Disclosure · Form 10-K · fiscal 2025
Dakota Gold Corp. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 25, 2026· period ended December 31, 2025· DC· CIK 1852353· Updated · filing on sec.gov ↗
Dakota Gold Corp.'s Form 10-K for fiscal 2025, filed March 25, 2026, places oversight of cybersecurity risk with the full board; a top security role title is not identified.
What Dakota Gold's Item 1C says
Dakota Gold's Form 10-K for fiscal 2025 places oversight of cybersecurity risk with the Board of Directors. Primary responsibility for the cybersecurity risk management program resides with a cross functional senior leadership team from Information Technology, Finance, and Operations.
Board and management oversight
The Board receives periodic updates from management on cybersecurity matters and is notified between those updates about any significant new cybersecurity threats or incidents. The Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise.
Who leads security
The team has relevant cybersecurity expertise, including past experience in information security, prior roles overseeing security operations, incident response and security engineering, and certifications, degrees or training in cybersecurity or related fields. The team is responsible for developing and executing the cybersecurity strategy, policies and controls, overseeing prevention, detection, mitigation and remediation, and managing third party security assessments.
How the company manages cyber risk
The company conducts periodic risk assessments to identify cybersecurity threats, as well as assessments when a material change in its business practices may affect vulnerable information systems. As part of its overall risk management system, the company monitors and tests its safeguards and trains its employees on these safeguards.
Third parties and incidents
Depending on the nature of the services, the sensitivity and quantity of information processed and the provider's identity, the company's vendor management process may include reviewing provider cybersecurity practices and conducting provider security assessments and periodic reassessments. During the year ended December 31, 2025, the company has not identified an indication of a cybersecurity incident that would have a material impact on its business and consolidated financial statements.
What the section does not state
The section does not name the person who holds the top security role. The section does not say who the top security role reports to. The section does not name a board committee as responsible for cybersecurity oversight. The section does not name a specific security framework or standard.
Read from the Form 10-K filed March 25, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Full board
“One of the key functions of our Board of Directors (the "Board") is informed oversight of our risk management process, including risks from cybersecurity threats.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“The team has relevant cybersecurity expertise, including past experience in information security, prior roles overseeing security operations / incident response / security engineering, and relevant certifications and/or degrees or training in cybersecurity or related fields.”
Material incident
The filing states none
“During the year ended December 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.”
The section
542 words, Form 10-K filed March 25, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on October 30, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Dakota Gold Corp. standard industrial classification 1000, Metal mining (SEC SIC list). 5 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Star Gold Corp.FY 2026, filed July 22, 2026 | CFO | not identified | Audit Committee |
| Liberty Star Uranium & Metals Corp.FY 2026, filed April 27, 2026 | Chief Executive Officer | not identified | full board |
| Lithium CorpFY 2025, filed March 31, 2026 | Chief Executive Officer | audit committee | audit committee |
| MAGELLAN COPPER & GOLD CorpFY 2025, filed March 31, 2026 | not identified | not identified | full board |
| Thunder Mountain Gold IncFY 2025, filed March 31, 2026 | CFO | not identified | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Dakota Gold Corp.'s Form 10-K as filed with the SEC on March 25, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C. CYBERSECURITY
Risk Management and Strategy
We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.
We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
We engage certain third-party service providers to perform a variety of functions within our business and seek to ensure that we work with reliable, reputable service providers that maintain cybersecurity programs. Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing provider cybersecurity practices, conducting provider security assessments, and conducting periodic provider reassessments during their engagement.
Governance
One of the key functions of our Board of Directors (the "Board") is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. The Board receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. While we do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition, such threats could occur nonetheless.
Management is responsible for the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks, with assistance from third-party service providers . Primary responsibility for our cybersecurity risk management program resides with cross functional senior leadership team from Information Technology, Finance, and Operations. As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through training.
The team has relevant cybersecurity expertise, including past experience in information security, prior roles overseeing security operations / incident response / security engineering, and relevant certifications and/or degrees or training in cybersecurity or related fields. The team is responsible for developing and executing our cybersecurity strategy, policies, and controls; overseeing prevention, detection, mitigation, and remediation activities; and managing third party security assessments as appropriate.
Cybersecurity Threats
During the year ended December 31, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.
For further discussion of cybersecurity risks, please refer to Item 1A. Risk Factors .
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 20, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“One of the key functions of our Board of Directors (the "Board") is informed oversight of our risk management process, including risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“During the year ended December 31, 2024, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.”
Read by claude-sonnet-5-5 on October 30, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Risk Management and Strategy
We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.
We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Governance
One of the key functions of our Board of Directors (the "Board") is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. The Board receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. While we do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition, such threats could occur nonetheless.
Management is responsible for the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks, with assistance from third-party service providers. As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through training.
Cybersecurity Threats
During the year ended December 31, 2024, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.
For further discussion of cybersecurity risks, please refer to Item 1A. Risk Factors .
Fiscal 2023 Form 10-K, filed March 28, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on October 30, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Risk Management and Strategy
We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein.
We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Governance
One of the key functions of our Board of Directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. The Board receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
Management is responsible for the operational oversight of company-wide cybersecurity strategy, policy, and standards across relevant departments to assess and help prepare us to address cybersecurity risks, with assistance from third-party service providers. As part of our overall risk management system, we monitor and test our safeguards and train our employees on these safeguards. Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.
Cybersecurity Threats
During the year ended December 31, 2023, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.
For further discussion of cybersecurity risks, please refer to Item 1A. Risk Factors .
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.