Company: MNTR
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001641172-25-001620
Chunk: 226

Company: Mentor Capital, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 226
---
 incident would be reported to the
Company’s Chairman of the Board and our general counsel, who would determine whether such incident or event was material. If such
an incident or event is material, it would be reported to our Board of Directors and Audit Committee and the material aspects of the
incident would be reported on Form 8-K.

The
Company maintains cybersecurity risk management, disaster readiness, and business continuity protocols to anticipate potential threats
and mitigate the probability of cybersecurity risks by establishing alerts, preemptive measures, and cybersecurity responses. We have
set up information technology risk management alert programs that are routinely received and reviewed by management and our information
technology professionals. We have implemented protocols and procedures to protect the privacy, safety, and security of our data and information
technology. We routinely assess our cybersecurity risk while working in consultation with our information technology professionals. In
addition to alerts, our information technology professionals provide risk management monitoring and support along with twenty-four-hour
dedicated support for the Company. They possess expertise across multiple industries, including support of Department of Defense contractors
in the United States. The Company does not share confidential information with outside third parties unless required by law or necessary
for compliance purposes. In such instances, the Company utilizes encryption methods to protect confidential information. The Company
ensures that such information is given to such third parties in a responsible manner that would not disclose such confidential information
to unintended recipients. Due to the nature of the Company’s operations, the instance of the Company’s receipt of confidential
information is minimal, infrequent, and immaterial.

Our
cybersecurity disaster readiness protocols are implemented and managed by our assistant corporate secretary, who reports to the Chairman
of the Board of Directors. Management
oversees our cybersecurity risk and our disaster recovery and business continuity plan in order to consider, mitigate, and plan for the
preemption of cybersecurity risks that may arise. Our assistant corporate secretary was formerly responsible for information technology,
risk management, and cybersecurity at an Am Law 100 law firm.
She authored and implemented the firm’s disaster readiness and business continuity protocols and managed the firm’s information
technology operations prior to implementation of these similar risk management protocols at the Company in consultation with information
technology cybersecurity experts for the purpose of mitigating the Company’s risk and ensuring best practices. Our assistant corporate
secretary is responsible for reporting known risks and incidents relating to cybersecurity threats, including compliance with disclosure
requirements, to the Chairman of the Board and our general counsel for consideration. 

12

The