Disclosure · Form 10-K · fiscal 2025
INNOVATE Corp. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 26, 2026· period ended December 31, 2025· VATE· CIK 1006837· Updated · filing on sec.gov ↗
INNOVATE Corp.'s Form 10-K for fiscal 2025, filed March 26, 2026, names the Head of IT as its top security role, with oversight by the Audit Committee.
What INNOVATE's Item 1C says
INNOVATE's Form 10-K for fiscal 2025 places oversight of cybersecurity governance with the Audit Committee. The filing says the Head of IT and the Chief Financial Officer are responsible for overseeing the implementation of cybersecurity strategies.
Board and management oversight
The Audit Committee includes individuals with experience in technology and cybersecurity. The board regularly reviews and guides the company's cybersecurity policies and practices. Management implements these policies and handles the day-to-day management of cybersecurity risks. Any incident determined to be material is discussed with the Audit Committee.
Who leads security
The Head of IT and the CFO are responsible for ensuring compliance with regulatory standards, in addition to overseeing the implementation of cybersecurity strategies. Cyber incidents that occur are escalated to the CFO to facilitate resolution.
How the company manages cyber risk
The company assesses, identifies and manages cybersecurity threats through regular security audits, threat intelligence monitoring and vulnerability assessments. The company's risk management framework is designed to mitigate cybersecurity risks through technological safeguards, employee training programs and incident response protocols. The company devotes resources to maintain and regularly update systems and processes designed to protect the security of its computer systems, software, networks and other technology assets. The company's cybersecurity strategy is integral to its broader risk management policy. The company allocates resources for ongoing staff training and awareness programs to foster a culture of cybersecurity mindfulness across the organization. The company's independent external auditors and outsourced internal audit team regularly test and assess its cybersecurity controls. The company conducts regular reviews to ensure compliance with evolving cybersecurity laws and regulations.
Third parties and incidents
The company assesses risks from third-party providers by reviewing system and organization controls reports, when available, and other independent reports. The company generally requires third parties to maintain security controls and to promptly notify it of material breaches that may impact its data. The company maintains channels of communication with its third party service provider monitoring its virtual environment to facilitate timely cyber incident identification and remediation. The company's business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats or incidents. The company continually assesses the material effects of potential cybersecurity risks on its financial and operational performance and maintains insurance coverage to mitigate financial losses from potential incidents. There have been no legal or regulatory proceedings related to cybersecurity against the company in the reported period.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed March 26, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Head of IT
Reports to
not identified
Board oversight
Audit Committee
“The governance of our cybersecurity efforts is overseen by the Audit Committee , which includes individuals with experience in technology and cybersecurity.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“The governance of our cybersecurity efforts is overseen by the Audit Committee , which includes individuals with experience in technology and cybersecurity.”
Material incident
The filing states none
“Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats or incidents.”
The section
724 words, Form 10-K filed March 26, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns INNOVATE Corp. standard industrial classification 3440, Fabricated structural metal products (SEC SIC list). One other filer in our library has the same code. Also shown: filers whose codes the SEC assigns to the same review office (Office of Manufacturing).
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Techprecision CorpFY 2026, filed June 25, 2026 | not identified | not identified | audit committee |
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Insteel Industries IncFY 2026, filed October 29, 2026 | Chief Information Officer | not identified | full board |
| Penguin Solutions, Inc.FY 2026, filed October 20, 2026 | Chief Information Officer | not identified | not identified |
| Napco Security Technologies, IncFY 2026, filed August 24, 2026 | Vice President of Information Technology | not identified | not identified |
| George Risk Industries, Inc.FY 2026, filed August 7, 2026 | IT Manager | CEO | audit committee |
| News CorpFY 2026, filed August 7, 2026 | Chief Information Security Officer | Chief Technology Officer | Audit Committee |
| NikeFY 2026, filed July 15, 2026 | Vice President, Foundational Technology & Services | Chief Technology Officer | Audit & Finance Committee |
| Perfect Moment Ltd.FY 2026, filed June 29, 2026 | Chief Financial Officer and Chief Operating Officer | the President | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of INNOVATE Corp.'s Form 10-K as filed with the SEC on March 26, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C. CYBERSECURITY
Cybersecurity Risk Management, Strategy, and Governance
Cybersecurity is a critical component of our operational integrity and strategic planning. Recognizing the evolving nature of cyber threats, we are committed to implementing robust cybersecurity measures to safeguard our digital assets, protect stakeholder interests, and ensure continuity of our operations.
Cybersecurity Risk Management Processes
Our approach to managing cybersecurity risks is proactive and comprehensive. We employ a range of methods to assess, identify and manage the risk of potential cybersecurity threats, including regular security audits, utilization of a third party service provider for security measures over our virtual environment, threat intelligence monitoring, and vulnerability assessments. We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our risk management framework is designed to mitigate potential cybersecurity risks through a blend of technological safeguards, employee training programs, and incident response protocols. We devote resources to maintain and regularly update our systems and processes that are designed to protect the security of our computer systems, software, networks and other technology assets against attempts by unauthorized parties to obtain access to confidential information, destroy data, disrupt or degrade service, sabotage systems or cause other damage, and we have implemented certain review and approval procedures internally and with our banks; and have implemented system-wide changes.
Cybersecurity Strategy and Investment
Our cybersecurity strategy is integral to our broader risk management policy. We invest in state-of-the-art cybersecurity technologies and infrastructure to enhance our defensive capabilities and have a dedicated system of internal controls in place to prevent, monitor and remediate cyber risks including any risks from utilization of third party service providers. Additionally, we allocate resources for ongoing staff training and awareness programs to foster a culture of cybersecurity mindfulness across the organization and maintain dedicated channels of communication with our third party service provider monitoring our virtual environment to facilitate timely cyber incident identification and remediation. Our strategic investments in cybersecurity are tailored to address the unique challenges and risks pertinent to our industry and operational scope.
Governance and Oversight
The governance of our cybersecurity efforts is overseen by the Audit Committee , which includes individuals with experience in technology and cybersecurity. The board regularly reviews and guides our cybersecurity policies and practices. Management plays a critical role in implementing these policies and in the day-to-day management of cybersecurity risks. They are empowered with the maintenance, communication and enforcement of cybersecurity policies and employ proactive measures to improve cybersecurity through review of various third party cyber tools for potential implementation. Our Head of IT and Chief Financial Officer ("CFO") are responsible for overseeing the implementation of cybersecurity strategies and ensuring compliance with regulatory standards. In addition to our in-house expertise, our independent external auditors and our outsourced internal audit team, regularly test and asses our cybersecurity controls. Any cyber incidents that occur are escalated to the CFO to facilitate resolution. Any incident determined to be material is discussed with the Audit Committee and communicated to our internal and external auditors as well as our third party virtual environment service provider, when relevant.
Material Effects of Cybersecurity Risks
Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats or incidents. However, we cannot provide assurances that they will not be materially affected by such risks or material incidents in the future. We continually assess the material effects of potential cybersecurity risks on our financial and operational performance and maintain comprehensive insurance coverage to mitigate financial losses from potential cybersecurity incidents.
Compliance and Regulatory Considerations
Our cybersecurity practices are in alignment with industry standards and regulatory requirements. We conduct regular reviews to ensure compliance with evolving cybersecurity laws and regulations. There have been no legal or regulatory proceedings related to cybersecurity against the Company in the reported period. We intend to further enhance our cybersecurity measures in response to the dynamic cyber threat landscape. This includes continuing to invest in advanced security technologies, refining our risk assessment methodologies, and continuing our commitment to staff training and development in cybersecurity awareness and best practices.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗
Top security role, as the filing names it
Head of IT
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The governance of our cybersecurity efforts is overseen by the Audit Committee , which includes individuals with experience in technology and cybersecurity .”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats or incidents.”
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Cybersecurity Risk Management, Strategy, and Governance
Cybersecurity is a critical component of our operational integrity and strategic planning. Recognizing the evolving nature of cyber threats, we are committed to implementing robust cybersecurity measures to safeguard our digital assets, protect stakeholder interests, and ensure continuity of our operations.
Cybersecurity Risk Management Processes
Our approach to managing cybersecurity risks is proactive and comprehensive. We employ a range of methods to assess, identify and manage the risk of potential cybersecurity threats, including regular security audits, utilization of a third party service provider for security measures over our virtual environment, threat intelligence monitoring, and vulnerability assessments. We assess risks associated with third-party providers as part of our overall cybersecurity risk management framework by reviewing system and organization controls reports, when available, and other independent reports. We also generally require third parties to, among other things, maintain security controls to protect our confidential information and to promptly notify us of material breaches that may impact our data. Our risk management framework is designed to mitigate potential cybersecurity risks through a blend of technological safeguards, employee training programs, and incident response protocols. We devote resources to maintain and regularly update our systems and processes that are designed to protect the security of our computer systems, software, networks and other technology assets against attempts by unauthorized parties to obtain access to confidential information, destroy data, disrupt or degrade service, sabotage systems or cause other damage, and we have implemented certain review and approval procedures internally and with our banks; and have implemented system-wide changes.
Cybersecurity Strategy and Investment
Our cybersecurity strategy is integral to our broader risk management policy. We invest in state-of-the-art cybersecurity technologies and infrastructure to enhance our defensive capabilities and have a dedicated system of internal controls in place to prevent, monitor and remediate cyber risks including any risks from utilization of third party service providers. Additionally, we allocate resources for ongoing staff training and awareness programs to foster a culture of cybersecurity mindfulness across the organization and maintain dedicated channels of communication with our third party service provider monitoring our virtual environment to facilitate timely cyber incident identification and remediation. Our strategic investments in cybersecurity are tailored to address the unique challenges and risks pertinent to our industry and operational scope.
Governance and Oversight
The governance of our cybersecurity efforts is overseen by the Audit Committee , which includes individuals with experience in technology and cybersecurity . The board regularly reviews and guides our cybersecurity policies and practices. Management plays a critical role in implementing these policies and in the day-to-day management of cybersecurity risks. They are empowered with the maintenance, communication and enforcement of cybersecurity policies and employ proactive measures to improve cybersecurity through review of various third party cyber tools for potential implementation. Our Head of IT and Chief Financial Officer ("CFO") are responsible for overseeing the implementation of cybersecurity strategies and ensuring compliance with regulatory standards. In addition to our in-house expertise, our independent external auditors and our outsourced internal audit team, regularly test and asses our cybersecurity controls. Any cyber incidents that occur are escalated to the CFO to facilitate resolution. Any incident determined to be material is discussed with the Audit Committee and communicated to our internal and external auditors as well as our third party virtual environment service provider, when relevant.
Material Effects of Cybersecurity Risks
Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats or incidents. However, we cannot provide assurances that they will not be materially affected by such risks or material incidents in the future. We continually assess the material effects of potential cybersecurity risks on our financial and operational performance and maintain comprehensive insurance coverage to mitigate financial losses from potential cybersecurity incidents.
Compliance and Regulatory Considerations
Our cybersecurity practices are in alignment with industry standards and regulatory requirements. We conduct regular reviews to ensure compliance with evolving cybersecurity laws and regulations. There have been no legal or regulatory proceedings related to cybersecurity against the Company in the reported period. We intend to further enhance our cybersecurity measures in response to the dynamic cyber threat landscape. This includes continuing to invest in advanced security technologies, refining our risk assessment methodologies, and continuing our commitment to staff training and development in cybersecurity awareness and best practices.
Fiscal 2023 Form 10-K, filed March 6, 2024 sec.gov ↗
Top security role, as the filing names it
Head of IT
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The governance of our cybersecurity efforts is overseen by the Audit Committee, which includes individuals with experience in technology and cybersecurity.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“Our business strategy, results of operation and financial condition have been not been materially affected by risks from cybersecurity threats, nor did we experience any significant cybersecurity incidents in 2023.”
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Cybersecurity Risk Management, Strategy, and Governance
Cybersecurity is a critical component of our operational integrity and strategic planning. Recognizing the evolving nature of cyber threats, we are committed to implementing robust cybersecurity measures to safeguard our digital assets, protect stakeholder interests, and ensure continuity of our operations.
Cybersecurity Risk Management Processes
Our approach to managing cybersecurity risks is proactive and comprehensive. We employ a range of methods to assess, identify and manage the risk of potential cybersecurity threats, including regular security audits, utilization of a third party service provider for security measures over our virtual environment, threat intelligence monitoring, and vulnerability assessments. Our risk management framework is designed to mitigate potential cyber risks through a blend of technological safeguards, employee training programs, and incident response protocols.
Cybersecurity Strategy and Investment
Our cybersecurity strategy is integral to our broader risk management policy. We invest in state-of-the-art cybersecurity technologies and infrastructure to enhance our defensive capabilities and have a dedicated system of internal controls in place to prevent, monitor and remediate cyber risks including any risks from utilization of third party service providers. Additionally, we allocate resources for ongoing staff training and awareness programs to foster a culture of cybersecurity mindfulness across the organization and maintain dedicated channels of communication with our third party service provider monitoring our virtual environment to facilitate timely cyber incident identification and remediation. Our strategic investments in cybersecurity are tailored to address the unique challenges and risks pertinent to our industry and operational scope.
Governance and Oversight
The governance of our cybersecurity efforts is overseen by the Audit Committee, which includes individuals with experience in technology and cybersecurity. The board regularly reviews and guides our cybersecurity policies and practices. Management plays a critical role in implementing these policies and in the day-to-day management of cybersecurity risks. They are empowered with the maintenance, communication and enforcement of cybersecurity policies and employ proactive measures to improve cyber security through review of various third party cyber tools for potential implementation. Our Head of IT and CFO are responsible for overseeing the implementation of cybersecurity strategies and ensuring compliance with regulatory standards. In addition to our in-house expertise, the Company employs independent external auditors and an outsourced internal audit team, who regularly test and asses our cybersecurity controls. Any cyber incidents that occur are escalated to the CFO to facilitate resolution. Any incident determined to be material is discussed with the Audit Committee and communicated to the company's internal and external auditors as well as the company's third party virtual environment service provider, when relevant).
Material Effects of Cybersecurity Risks
Our business strategy, results of operation and financial condition have been not been materially affected by risks from cybersecurity threats, nor did we experience any significant cybersecurity incidents in 2023. However, we cannot provide assurances that they will not be materially affected by such risks or material incidents in the future. We continually assess the material effects of potential cybersecurity risks on our financial and operational performance and maintain comprehensive insurance coverage to mitigate financial losses from potential cybersecurity incidents.
Compliance and Regulatory Considerations
Our cybersecurity practices are in alignment with industry standards and regulatory requirements. We conduct regular reviews to ensure compliance with evolving cybersecurity laws and regulations. There have been no legal or regulatory proceedings related to cybersecurity against the company in the reported period. We intend to further enhance our cybersecurity measures in response to the dynamic cyber threat landscape. This includes investing in advanced security technologies, refining our risk assessment methodologies, and continuing our commitment to staff training and development in cybersecurity awareness and best practices.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.