CISO Tribune

Disclosure · Form 10-K · fiscal 2025

MAGELLAN COPPER & GOLD Corp 10-K cybersecurity disclosure (Item 1C), fiscal 2025

Filed March 31, 2026· period ended December 31, 2025· MAGE· CIK 1515317· Updated · filing on sec.gov ↗

MAGELLAN COPPER & GOLD Corp's Form 10-K for fiscal 2025, filed March 31, 2026, places oversight of cybersecurity risk with the full board; a top security role title is not identified.

What MAGELLAN COPPER & GOLD's Item 1C says

Magellan Copper & Gold's Form 10-K for fiscal 2025 places responsibility for oversight and risk management with the board of directors. The management team is responsible for assessing and managing the material risks from cybersecurity threats.

Board and management oversight

The board of directors receives periodic updates from the management team on the state of technology management strategy and any relevant risks from cybersecurity threats and incidents. The management team is informed of and monitors the prevention, detection, and mitigation of cybersecurity threats and incidents.

How the company manages cyber risk

The company uses a risk quantification model to identify, measure, and prioritize cybersecurity and technology risks and develop related security controls and safeguards. The company regularly assesses risks from cybersecurity and technology threats and monitors its systems for potential vulnerabilities and exploit attempts.

Third parties and incidents

In the last two fiscal years, the company has not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, its business, results of operations, or financial condition.

What the section does not state

The section does not name the person who holds the top security role. The section does not say who the top security role reports to. The section does not name a board committee as responsible for cybersecurity oversight. The section does not name a specific security framework or standard. The section does not mention outside assessors, consultants or auditors.

Read from the Form 10-K filed March 31, 2026, on . Every sentence rests on a passage of the section reproduced below.

The filing's fields, each with its sentence

Who leads security (the top role, as the filing names it)

not identified

Reports to

not identified

Board oversight

Full board

“Our board of directors receives periodic updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.”

CISO or other person named

not identified

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

Stated

“Our management team has expertise in information systems , compliance and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk.”

Material incident

The filing states none

“In the last two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business, results of operations, or financial condition.”

The section

331 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025

Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns MAGELLAN COPPER & GOLD Corp standard industrial classification 1000, Metal mining (SEC SIC list). 5 other filers in our library have the same code.

FilerTop security roleReports toBoard oversight
Star Gold Corp.FY 2026, filed July 22, 2026CFOnot identifiedAudit Committee
Liberty Star Uranium & Metals Corp.FY 2026, filed April 27, 2026Chief Executive Officernot identifiedfull board
Lithium CorpFY 2025, filed March 31, 2026Chief Executive Officeraudit committeeaudit committee
Thunder Mountain Gold IncFY 2025, filed March 31, 2026CFOnot identifiedAudit Committee
Dakota Gold Corp.FY 2025, filed March 25, 2026not identifiednot identifiedfull board

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of MAGELLAN COPPER & GOLD Corp's Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

ITEM 1C.

CYBERSECURITY.

Risk Management and Strategy

Our information security program is designed to detect,

respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our systems from cybersecurity threats, we use

various security tools that help prevent, escalate, investigate, and recover from identified vulnerabilities and security incidents in

a timely manner.

We regularly assess risks from cybersecurity and technology

threats and monitor our systems for potential vulnerabilities and exploit attempts. We use a widely adopted risk quantification model

to identify, measure, and prioritize cybersecurity and technology risks and develop related security controls and safeguards. We take

a risk-based approach to regular reviews and tests of our information security program and also leverage tabletop and other exercises

to evaluate the effectiveness of our information security program and improve our security measures and planning.

In the last

two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect,

our business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to

eliminate all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident.

For more information about these risks, please see Item 1A. Risk Factors " We rely on information technology systems which

are subject to disruption, damage, failure and other risks ."

Our board of directors is responsible for oversight

and risk management in genera. Our board of directors receives periodic updates from our management team regarding the overall state of

our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.

Our management team is responsible for assessing and

managing the material risks from cybersecurity threats. Our management team has expertise in information systems , compliance

and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk.

Our management team is informed of and monitors the prevention, detection, and mitigation of cybersecurity threats and incidents.

Earlier filings on record

Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗

Top security role, as the filing names it

not identified

Reports to, as the filing names it

not identified

Board oversight

Full board

“Our board of directors receives periodic updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.”

Person named in the filing

not identified

Experience, as stated

Stated

“Our management team members have expertise in information systems, compliance and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk.”

Material incident

The filing states none

“In the last two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business, results of operations, or financial condition.”

Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.

ITEM 1C.

CYBERSECURITY.

Risk Management and Strategy

Our information security program is designed to

detect, respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our systems from cybersecurity threats,

we use various security tools that help prevent, escalate, investigate, and recover from identified vulnerabilities and security incidents

in a timely manner.

We regularly assess risks from cybersecurity and

technology threats and monitor our systems for potential vulnerabilities and exploit attempts. We use a widely adopted risk quantification

model to identify, measure, and prioritize cybersecurity and technology risks and develop related security controls and safeguards. We

take a risk-based approach to regular reviews and tests of our information security program and also leverage tabletop and other exercises

to evaluate the effectiveness of our information security program and improve our security measures and planning.

In the last

two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect,

our business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to

eliminate all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident.

For more information about these risks, please see Item 1A. Risk Factors " We rely on information technology systems which

are subject to disruption, damage, failure and other risks ."

Our board of directors is responsible for oversight

and risk management in genera. Our board of directors receives periodic updates from our management team regarding the overall state of

our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.

Our management team is responsible for assessing

and managing the material risks from cybersecurity threats. Our management team members have expertise in information systems, compliance

and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk.

Our management team is informed of and monitors the prevention, detection, and mitigation of cybersecurity threats and incidents.

Fiscal 2023 Form 10-K, filed April 18, 2024 sec.gov ↗

Top security role, as the filing names it

not identified

Reports to, as the filing names it

not identified

Board oversight

Full board

“Our board of directors receives periodic updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and cybersecurity incidents.”

Person named in the filing

not identified

Experience, as stated

Stated

“Our management team members have expertise in information systems, compliance and corporate governance, which we believe are disciplines that are effective in the management of the Company's cybersecurity risk.”

Material incident

The filing states none

“In the last two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our business, results of operations, or financial condition.”

Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.

ITEM 1C.

CYBERSECURITY.

Our information security program is designed to

detect, respond to, and manage reasonably foreseeable cybersecurity risks and threats. To protect our systems from cybersecurity threats,

we use various security tools that help prevent, escalate, investigate, and recover from identified vulnerabilities and security incidents

in a timely manner.

We regularly assess risks from cybersecurity and

technology threats and monitor our systems for potential vulnerabilities and exploit attempts. We use a widely adopted risk quantification

model to identify, measure, and prioritize cybersecurity and technology risks and develop related security controls and safeguards. We

take a risk-based approach to regular reviews and tests of our information security program and also leverage tabletop and other exercises

to evaluate the effectiveness of our information security program and improve our security measures and planning.

In the last

two fiscal years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect,

our business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to

eliminate all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident.

For more information about these risks, please see Item 1A. Risk Factors " We rely on information technology systems which

are subject to disruption, damage, failure and other risks ."

Our

board of directors is responsible for oversight and risk management in genera. Our board of directors receives periodic updates from our

management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity threats and

cybersecurity incidents.

Our

management team is responsible for assessing and managing the material risks from cybersecurity threats. Our management team members have

expertise in information systems, compliance and corporate governance, which we believe are disciplines that are effective in the management

of the Company's cybersecurity risk. Our management team is informed of and monitors the prevention, detection, and mitigation of

cybersecurity threats and incidents.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.