CIVITAS RESOURCES, INC.

SEC 10-K Item 1C cybersecurity disclosure describing the registrant's cybersecurity risk-management program, governance (Audit Committee oversight, VP of IT leadership), NIST CSF-aligned controls, training, audits, incident response plan, and cyber insurance. The filer explicitly states it has not experienced any material information security breaches in the last three years and is not aware of cybersecurity risks reasonably likely to have a material adverse effect. No incident is disclosed.