Company: SQM
Filing Date: 2025-04-24
Form Type: 20-F
Source: 0000909037-25-000020
Chunk: 218

Company: CHEMICAL & MINING CO OF CHILE INC
Filing Date: 2025-04-24
Form: 20-F
Item: Item 16K
Chunk 218
---
 to good governance, aligned with other governance arrangements established in the company. This good governance includes clear rules, borders, cybersecurity measures and controls.
Management and Director Cybersecurity Expertise
Our Business Risk Management Department consists of five people and is led by the Department Head who has access and reports to the Directors' Committee. Each member of the Department has training and/or certifications in Risk Management such as ISO 31000 or COSO ERM. All of them have more than five years of experience in Risk Management, Audit and Compliance roles.
SQM manages information security and cybersecurity through its IT Security and Governance Department for both its divisions: SQM Iodine-Plant Nutrition Division, SQM Lithium Chile Division and SQM International Lithium Division. The main responsibility of these departments is to protect the Company's IT infrastructure from cyberattacks and other threats. SQM has an Information Security Management System (ISMS) based on ISO 27001, the Control Objectives for Information and Related Technologies (COBIT), and the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF).
The SQM Iodine-Plant Nutrition Division has an IT Security and Governance Department, where the Cybersecurity Leader is responsible for managing security resources, implementing protective measures, continuously monitoring, and developing response plans for cybersecurity incidents. Additionally, the department includes a Cybersecurity Risk team, 
under the direction of the IT Risk and Compliance Leader, responsible for managing and detecting risks, establishing robust security policies, and ensuring compliance with internal regulations and regulations related to information security and cybersecurity.
The IT Security and Governance Department reports to the Deputy IT Manager and the IT Manager, who bring over 30 years of combined experience in risk management, information asset protection, and operational continuity management in the mining sector. They oversee our divisions globally, providing advice and support to business and operational managers in their activities to ensure that information security and cybersecurity are managed as critical components of our overall sustainability strategy. Through their leadership, they ensure that best practices in cybersecurity and risk management are effectively implemented, promoting a culture of security that protects our assets and strengthens our operational resilience.
The Lithium Chile Division has an IT Security and Governance Department led by the Department Head, who reports directly to the IT Manager. This department has two main missions: Information Security, which manages risks related to the use of information technologies, regulatory compliance, and data protection; and Cybersecurity, which effectively protects, defends, and contains, through advanced monitoring, potential events and incidents that could affect availability, integrity, and