CISO Tribune

Disclosure · Form 10-K · fiscal 2025

Lithium Corp 10-K cybersecurity disclosure (Item 1C), fiscal 2025

Filed March 31, 2026· period ended December 31, 2025· LTUM· CIK 1415332· Updated · filing on sec.gov ↗

Lithium Corp's Form 10-K for fiscal 2025, filed March 31, 2026, names the Chief Executive Officer as its top security role, reporting to the audit committee.

What Lithium's Item 1C says

Lithium's Form 10-K for fiscal 2025 places oversight of cybersecurity risk with the audit committee of the board of directors. The company's Chief Executive Officer is primarily responsible for assessing and managing material cybersecurity risks.

Board and management oversight

The audit committee is informed of material risks from cybersecurity threats, when applicable, by the Chief Executive Officer. The audit committee provides updates to the board of directors at regular board meetings.

How the company manages cyber risk

The company has processes for assessing, identifying, and managing material risks from cybersecurity threats.

What the section does not state

The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.

Read from the Form 10-K filed March 31, 2026, on . Every sentence rests on a passage of the section reproduced below.

The filing's fields, each with its sentence

Who leads security (the top role, as the filing names it)

Chief Executive Officer

Reports to

audit committee

“Under the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.”

Board oversight

audit committee

“The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats.”

CISO or other person named

not identified

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

not identified

Material incident

The filing states none

“As of the date of this report, other than the foregoing, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report.”

The section

297 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025

Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns Lithium Corp standard industrial classification 1000, Metal mining (SEC SIC list). 5 other filers in our library have the same code.

FilerTop security roleReports toBoard oversight
Star Gold Corp.FY 2026, filed July 22, 2026CFOnot identifiedAudit Committee
Liberty Star Uranium & Metals Corp.FY 2026, filed April 27, 2026Chief Executive Officernot identifiedfull board
MAGELLAN COPPER & GOLD CorpFY 2025, filed March 31, 2026not identifiednot identifiedfull board
Thunder Mountain Gold IncFY 2025, filed March 31, 2026CFOnot identifiedAudit Committee
Dakota Gold Corp.FY 2025, filed March 25, 2026not identifiednot identifiedfull board

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of Lithium Corp's Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

Item 1C. Cybersecurity

Risk Management and Strategy

The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. These processes are integrated into the Company's overall risk management systems, as overseen by the Company's board of directors , primarily through its audit committee.

Governance

Board of Directors

The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The audit committee is informed of material risks, when applicable, from cybersecurity threats by the Company's Chief Executive Officer. Updates on cybersecurity matters, including material risks and threats, are provided to the Company's audit committee, and the audit committee provides updates to the Company's board of directors at regular board meetings.

Management

Under the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.

The audit committee of the Company's board of directors, with the assistance of the Company's Chief Executive Officer, is responsible for overseeing the establishment and effectiveness of controls and other procedures, including controls and procedures related to the public disclosure of material cybersecurity matters.

As of the date of this report, other than the foregoing, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factors in Item 1A. Risk Factors in this report.

Earlier filings on record

Fiscal 2024 Form 10-K, filed April 2, 2025 sec.gov ↗

Top security role, as the filing names it

Chief Executive Officer

Reports to, as the filing names it

audit committee

“Under the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.”

Board oversight

audit committee

“The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“As of the date of this report, other than the foregoing, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report.”

Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.

Item 1C. Cybersecurity

Risk Management and Strategy

The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. These processes are integrated into the Company's overall risk management systems, as overseen by the Company's board of directors, primarily through its audit committee.

Governance

Board of Directors

The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The audit committee is informed of material risks, when applicable, from cybersecurity threats by the Company's Chief Executive Officer. Updates on cybersecurity matters, including material risks and threats, are provided to the Company's audit committee, and the audit committee provides updates to the Company's board of directors at regular board meetings.

Management

Under the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.

The audit committee of the Company's board of directors, with the assistance of the Company's Chief Executive Officer, is responsible for overseeing the establishment and effectiveness of controls and other procedures, including controls and procedures related to the public disclosure of material cybersecurity matters.

As of the date of this report, other than the foregoing, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factors in Item 1A. Risk Factors in this report.

Fiscal 2023 Form 10-K/A, filed January 21, 2025 sec.gov ↗

Top security role, as the filing names it

Chief Executive Officer

Reports to, as the filing names it

audit committee

“Under the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.”

Board oversight

audit committee

“The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“As of the date of this report, other than the foregoing, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report.”

Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.

Item 1C. Cybersecurity

Risk Management and Strategy

The Company has processes for assessing, identifying, and managing material risks from cybersecurity threats. These processes are integrated into the Company's overall risk management systems, as overseen by the Company's board of directors, primarily through its audit committee.

Governance

Board of Directors

The audit committee of the Company's board of directors, with the input of management, oversees the Company's internal controls, including internal controls designed to assess, identify, and manage material risks from cybersecurity threats. The audit committee is informed of material risks, when applicable, from cybersecurity threats by the Company's Chief Executive Officer. Updates on cybersecurity matters, including material risks and threats, are provided to the Company's audit committee, and the audit committee provides updates to the Company's board of directors at regular board meetings.

Management

Under the oversight of the audit committee of the Company's board of directors, the Company's Chief Executive Officer is primarily responsible for the assessment and management of material cybersecurity risks and establishing and maintaining adequate and effective internal controls covering cybersecurity matters.

The audit committee of the Company's board of directors, with the assistance of the Company's Chief Executive Officer, is responsible for overseeing the establishment and effectiveness of controls and other procedures, including controls and procedures related to the public disclosure of material cybersecurity matters.

As of the date of this report, other than the foregoing, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition and that are required to be reported in this report. For further discussion of the risks associated with cybersecurity incidents, see the cybersecurity risk factors in Item 1A. Risk Factors in this report.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.