GOLD RESOURCE CORP 10-K Cybersecurity GRC - 2025-04-08

Page last updated on April 9, 2025

GOLD RESOURCE CORP reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-04-08 16:46:13 EDT.

Filings

10-K filed on 2025-04-08

GOLD RESOURCE CORP filed a 10-K at 2025-04-08 16:46:13 EDT
Accession Number: 0001558370-25-004602

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C . CYBERSECURITY Risk Management and Strategy The Company has established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and have integrated these processes into its overall risk management systems and processes. The Company routinely assesses material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through its information systems that may result in adverse effects on the confidentiality, integrity, or availability of information systems or any information residing therein. The Company conducts periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Governance One of the key functions of the Board is informed oversight of the risk management process, including risks from cybersecurity threats. The Board is responsible for monitoring and assessing strategic risk exposure, and management is responsible for the day-to-day management of any material risks that may arise. The Board receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. The Company does not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect it or its business strategy, results of operations, or financial condition. For more information regarding the expertise of the Board as it relates to cybersecurity, see the section entitled “Governance” in the Company’s definitive proxy statement relating to the 2024 Annual Meeting of Stockholders filed with the SEC on April 29, 2024. Gold Resource Corporation Management is responsible for the operational oversight of company-wide cybersecurity strategy , policy, and standards across relevant departments to assess and help prepare the Company to address cybersecurity risks. As part of the overall risk management system, the Company monitors and tests safeguards and trains employees on these safeguards. Personnel at all levels and departments are made aware of the cybersecurity policies through trainings. Cybersecurity Threats As of December 31, 2024, the Company has not identified an indication of a cybersecurity incident that would have a material impact on the Company’s business and consolidated financial statements. For further discussion of cybersecurity risks, please refer to Item 1A. Risk Factors . Gold Resource Corporation

Company Information