Disclosure · Form 10-K · fiscal 2025
Thunder Mountain Gold Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 31, 2026· period ended December 31, 2025· THMG· CIK 711034· Updated · filing on sec.gov ↗
Thunder Mountain Gold Inc's Form 10-K for fiscal 2025, filed March 31, 2026, names the CFO as its top security role, with oversight by the Audit Committee.
What Thunder Mountain Gold's Item 1C says
Thunder Mountain Gold's Form 10-K for fiscal 2025 says the Audit Committee receives periodic updates on cybersecurity matters.
Board and management oversight
Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis and maintaining cybersecurity programs.
Who leads security
The cybersecurity programs are under the direction of the CFO with assistance from the management team.
How the company manages cyber risk
The company manages cybersecurity risks by working with third-party IT consultants and using basic security protocols, such as network monitoring and access controls.
Third parties and incidents
The company has not experienced any material cybersecurity incidents to date.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed March 31, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
CFO
Reports to
not identified
Board oversight
Audit Committee
“The Board of Directors does not have a designated cybersecurity committee, but the Audit Committee receives periodic updates on cybersecurity matters.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“The Company has not experienced any material cybersecurity incidents to date and there were no material cybersecurity incidents discovered in 2025 .”
The section
181 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Thunder Mountain Gold Inc standard industrial classification 1000, Metal mining (SEC SIC list). 5 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Star Gold Corp.FY 2026, filed July 22, 2026 | CFO | not identified | Audit Committee |
| Liberty Star Uranium & Metals Corp.FY 2026, filed April 27, 2026 | Chief Executive Officer | not identified | full board |
| Lithium CorpFY 2025, filed March 31, 2026 | Chief Executive Officer | audit committee | audit committee |
| MAGELLAN COPPER & GOLD CorpFY 2025, filed March 31, 2026 | not identified | not identified | full board |
| Dakota Gold Corp.FY 2025, filed March 25, 2026 | not identified | not identified | full board |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Thunder Mountain Gold Inc's Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C - CYBERSECURITY
The Company recognizes the critical importance of cybersecurity in safeguarding sensitive information, maintaining operational resilience , and protecting stakeholders' interests. The Company currently manages cybersecurity risks by working with third-party IT consultants and utilizing basic security protocols, such as network monitoring and access controls. Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes to the best of their ability to ensure that such potential cybersecurity risk exposures are monitored, putting in place reasonably appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our CFO with assistance from the management team. Any significant Cyber incidents that they become aware of are reported to the board of directors. The Board of Directors does not have a designated cybersecurity committee, but the Audit Committee receives periodic updates on cybersecurity matters. The Company has not experienced any material cybersecurity incidents to date and there were no material cybersecurity incidents discovered in 2025 . Please refer to Item 1A: Risk Factors for further insights into cyber attack-related risks.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗
Top security role, as the filing names it
CFO
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Board of Directors does not have a designated cybersecurity committee, but the Audit Committee receives periodic updates on cybersecurity matters.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“The Company has not experienced any material cybersecurity incidents to date and there were no material cybersecurity incidents discovered in 2024.”
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
ITEM 1C - CYBERSECURITY
The Company recognizes the critical importance of cybersecurity in safeguarding sensitive information, maintaining operational resilience , and protecting stakeholders' interests. The Company currently manages cybersecurity risks by working with third-party IT consultants and utilizing basic security protocols, such as network monitoring and access controls.
Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes to the best of their ability to ensure that such potential cybersecurity risk exposures are monitored, putting in place reasonably appropriate mitigation measures and maintaining cybersecurity programs.
Our cybersecurity programs are under the direction of our CFO with assistance from the management team. Any significant Cyber incidents that they become aware of are reported to the board of directors. The Board of Directors does not have a designated cybersecurity committee, but the Audit Committee receives periodic updates on cybersecurity matters. The Company has not experienced any material cybersecurity incidents to date and there were no material cybersecurity incidents discovered in 2024. Please refer to Item 1A: Risk Factors for further insights into cyber attack-related risks.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.