NIOCORP DEVELOPMENTS LTD 10-K Cybersecurity GRC - 2025-09-11

Page last updated on September 11, 2025

NIOCORP DEVELOPMENTS LTD reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-09-11 16:04:03 EDT.

Company Summary

NioCorp is a resource company that produces niobium, scandium, titanium, and magnetic rare earths to develop a Niobium deposit.

Filings

10-K filed on 2025-09-11

NIOCORP DEVELOPMENTS LTD filed a 10-K at 2025-09-11 16:04:03 EDT
Accession Number: 0001539497-25-002331

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Cybersecurity risk management is integrated into the Company’s enterprise-wide risk management. Our Board has overall oversight responsibility for our risk management and management is responsible for identifying, considering, and assessing material risks to the Company. Our Chief Financial Officer is responsible for assessing and managing cybersecurity risks ; however, as a smaller reporting company, we currently do not have a dedicated cybersecurity team. Our Chief Financial Officer reports to the Board regarding financial and operating risks, including cybersecurity risks. Our Chief Financial Officer has experience in managing public companies and assessing financial and operating risks. Our cybersecurity risk management is designed to provide a framework for assessing, identifying, and managing material risks from cybersecurity threats and to respond to cybersecurity incidents, including material risks associated with the use of services provided by third-party service providers . We rely on the cybersecurity protections of many of our third-party service providers. Our primary third-party service providers utilize two-factor authentication as well as login and password protections with email verifications. We are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. Our goal is to establish a cybersecurity framework that is commensurate with our size, complexity, and nature of our operations. For the year ended June 30, 2025, the Company had no material cybersecurity incidents or threats that have materially affected or were reasonably likely to materially affect our business strategy, results of operations or 24 financial condition. Despite our efforts, we cannot eliminate all risks from cybersecurity threats or provide assurances that we have not experienced an undetected cybersecurity incident. As previously disclosed, on February 14, 2025, we became aware of unauthorized third-party access to our information systems, including portions of its email systems, that resulted in misdirected vendor payments. To date, the Cybersecurity Incident has not had a material impact on our business operations or financial condition.

Company Information