Disclosure · Form 10-K · fiscal 2025
Us Energy Corp 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 13, 2026· period ended December 31, 2025· USEG· CIK 101594· Updated · filing on sec.gov ↗
Us Energy Corp's Form 10-K for fiscal 2025, filed March 13, 2026, names the Director of IT as its top security role, with oversight by the Audit Committee.
What Us Energy's Item 1C says
Us Energy's Form 10-K for fiscal 2025 places oversight of cybersecurity risk with the Audit Committee. The Company's Director of IT is primarily responsible for the day-to-day operation of the cybersecurity program.
Board and management oversight
The Audit Committee also reports material cybersecurity risks to the Board.
Who leads security
The Company's cybersecurity environment is led by the information technology (IT) group, which also oversees the Company's IT infrastructure.
How the company manages cyber risk
The program includes general controls for managing changes in and access to the Company's IT environment, along with cybersecurity awareness and training for employees.
Third parties and incidents
The Company's Director of IT engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications. For the years ended December 31, 2025 and 2024, no cybersecurity incidents have materially affected the Company's business strategy, results of operations, or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard. The section does not say how often the board or its committee is briefed on cybersecurity.
Read from the Form 10-K filed March 13, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Director of IT
Reports to
not identified
Board oversight
Audit Committee
“The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of and for the years ended December 31, 2025 and 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.”
The section
348 words, Form 10-K filed March 13, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Us Energy Corp standard industrial classification 1311, Crude petroleum & natural gas (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| EON Resources Inc.FY 2025, filed October 13, 2026 | not identified | not identified | full board |
| Royale Energy, Inc.FY 2025, filed July 13, 2026 | not identified | not identified | audit committee |
| Norris Industries, Inc.FY 2026, filed May 29, 2026 | Chief Executive Officer | not identified | not identified |
| Blue Dolphin Energy CoFY 2025, filed March 31, 2026 | chief executive officer | not identified | full board |
| W&T Offshore IncFY 2025, filed March 16, 2026 | CIO & CISO | not identified | Audit Committee of the board of directors |
| Empire Petroleum CorpFY 2025, filed March 13, 2026 | Vice President of IT | Chief Executive Officer | Audit Committee |
| APA CorpFY 2025, filed February 26, 2026 | Executive Vice President, Administration | Chief Executive Officer | Cybersecurity Committee |
| Chord Energy CorpFY 2025, filed February 26, 2026 | Vice President, Information Technology | not identified | Audit and Reserves Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Us Energy Corp's Form 10-K as filed with the SEC on March 13, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity.
Risk Management and Strategy
The Company's cybersecurity environment is led by our information technology (IT) group, which, in addition to cybersecurity matters, oversees the Company's IT infrastructure. The IT group is responsible for monitoring and managing the security of the Company's corporate network and enterprise systems, including technical controls, and safety protocols and responding to security threats.
The Company maintains a cybersecurity risk management program that establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems. The program includes general controls for managing changes in and access to the Company's IT environment, cybersecurity awareness and training to help employees identify and mitigate against cybersecurity threats, cybersecurity incident response plans and third-party incident response retainers to help expedite the Company's response in the event of a cybersecurity incident.
The Company's Director of IT is primarily responsible for the day-to-day operation of the Company's cybersecurity program and for identifying cybersecurity threats and incidents and managing the material risks associated with the cybersecurity threats. The Company's Director of IT engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications. In the event of a cybersecurity incident, the Company's process calls for the Director of IT and Chief Financial Officer, to work to assess and respond to the incident and provide briefings to the Chief Executive Officer and the Audit Committee of the Board of Directors.
The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents. The Audit Committee also reports material cybersecurity risks to the Board. We believe this risk management process provides visibility and oversight to allow the Board and executive leadership team to make timely, data-driven decisions ensuring that the Company, its employees, investors, and partners are adequately protected.
As of and for the years ended December 31, 2025 and 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 13, 2025 sec.gov ↗
Top security role, as the filing names it
Director of IT
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity.
Risk Management and Strategy
The Company's cybersecurity environment is led by our information technology (IT) group, which, in addition to cybersecurity matters, oversees the Company's IT infrastructure. The IT group is responsible for monitoring and managing the security of the Company's corporate network and enterprise systems, including technical controls, and safety protocols and responding to security threats.
The Company maintains a cybersecurity risk management program that establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems. The program includes general controls for managing changes in and access to the Company's IT environment, cybersecurity awareness and training to help employees identify and mitigate against cybersecurity threats, cybersecurity incident response plans and third-party incident response retainers to help expedite the Company's response in the event of a cybersecurity incident.
The Company's Director of IT is primarily responsible for the day-to-day operation of the Company's cybersecurity program and for identifying cybersecurity threats and incidents and managing the material risks associated with the cybersecurity threats. The Company's Director of IT engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications. In the event of a cybersecurity incident, the Company's process calls for the Director of IT and Chief Financial Officer, to work to assess and respond to the incident and provide briefings to the Chief Executive Officer and the Audit Committee of the Board of Directors.
The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents. The Audit Committee also reports material cybersecurity risks to the Board. We believe this risk management process provides visibility and oversight to allow the Board and executive leadership team to make timely, data-driven decisions ensuring that the Company, its employees, investors, and partners are adequately protected.
As of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.
Fiscal 2023 Form 10-K, filed March 26, 2024 sec.gov ↗
Top security role, as the filing names it
Director of IT
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of and for the year ended December 31, 2023, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 7, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity.
Risk Management and Strategy
The Company's cybersecurity environment is led by our information technology (IT) group, which, in addition to cybersecurity matters, oversees the Company's IT infrastructure. The IT group is responsible for monitoring and managing the security of the Company's corporate network and enterprise systems, including technical controls, and safety protocols and responding to security threats.
The Company maintains a cybersecurity risk management program that establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems. The program includes general controls for managing changes in and access to the Company's IT environment, cybersecurity awareness and training to help employees identify and mitigate against cybersecurity threats, cybersecurity incident response plans and third-party incident response retainers to help expedite the Company's response in the event of a cybersecurity incident.
The Company's Director of IT is primarily responsible for the day-to-day operation of the Company's cybersecurity program and for identifying cybersecurity threats and incidents and managing the material risks associated with the cybersecurity threats. The Company's Director of IT engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications. In the event of a cybersecurity incident, the Company's process calls for the Director of IT, Chief Financial Officer, and Corporate Controller work to assess and respond to the incident and provide briefings to the Chief Executive Officer and the Audit Committee of the Board of Directors.
The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents. The Audit Committee also reports material cybersecurity risks to the Board. We believe this risk management process provides visibility and oversight to allow the Board and executive leadership team to make timely, data-driven decisions ensuring that the Company, its employees, investors, and partners are adequately protected.
As of and for the year ended December 31, 2023, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.