Gatos Silver, Inc. 10-K Cybersecurity GRC - 2024-02-20

Page last updated on April 11, 2024

Gatos Silver, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-20 21:55:16 EST.

Filings

10-K filed on 2024-02-20

Gatos Silver, Inc. filed an 10-K at 2024-02-20 21:55:16 EST
Accession Number: 0001628280-24-005761

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Cybersecurity risk management is part of the Company’s overall enterprise risk management program. Our cybersecurity risk management program is designed to provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers, and facilitate coordination across different departments of our company. This framework includes steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat including whether the cybersecurity threat is associated with a third-party service provider, implementing cybersecurity countermeasures and mitigation strategies and informing management and our board of directors of material cybersecurity threats and incidents. We engage with third party service providers to perform penetration tests and to inform us of possible vulnerabilities. In addition, cybersecurity training is provided to all employees on a regular basis but at least annually. Our board of directors has overall oversight responsibility for our risk management, including the cybersecurity risk management program. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Financial Officer (“CFO”), who receives reports from our cybersecurity consultants and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents. Our CFO was previously the chief financial officer for other mining companies where he was responsible for information technology security at such companies. Any significant Cyber incidents are reported to the audit committee and ultimately to the board of directors. Despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident. For more information about these risks, please see Risk Factors Our information technology systems may be vulnerable to disruption and cyberattacks, which could place our systems at risk from data loss, operational failure or compromise of confidential information. in this annual report on Form 10-K.

Company Information