Disclosure · Form 10-K · fiscal 2026
Twin Disc Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed September 4, 2026· period ended June 30, 2026· TWIN· CIK 100378· Updated · filing on sec.gov ↗
Twin Disc Inc's Form 10-K for fiscal 2026, filed September 4, 2026, places oversight of cybersecurity risk with the Audit Committee of the Board of Directors; a top security role title is not identified.
What the filing says, in plain English
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Audit Committee of the Board of Directors
“The Audit Committee of the Board of Directors is responsible for oversight of risks from cybersecurity threats.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“This responsibility is carried out by members of the Company's executive leadership team and personnel responsible for information technology and cybersecurity functions who possess experience in information technology, information security, risk management, and incident response.”
Material incident
The filing states none
“The Company has not experienced any cybersecurity incidents that have materially affected the Company, including its business strategy, results of operations, or financial condition, and expenses incurred from cybersecurity incidents have been immaterial.”
The section
353 words, Form 10-K filed September 4, 2026 for the period ended June 30, 2026
Read by claude-sonnet-5-5 on November 1, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Twin Disc Inc standard industrial classification 3560, General industrial machinery & equipment (SEC SIC list). 2 other filers in our library have the same code. Also shown: filers whose codes the SEC assigns to the same review office (Office of Technology).
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Ingersoll Rand Inc.FY 2025, filed February 17, 2026 | Chief Information Security Officer | CIO | Audit Committee of the Board of Directors |
| Gates Industrial Corp plcFY 2025, filed February 12, 2026 | Chief Information Security Officer | not identified | audit committee |
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| ReposiTrak, Inc.FY 2026, filed September 28, 2026 | not identified | not identified | Audit Committee |
| DONALDSON Co IncFY 2026, filed September 25, 2026 | Chief Information Officer | not identified | audit committee |
| EGAIN CorpFY 2026, filed September 10, 2026 | Chief Information Security Officer | Chief Financial Officer | Audit Committee |
| Palo Alto NetworksFY 2026, filed September 10, 2026 | chief information security officer | not identified | Security Committee |
| ZscalerFY 2026, filed September 3, 2026 | chief security officer | not identified | audit committee of the board of directors |
| CiscoFY 2026, filed September 2, 2026 | Chief Security and Trust Officer | Executive Vice President, Operations | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Twin Disc Inc's Form 10-K as filed with the SEC on September 4, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity
The Audit Committee of the Board of Directors is responsible for oversight of risks from cybersecurity threats. The Audit Committee oversees management's processes for assessing, identifying, and managing material cybersecurity risks and receives periodic reports regarding the Company's cybersecurity posture, significant risks, incident response readiness, and other cybersecurity matters as appropriate.
The Company has developed, and continues to enhance, processes designed to assess, identify, and manage material risks from cybersecurity threats affecting the information technology systems and information that it owns, uses, transmits, receives, and maintains. These processes are integrated into the Company's broader enterprise risk management framework and include the identification, assessment, mitigation, monitoring, and remediation of cybersecurity risks. The Company's cybersecurity program includes employee awareness training, incident response planning, continuous monitoring of cybersecurity threats and vulnerabilities, and evaluation of cybersecurity risks associated with third-party service providers.
Management is responsible for assessing and managing the Company's material cybersecurity risks. This responsibility is carried out by members of the Company's executive leadership team and personnel responsible for information technology and cybersecurity functions who possess experience in information technology, information security, risk management, and incident response. Management oversees cybersecurity risk assessment and mitigation activities, cybersecurity controls, incident response readiness, and the escalation of significant cybersecurity matters to senior management and the Audit Committee, as appropriate.
The Company utilizes internal personnel and, when appropriate, third -party service providers, advisors, and specialists to support cybersecurity risk management activities, including security monitoring, risk assessments, and evaluation of cybersecurity controls.
The Company has not experienced any cybersecurity incidents that have materially affected the Company, including its business strategy, results of operations, or financial condition, and expenses incurred from cybersecurity incidents have been immaterial. However, as discussed under "Risk Factors" in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple and potentially material risks to the Company, including risks that could materially affect its business strategy, results of operations, or financial condition. As cybersecurity threats become more frequent, sophisticated, and coordinated, it is reasonably likely that the Company will continue to invest resources to enhance its cybersecurity risk management processes and protective measures.
Earlier filings on record
Fiscal 2025 Form 10-K, filed September 5, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Company's Audit Committee is responsible for exercising oversight of management's identification and management, and planning for, risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“The Company has not experienced any material cybersecurity incidents, and the expenses incurred from any security incidents have been immaterial.”
Read by claude-sonnet-5-5 on November 1, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
The Company's Audit Committee is responsible for exercising oversight of management's identification and management, and planning for, risks from cybersecurity threats.
The Company has developed and implemented processes to assess, identify, and manage material risks from cybersecurity threats as part of its overall enterprise risk management system. Its cybersecurity processes include security monitoring and threat hunting through a third-party managed vendor and mandatory, company-wide employee training. The processes also extend to oversight and identification of risks associated with vendors and customers if their computer systems interface with the Company's information systems. Upon detection of a potentially material cybersecurity incident, the Company initiates its cyber incident procedure to investigate, contain, and remediate the incident.
The Company has not experienced any material cybersecurity incidents, and the expenses incurred from any security incidents have been immaterial. However, as discussed under "Risk Factors" in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple and potentially material risks to the Company, including potentially to the Company's results of operations and financial condition. The Company relies extensively on information technology systems and could face cybersecurity risk. As cybersecurity threats become more frequent, sophisticated, and coordinated, it is reasonably likely that the Company may expend greater resources to continue to modify and enhance protective measures against such security risks.
Fiscal 2024 Form 10-K, filed September 6, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“The Company's Board of Directors is responsible for exercising oversight of management's identification and management, and planning for, risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“The Company has not experienced any material cybersecurity incidents, and the expenses incurred from any security incidents have been immaterial.”
Read by claude-sonnet-5-5 on November 1, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
The Company's Board of Directors is responsible for exercising oversight of management's identification and management, and planning for, risks from cybersecurity threats.
The Company has developed and is continuing to develop processes, that seek to assess, identify, and manage material risks from cybersecurity threats to the information technology systems and information it uses or will use, transmit, receive, and maintain. The processes for assessing, identifying, and managing material risks for cybersecurity threats include the Company's efforts to identify the relevant assets that could be affected, determine possible threat sources and threat events, assess threats based on their potential likelihood and impact, and identify controls that are in place or necessary to manage and/or mitigate such risks.
The Company has not experienced any material cybersecurity incidents, and the expenses incurred from any security incidents have been immaterial. However, as discussed under "Risk Factors" in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple and potentially material risks to the Company, including potentially to the Company's results of operations and financial condition. The Company relies extensively on information technology systems and could face cybersecurity risk. As cybersecurity threats become more frequent, sophisticated, and coordinated, it is reasonably likely that the Company may expend greater resources to continue to modify and enhance protective measures against such security risks.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.