WESTLAKE CORPORATION

ent_019ebc9a54920835c00ac4d4efe61afe

Compliance scorecard →🔔 Follow entity

Disclosures

SEC 10-K Item 1C · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

none in sample

Identity resolution

Canonical name: WESTLAKE CORPORATION
Normalized: westlake— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: GOXNEVUM0LL78B1OS344
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

FEDERALSEC 10-K Item 1Cas victim2026-02-26
The Company discloses its cybersecurity governance and risk management strategy in Item 1C of its 10-K filing. It describes a defense-in-depth approach using NIST frameworks, various technical controls (firewalls, EDR, patching), and third-party services (penetration testing, incident response retainer). The Company states it has not experienced material impacts from cybersecurity incidents in the past three years, though it acknowledges future risks. No specific breach event, victim entity (other than the filer itself), or materiality determination date is disclosed.

Subsidiary disclosures (1)filed by group companies

◈ These filings were made by or about subsidiaries of WESTLAKE CORPORATION — not by WESTLAKE CORPORATION itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.

Tracked subsidiaries✦ Westlake Chemical Partners LP

FEDERALSEC 10-K Item 1Cvia Westlake Chemical Partners LP2026-03-04
Westlake (OpCo) discloses its cybersecurity policies and practices in Item 1C of its 10-K filing. The company engages a third-party vendor, Westlake, to perform cybersecurity services under a Services and Secondment Agreement. Westlake maintains a risk-based, defense-in-depth strategy using NIST frameworks, employing controls such as firewalls, endpoint detection, and vulnerability management. The company states it has not experienced material impacts from cybersecurity incidents in the past three years but acknowledges ongoing threats and attempted breaches.