Fortitude Gold Corp 10-K Cybersecurity GRC - 2024-11-12

Page last updated on November 12, 2024

Fortitude Gold Corp reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-11-12 17:15:22 EST.

Filings

10-K filed on 2024-11-12

Fortitude Gold Corp filed a 10-K at 2024-11-12 17:15:22 EST
Accession Number: 0001558370-24-015351

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity We recognize the importance of assessing, identifying, and managing material risks from cybersecurity threats. Our policies, standards and procedures for assessing, identifying, and managing material risks from cybersecurity threats are integrated into our overall risk management system. In this regard, we use various tools and processes to help prevent, identify, and resolve any identified vulnerabilities and security incidents in a timely manner. These include, but are not limited to, internal reporting, annual employee awareness updates, engaging experts and third-party monitoring and detection tools. We employ third-party information technology (“IT’) consultants to manage our information technology environment and help manage and assess cybersecurity risks. The third-party IT consultants have relevant industry experience, including security solutions and data protection and recovery. Using various monitoring and detection tools implemented into our internal technology systems, they can identify cybersecurity threats and report such risks to our management team. Our management team oversees efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which includes oversight over our third-party IT consultant, monitoring systems and employee engagement. The management team is responsible for reporting any cybersecurity risks identified by our third-party IT consultant to our board of directors. Our board of directors is responsible for oversight over our risk management system, including review and approval of the risk management system and processes implemented by management to identify, assess, manage and mitigate cybersecurity risks. The Board is responsible for monitoring and assessing material risk exposure to cybersecurity risks, and our management is responsible for the day-to-day supervision of the material risks we may face. Our risks from cybersecurity threats have not affected or are reasonably not likely to materially affect our business strategy, results of operations, or financial condition.

Company Information