Company: FMST
Filing Date: 2025-06-20
Form Type: 20-F
Source: 0001171843-25-004004
Chunk: 193

Company: Foremost Clean Energy Ltd.
Filing Date: 2025-06-20
Form: 20-F
Item: Item 16J
Chunk 193
---
ITEM 16J. INSIDER TRADING POLICIES.

Foremost has adopted an insider trading policy (the “ Insider Trading Policy”), which governs the purchase, sale, and other disposal of the Company’s securities by directors, executive officers, and employees. Foremost believes that the Insider Trading Policy is reasonably designed to promote compliance with applicable insider trading laws, rules and regulations, and any listing standards applicable to Foremost.

137

A copy of the Insider Trading Policy is attached as an exhibit to this Annual Report on Form 20-F.

ITEM 16K.

We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and other data related to our ongoing research and development initiatives, which we refer to as Information Systems and Data. Our information technology function helps identify, assess and manage our cybersecurity threats and risks. Our information technology function identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example, automated vulnerability scanning tools of the network, third-party cybersecurity audits, and use of external intelligence feeds. Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example, vulnerability management, disaster recovery and business continuity plan, incident response policy, system monitoring, data encryption and access controls.

PART III