to align with our business strategy based on the size of our company and the level of complexity of our information technology systems and industry best practices. The framework for handling cybersecurity threats and incidents including threats and incidents associated with the use of applications developed and services provided by third-party service providers and coordination across different departments of our company includes assessing the severity of a cybersecurity threat associated with a third-party service provider, various cybersecurity countermeasures and mitigation strategies and informing management and the Audit Committee to our board of directors of material cybersecurity threats and incidents. Our information technology team is responsible for assessing our cybersecurity risk management program and we currently do not engage third parties for such design of our cybersecurity risk management program. In addition, our information technology team provides cybersecurity training to all employees and contractors annually.

The Audit Committee to our board of directors has overall oversight responsibility for our risk management, and is charged with oversight of our cybersecurity risk management program. The Audit Committee is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the company is exposed and implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. The Audit Committee also reports material cybersecurity risks to our full board of directors. Management is responsible for identifying and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Information Officer (CIO) who receives reports from our information technology team and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents. Our CIO and dedicated personnel are certified and experienced information systems security professionals and information security managers with many years of experience. Management, including the CIO, and our information technology team, regularly update the Audit Committee on the Company’s cybersecurity programs, material cybersecurity risks and mitigation strategies and provide cybersecurity reports quarterly that cover, among other topics, results of third-party testing and assessments of the Company’s cybersecurity programs, developments in cybersecurity and updates to the Company’s cybersecurity programs and mitigation strategies.

In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. For more information about these risks, please see “Risk Factors” in this annual report on Form 10-K.

Human Capital Resources

Health and Safety

The health and safety of our employees and those that work with us is a priority for Kosmos. Employees and contractors are expected to take all necessary and reasonable actions to ensure safe operations by following safe work practices, complying with relevant policies and regulations, and completing all applicable training. To support our dedication to health, safety and the environment, we have a comprehensive Health, Safety, Environment and Security (“HSES”) management system that applies to all Kosmos employees and contractors known as “The Standard.” In addition to adoption of The Standard, Kosmos fosters a strong safety culture through online and in person training, regular emergency response drills, and impactful safety discussions.

Culture, Engagement and Development

Kosmos aims to be a world-class company known for delivering results and being a workplace of choice. We pride ourselves on our ability to provide employees with careers that are professionally challenging, personally rewarding, and focused on delivering value. We aim to provide a stimulating and rewarding work environment through an inclusive culture that promotes entrepreneurial thinking, facilitates teamwork, and embraces ethical behavior.

Kosmos is committed to investing in the development of our employees. We support development through a blend of learning approaches including in-person and virtual training opportunities, on-the-job training, conferences, cross team projects and experiences and our leadership development program. Each year, all employees also have an opportunity to provide feedback on the employee experience and Kosmos culture through our annual employee opinion survey. Based on employee scores and feedback, Kosmos was named in the 2023 Top 100 Places to Work by the Dallas Morning News, as well as the Houston Chronicle. The feedback received through this annual survey is used to support continuous improvement and enhance the overall employee experience. In 2023, Kosmos had a retention rate of 95%.

Diversity and Inclusion

Kosmos focuses on recruiting, retaining, and developing a diverse and inclusive workforce that embraces our values and culture. We seek to promote diversity in our workforce both because it is the right thing to do and because it gives us access to the widest range of talents. Through social and educational events that address the different backgrounds and identities of employees, Kosmos helps foster a spirit of inclusion across the company. We promote and celebrate the array of diverse perspectives and experiences of Kosmos employees and applicants, whether in terms of race, ethnicity, sex, gender, sexual orientation, gender expression, religion, national origin, disability, or experiences.

We seek to employ qualified individuals from the countries in which we operate and are proud of our record of recruitment and retention of local staff. This year we maintained 100% local employees across all our host country offices.

As of December 31, 2023, we had 243 employees with 200 being based in the United States and 43 residing in our foreign offices. Our workforce was approximately 37% gender diverse and approximately 21% minority.

Employee Well-being

Kosmos offers employees a robust range of benefits, including health plans, equity opportunities, savings plans, short- and long-term incentives. All domestic employees are awarded equity in the company as part of the total reward package, aligning employee reward with shareholder interest. We also offer a strong Employee Assistance Program (EAP), which offers free and confidential assessments, counseling, and follow-up services to employees with personal and/or work-related mental health problems.

These benefits are intended to both promote the long-term emotional, physical, and financial health and well-being of our employees and increase employee engagement and retention. Additionally, we believe that these benefits help facilitate a strong work-life balance and a culture that prioritizes overall employee wellness.

Corporate Information

In December 2018, Kosmos Energy Ltd. changed our jurisdiction of incorporation from Bermuda to the State of Delaware, USA. We maintain a registered office in Delaware at Corporation Trust Center, 1209 Orange Street, Wilmington, Delaware 19801. Our executive offices are maintained at 8176 Park Lane, Suite 500, Dallas, Texas 75231, and its telephone number is +1 (214) 445 9600.

Available Information

Kosmos is listed on the NYSE and LSE and our common stock is traded under the symbol KOS. We file or furnish annual, quarterly and current reports, proxy statements and other information with the SEC as well as the London Stock Exchange's Regulatory News Service (“LSE RNS”). The SEC maintains a website at http://www.sec.gov that contains documents we file electronically with the SEC. The LSE RNS maintains a website at http://www.londonstockexchange.com that contains documents we file electronically with the LSE RNS.

The Company also maintains an internet website under the namewww.kosmosenergy.com. The information on our website is not incorporated by reference into this annual report on Form 10‑K and should not be considered a part of this annual report on Form 10‑K. Our website is included as an inactive technical reference only. We make available, free of charge, on our website, our annual report on Form 10‑K, quarterly reports on Form 10‑Q, current reports on Form 8‑K and, if applicable, amendments to those reports filed or furnished pursuant to Section 13(a) of the Exchange Act as soon as reasonably practicable after such reports are electronically filed with, or furnished to, the SEC.