{"url_path":"/sec/mxc/10-k/2026/item-1c","section_key":"item-1c","section_title":"Item 1C ****CYBERSECURITY**","topic":"sec","document":{"doc_type":"10-K","doc_date":"2026-06-29","source_url":"https://www.sec.gov/Archives/edgar/data/66418/0001493152-26-030386-index.html","accession_number":"0001493152-26-030386","cik":"0000066418","ticker":"MXC","issuer_name":"MEXCO ENERGY CORP","edgar_url":"https://www.sec.gov/Archives/edgar/data/66418/0001493152-26-030386-index.html","primary_entity_key":"0000066418","primary_entity_name":"MEXCO ENERGY CORP"},"word_count":263,"has_tables":true,"body_markdown":"**ITEM 1C.****CYBERSECURITY**\n\n \n\nMexco\nmaintains a risk-based cybersecurity program designed to protect the confidentiality, integrity, and availability of information systems\nand data used in our operations. The program includes technical, administrative, and organizational safeguards intended to identify,\nassess, and mitigate cybersecurity risks.\n\n \n\n**Risk\nManagement and Strategy.** Cybersecurity risk is integrated into our overall risk management processes. We use internal policies\nand controls, supported by third-party cybersecurity professionals, to monitor and respond to cybersecurity threats. We maintain systems\nto detect and respond to potential cybersecurity incidents.\n\n \n\nEmployees\nreceive periodic cybersecurity awareness training. We implement access controls based on the principle of least privilege. We also conduct\nperiodic testing of our incident response capabilities, including tabletop exercises, and maintain an incident response plan that outlines\nprocedures for identifying, escalating, investigating, and responding to cybersecurity incidents.\n\n \n\n**Governance.**The Board of Directors, through the Audit Committee, oversees cybersecurity risk. Management is responsible for implementing\nand maintaining cybersecurity controls and for day-to-day risk management activities. The Board and Audit Committee receive periodic\nupdates on cybersecurity risks and are notified of material cybersecurity incidents in accordance with our incident response processes.\n\n \n\n**Impact\nof Risks from Cybersecurity Threats.**As of the date of this report, we are not aware of any cybersecurity threats that have materially\naffected, or are reasonably likely to materially affect, the Company’s business, financial condition, or results of operations.\nHowever, we may not be able to prevent all cybersecurity incidents, and future incidents could have a material adverse effect on the\nCompany.\n\n \n\nFor\nmore information on our cybersecurity-related risks, see “Item 1A. Risk Factors” above for additional information.\n\n \n\n15"}