Company: SCCO
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001558370-25-002017
Chunk: 50

Company: SOUTHERN COPPER CORP/
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1C
Chunk 50
---
ITEM 1C. CYBERSECURITY

​

Risk Management and Strategy

​

Our Cybersecurity Approach and Integration

​

Technology is a fundamental element in our Company’s permanent engagement with innovation and continuous improvement in the area of risk management and cybersecurity management strategy. As cybersecurity threats are becoming increasingly sophisticated and rapidly evolving, we have implemented processes for overseeing and identifying material risks from potential cybersecurity threats. Cyber risk management is a core component of our Company’s governance structure, and our cybersecurity processes are integrated into the Company’s overall risk management system and processes. Our primary focus is information security. ​Our Information Technology governance framework is composed of policies, procedures, standards, and methodologies to identify and manage risks among other aspects, which are governed by reference frameworks and best practices. ​SCC’s information security strategy is led by the Technology and Information Security Director (“TISD”), with review and support from the Chief Information Security Officer (“CISO”) of Grupo Mexico. The main purpose of SCC’s information security strategy is to identify and manage technological risks that could affect the Company's objectives and to strengthen our Company’s resilience. As part of management’s oversight of cybersecurity, the information security strategy is presented on an annual basis to SCC’s Audit Committee of the Board of Directors, which reports to