Idaho Strategic Resources, Inc.

Cybersecurity risk management is part of the Company’s overall risk management program. Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes to the best of their ability to ensure that such potential cybersecurity risk exposures are monitored, putting in place reasonably appropriate mitigation measures and maintaining cybersecurity programs. The Company’s cybersecurity programs are under the direction of its Treasurer with assistance from the management team. Any significant Cyber incidents that they become aware of are reported to the board of directors.

There were no material cyber security incidents discovered in 2024.While cybersecurity risks havenot materially affected the Company’s business, operations, or financial condition to date, the Company recognized that an increase in cyber threats, data breaches, or system vulnerabilities could have a material impact on future operations.