CISO Tribune

Disclosure library · from SEC EDGAR filings

What companies tell the SEC about who runs cybersecurity

Since December 2023 every US filer's annual report on Form 10-K carries Item 1C, "Cybersecurity": a description of who is responsible for cybersecurity, their experience, who they report to and how the board oversees it. This library holds that section, word for word, for every filing we have read, with the few facts it states pulled out beside it. Use it to compare disclosure language, to borrow a structure, or to see what a company has committed to in its own filing.

19 filers on record · 19 read · 9 state a reporting line · 1 name the person · last checked October 14, 2026 · free to cite with attribution

How to read a row. Each field is a sentence our software found in the filing and that our code then confirmed is in the stored text word for word; "not identified" means the reader found no such sentence, not that the company has no such arrangement. A filing describes governance as of its filing date. See the reporting-lines report for the counts, or the guide for what 22 of these filings said when we first read them by hand.

Datadog, Inc. · DDOG

Chief Information Security Officer · reports to not identified · oversight: Audit Committee · names Emilio Escobar

Sector not classified

FY2025 10-K · filed Feb 18, 2026Item 1C text →filing on sec.gov ↗

SideChannel, Inc. · SDCH

Chief Information Security Officer · reports to not identified · oversight: Audit Committee

Sector not classified

FY2025 10-K · filed Dec 18, 2025Item 1C text →filing on sec.gov ↗

TEXAS INSTRUMENTS INC · TXN

chief information security officer · reports to chief information officer · oversight: not identified

Sector not classified

FY2025 10-K · filed Feb 6, 2026Item 1C text →filing on sec.gov ↗

Method. SEC EDGAR's full-text search lists each filer's Form 10-K and 10-K/A documents filed on or after December 15, 2023; the lane reads the filing document from sec.gov, locates the Item 1C heading and the Item 2 heading that follows it, and stores the text between them with page numbers removed. A model then reads that text and proposes the role, the reporting line, the oversight body, any person named, the experience sentence and the material-incident sentence, each as an exact quote; code checks every quote against the stored text and drops anything that is not in it. The fact-check gate re-runs those checks on every file before it publishes. Companies on our record come first, then the largest filers; a filer missing here has not been read yet.

Limits. We store Item 1C only, nothing else from the filing. A filing names a person as of its filing date; that is not a record of who holds the seat today, which is what the Wire tracks. No claim here goes beyond what the filing states. Read by software, verified by code: if a field looks wrong, tell us at /corrections and we check the filing by hand. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.