CISO Tribune

Disclosure · Form 10-K · fiscal 2025

FORUM MARKETS Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2025

Filed April 1, 2026· period ended December 31, 2025· FRMM· CIK 1690080· Updated · filing on sec.gov ↗

FORUM MARKETS Inc's Form 10-K for fiscal 2025, filed April 1, 2026, names the Chief Financial Officer as its top security role, with oversight by the Audit Committee. It names John Saunders as of that date.

What FORUM MARKETS' Item 1C says

Forum Markets' Form 10-K for fiscal 2025 places oversight of risks from cybersecurity threats with the Chief Financial Officer and the Audit Committee of the Board of Directors.

Board and management oversight

The Board of Directors receives information and updates periodically from the CFO on the effectiveness of the cybersecurity and information security framework, data privacy, and risk management. The CFO also provides the Board of Directors with updates on any material incidents relating to information systems security and cybersecurity incidents.

Who leads security

The CFO is John Saunders, who has experience in IT and cybersecurity oversight. Before joining the company, Mr. Saunders held leadership roles at private companies, directly managing IT and cybersecurity functions, including oversight of third-party IT service providers. The CFO's technical background includes network design and implementation, security assessments, and endpoint security management.

How the company manages cyber risk

The company has integrated cybersecurity risk management into its broader enterprise risk management framework. The cybersecurity risks assessed include operational risks, fraud, disaster recovery, and violation of data privacy or security laws. The CFO is informed about cybersecurity incidents through regular reports from a managed service provider, incident response team updates and security assessments.

Third parties and incidents

The company engages external experts, including cybersecurity consultants, in evaluating and testing its cybersecurity management systems and related risks. The cybersecurity risk assessment performed included cybersecurity threats associated with the use of third-party service providers. As of and for the year ended December 31, 2025, there have been no cybersecurity incidents that have materially affected the company's business strategy, results of operations or financial condition.

What the section does not state

The section does not name a specific security framework or standard.

Read from the Form 10-K filed April 1, 2026, on . Every sentence rests on a passage of the section reproduced below.

The filing's fields, each with its sentence

Who leads security (the top role, as the filing names it)

Chief Financial Officer

Reports to

not identified

Board oversight

Audit Committee

“Our Chief Financial Officer (" CFO ") and the Audit Committee of our Board of Directors are responsible for the oversight of risks from cybersecurity threats.”

CISO or other person named

John Saunders (as of the filing date)

“Our CFO, John Saunders, brings substantial hands-on experience in IT and cybersecurity oversight.”

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

Stated

“Prior to joining the Company, Mr. Saunders held leadership roles at private companies where he directly managed IT and cybersecurity functions, including oversight of third-party IT service providers.”

Material incident

The filing states none

“As of and for the year ended December 31, 2025, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations or financial condition.”

The section

532 words, Form 10-K filed April 1, 2026 for the period ended December 31, 2025

Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns FORUM MARKETS Inc standard industrial classification 6199, Finance services (SEC SIC list). 8 other filers in our library have the same code.

FilerTop security roleReports toBoard oversight
IREN LimitedFY 2026, filed August 27, 2026Chief Information Security Officernot identifiedAudit and Risk Committee
BeneficientFY 2026, filed June 30, 2026Chief Technology Officerour Boardfull board
HIVE Digital Technologies Ltd.FY 2026, filed June 2, 2026Chief Information Officernot identifiedaudit committee of the Board
Bitfarms LtdFY 2025, filed March 31, 2026Vice President, Global Corporate ITexecutive managementaudit committee of the Board
Greenidge Generation Holdings Inc.FY 2025, filed March 31, 2026not identifiednot identifiedAudit Committee
Mawson Infrastructure Group Inc.FY 2025, filed March 31, 2026not identifiednot identifiedAudit Committee
Universal TokenFY 2025, filed March 31, 2026not identifiednot identifiednot identified
Bit Digital, IncFY 2025, filed March 27, 2026Head of ITnot identifiedfull board

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of FORUM MARKETS Inc's Form 10-K as filed with the SEC on April 1, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

ITEM 1C. CYBERSECURITY.

We understand the importance

of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. We have integrated cybersecurity

risk management into our broader enterprise risk management framework. Recognizing the complexity and evolving nature of cybersecurity

risk, we engage with external experts, including cybersecurity consultants, in evaluating and testing our cybersecurity management systems

and related risks. The cybersecurity risks assessed include operational risks, fraud, disaster recovery, and violation of data privacy

or security laws.

We recognize the risks associated

with the use of vendors, service providers, and other third parties that provide information system services, process information on our

behalf, or have access to our information systems. The cybersecurity risk assessment performed included cybersecurity threats associated

with the use of third-party service providers.

As a result of the cybersecurity

risk assessment performed, we implemented certain enhancements to cybersecurity processes and controls. This included formal monitoring

of capital equipment, verifying data encryption and security updates are in place, and enhancing the security of data sharing and transmission.

We describe whether and how

risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or

are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the

heading "Security breaches or cyberattacks could result in loss of our digital assets and disrupt our tokenization activities,"

included under "Item 1A. Risk Factors" of this Report.

Cybersecurity is an important

part of our risk management processes and an area of focus for our Board of Directors and management. Our Chief Financial Officer (" CFO ")

and the Audit Committee of our Board of Directors are responsible for the oversight of risks from cybersecurity threats. Our CFO, John

Saunders, brings substantial hands-on experience in IT and cybersecurity oversight. Prior to joining the Company, Mr. Saunders held leadership

roles at private companies where he directly managed IT and cybersecurity functions, including oversight of third-party IT service providers.

Our CFO's technical background includes network design and implementation, security assessments, and endpoint security management.

He has practical experience with security system architecture and operations, as well as threat monitoring, incident detection, and response

protocols. This combination of strategic oversight and technical depth enables Mr. Saunders to effectively evaluate cybersecurity risks,

oversee our information security program, and engage meaningfully with internal teams and external advisors on matters of cyber risk management.

The Board of Directors receives information and updates periodically from our CFO with respect to the effectiveness of our cybersecurity

and information security framework, data privacy, and risk management. The Board of Directors will also be provided updates by our CFO

on any material incidents relating to information systems security and cybersecurity incidents.

The CFO is informed about

and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through regular reports from a managed

service provider, incident response team updates and security assessments. Management and the Board of Directors will be made aware of

cybersecurity incidents that could materially impact the Company.

As of and for the year ended

December 31, 2025, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results

of operations or financial condition.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.