Disclosure · Form 10-K · fiscal 2025
FORUM MARKETS Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed April 1, 2026· period ended December 31, 2025· FRMM· CIK 1690080· Updated · filing on sec.gov ↗
FORUM MARKETS Inc's Form 10-K for fiscal 2025, filed April 1, 2026, names the Chief Financial Officer as its top security role, with oversight by the Audit Committee. It names John Saunders as of that date.
What FORUM MARKETS' Item 1C says
Forum Markets' Form 10-K for fiscal 2025 places oversight of risks from cybersecurity threats with the Chief Financial Officer and the Audit Committee of the Board of Directors.
Board and management oversight
The Board of Directors receives information and updates periodically from the CFO on the effectiveness of the cybersecurity and information security framework, data privacy, and risk management. The CFO also provides the Board of Directors with updates on any material incidents relating to information systems security and cybersecurity incidents.
Who leads security
The CFO is John Saunders, who has experience in IT and cybersecurity oversight. Before joining the company, Mr. Saunders held leadership roles at private companies, directly managing IT and cybersecurity functions, including oversight of third-party IT service providers. The CFO's technical background includes network design and implementation, security assessments, and endpoint security management.
How the company manages cyber risk
The company has integrated cybersecurity risk management into its broader enterprise risk management framework. The cybersecurity risks assessed include operational risks, fraud, disaster recovery, and violation of data privacy or security laws. The CFO is informed about cybersecurity incidents through regular reports from a managed service provider, incident response team updates and security assessments.
Third parties and incidents
The company engages external experts, including cybersecurity consultants, in evaluating and testing its cybersecurity management systems and related risks. The cybersecurity risk assessment performed included cybersecurity threats associated with the use of third-party service providers. As of and for the year ended December 31, 2025, there have been no cybersecurity incidents that have materially affected the company's business strategy, results of operations or financial condition.
What the section does not state
The section does not name a specific security framework or standard.
Read from the Form 10-K filed April 1, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Chief Financial Officer
Reports to
not identified
Board oversight
Audit Committee
“Our Chief Financial Officer (" CFO ") and the Audit Committee of our Board of Directors are responsible for the oversight of risks from cybersecurity threats.”
CISO or other person named
John Saunders (as of the filing date)
“Our CFO, John Saunders, brings substantial hands-on experience in IT and cybersecurity oversight.”
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“Prior to joining the Company, Mr. Saunders held leadership roles at private companies where he directly managed IT and cybersecurity functions, including oversight of third-party IT service providers.”
Material incident
The filing states none
“As of and for the year ended December 31, 2025, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations or financial condition.”
The section
532 words, Form 10-K filed April 1, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns FORUM MARKETS Inc standard industrial classification 6199, Finance services (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| IREN LimitedFY 2026, filed August 27, 2026 | Chief Information Security Officer | not identified | Audit and Risk Committee |
| BeneficientFY 2026, filed June 30, 2026 | Chief Technology Officer | our Board | full board |
| HIVE Digital Technologies Ltd.FY 2026, filed June 2, 2026 | Chief Information Officer | not identified | audit committee of the Board |
| Bitfarms LtdFY 2025, filed March 31, 2026 | Vice President, Global Corporate IT | executive management | audit committee of the Board |
| Greenidge Generation Holdings Inc.FY 2025, filed March 31, 2026 | not identified | not identified | Audit Committee |
| Mawson Infrastructure Group Inc.FY 2025, filed March 31, 2026 | not identified | not identified | Audit Committee |
| Universal TokenFY 2025, filed March 31, 2026 | not identified | not identified | not identified |
| Bit Digital, IncFY 2025, filed March 27, 2026 | Head of IT | not identified | full board |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of FORUM MARKETS Inc's Form 10-K as filed with the SEC on April 1, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C. CYBERSECURITY.
We understand the importance
of preventing, assessing, identifying, and managing material risks associated with cybersecurity threats. We have integrated cybersecurity
risk management into our broader enterprise risk management framework. Recognizing the complexity and evolving nature of cybersecurity
risk, we engage with external experts, including cybersecurity consultants, in evaluating and testing our cybersecurity management systems
and related risks. The cybersecurity risks assessed include operational risks, fraud, disaster recovery, and violation of data privacy
or security laws.
We recognize the risks associated
with the use of vendors, service providers, and other third parties that provide information system services, process information on our
behalf, or have access to our information systems. The cybersecurity risk assessment performed included cybersecurity threats associated
with the use of third-party service providers.
As a result of the cybersecurity
risk assessment performed, we implemented certain enhancements to cybersecurity processes and controls. This included formal monitoring
of capital equipment, verifying data encryption and security updates are in place, and enhancing the security of data sharing and transmission.
We describe whether and how
risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or
are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the
heading "Security breaches or cyberattacks could result in loss of our digital assets and disrupt our tokenization activities,"
included under "Item 1A. Risk Factors" of this Report.
Cybersecurity is an important
part of our risk management processes and an area of focus for our Board of Directors and management. Our Chief Financial Officer (" CFO ")
and the Audit Committee of our Board of Directors are responsible for the oversight of risks from cybersecurity threats. Our CFO, John
Saunders, brings substantial hands-on experience in IT and cybersecurity oversight. Prior to joining the Company, Mr. Saunders held leadership
roles at private companies where he directly managed IT and cybersecurity functions, including oversight of third-party IT service providers.
Our CFO's technical background includes network design and implementation, security assessments, and endpoint security management.
He has practical experience with security system architecture and operations, as well as threat monitoring, incident detection, and response
protocols. This combination of strategic oversight and technical depth enables Mr. Saunders to effectively evaluate cybersecurity risks,
oversee our information security program, and engage meaningfully with internal teams and external advisors on matters of cyber risk management.
The Board of Directors receives information and updates periodically from our CFO with respect to the effectiveness of our cybersecurity
and information security framework, data privacy, and risk management. The Board of Directors will also be provided updates by our CFO
on any material incidents relating to information systems security and cybersecurity incidents.
The CFO is informed about
and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through regular reports from a managed
service provider, incident response team updates and security assessments. Management and the Board of Directors will be made aware of
cybersecurity incidents that could materially impact the Company.
As of and for the year ended
December 31, 2025, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results
of operations or financial condition.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.