Disclosure · Form 10-K · fiscal 2026
Protagenic Therapeutics, Inc.\new 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed August 14, 2026· period ended March 31, 2026· PTIX· CIK 1022899· Updated · filing on sec.gov ↗
Protagenic Therapeutics, Inc.\new's Form 10-K for fiscal 2026, filed August 14, 2026, places oversight of cybersecurity risk with the audit committee; a top security role title is not identified.
What Protagenic Therapeutics, Inc.\new's Item 1C says
Protagenic Therapeutics' Form 10-K for fiscal 2026 places oversight of cybersecurity risk with the audit committee of the board of directors. The audit committee receives a report on cybersecurity matters and related risk exposures periodically from the Chief Executive Officer.
Board and management oversight
The audit committee is responsible for overseeing the company's policies, practices, and assessments with respect to cybersecurity, and provides periodic updates to the board of directors. The audit committee is notified between updates as soon as practicable regarding significant new cybersecurity threats or incidents.
How the company manages cyber risk
The company designs and assesses its cybersecurity program based on ISO 27002 standards. The company's cybersecurity risk management program includes a cybersecurity incident response plan. The company uses external service providers to manage, assess, test and otherwise assist with aspects of its security controls.
Third parties and incidents
The company uses established processes designed to identify, assess, and manage risks from third-party service providers that handle, possess, process, and store its material information. The audit committee receives periodic updates from management and an external third party information technology consultant on the effectiveness of the company's systems and processes.
What the section does not state
The section does not name the person who holds the top security role.
Read from the Form 10-K filed August 14, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
audit committee
“Our board of directors administers its cybersecurity risk oversight function through its audit committee.”
CISO or other person named
not identified
Frameworks and standards named
ISO/IEC 27002
Where the filing names it
- ISO/IEC 27002: “design and assess our program based on ISO 27002 standards.”
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.”
The section
441 words, Form 10-K filed August 14, 2026 for the period ended March 31, 2026
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Protagenic Therapeutics, Inc.\new standard industrial classification 2834, Pharmaceutical preparations (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Nanoviricides, Inc.FY 2026, filed September 28, 2026 | not identified | not identified | audit committee |
| Phibro Animal Health CorpFY 2026, filed August 26, 2026 | Chief Technology and Digital Innovation Officer | not identified | full board |
| Earth Science Tech, Inc.FY 2026, filed June 18, 2026 | not identified | not identified | not identified |
| GeoVax Labs, Inc.FY 2025, filed April 15, 2026 | Chief Financial Officer | not identified | Nominating and Governance Committee |
| KALA BIO, Inc.FY 2025, filed April 15, 2026 | Chief Business Officer | not identified | Audit Committee |
| Oncotelic Therapeutics, Inc.FY 2025, filed April 15, 2026 | not identified | not identified | full board |
| Sunshine Biopharma Inc.FY 2025, filed April 3, 2026 | not identified | not identified | not identified |
| LFTD Partners Inc.FY 2025, filed April 1, 2026 | not identified | not identified | not identified |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Protagenic Therapeutics, Inc.\new's Form 10-K as filed with the SEC on August 14, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item
1C. Cybersecurity.
Risk
Management and Strategy
We
have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability
of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan. We
design and assess our program based on ISO 27002 standards. This does not imply that we meet any particular technical standards, specifications,
or requirements, only that we use the ISO 27002 as a guide to help us identify, assess, and manage cybersecurity risks relevant to our
business. We engage external resources that contribute to, and provide independent evaluation of, our existing cybersecurity practices
and organizational risk assessment systems. We use established processes designed to identify, assess, and manage third-party service
provider risks when third parties handle, possess, process, and store the Company's material information. Our cybersecurity risk
management program includes (i) a policy designed to help identify material cybersecurity risks to our critical systems, information,
products, services, and our broader enterprise information technology environment; (ii) the use of external service providers to manage,
assess, test and otherwise assist with aspects of our security controls; and (iii) a cybersecurity incident response plan that includes
procedures for responding to cybersecurity incidents. We have not identified risks from known cybersecurity threats, including as a result
of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations,
business strategy, results of operations, or financial condition. However, there can be no assurance that our cybersecurity prevention
and mitigation efforts will always be successful, and it is possible that cybersecurity threats could have a material adverse effect
on our business, operations, or financial condition in the future .
Governance
Our
board of directors administers its cybersecurity risk oversight function through its audit committee. The audit committee is responsible
for overseeing our policies, practices, and assessments with respect to cybersecurity, and provides periodic updates to our board of
directors . The audit committee receives periodic updates from management and our external third party information technology consultant
regarding the effectiveness of the systems and processes we have implemented designed to safeguard our information assets and operational
integrity from cyber threats, protect employee information from unauthorized access or attack, as well as secure our networks and systems,
and regarding other cybersecurity matters, including the results from cybersecurity systems testing and any recent cybersecurity incidents
and related responses. Our audit committee is also notified between such updates as soon as practicable regarding significant new cybersecurity
threats or incidents. The audit committee also receives a report on cybersecurity matters and related risk exposures periodically from
our Chief Executive Officer .
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“Our board of directors administers its cybersecurity risk oversight function through its audit committee.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
Item
1C. Cybersecurity.
Risk
Management and Strategy
We
have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability
of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan. We
design and assess our program based on ISO 27002 standards. This does not imply that we meet any particular technical standards, specifications,
or requirements, only that we use the ISO 27002 as a guide to help us identify, assess, and manage cybersecurity risks relevant to our
business. We engage external resources that contribute to, and provide independent evaluation of, our existing cybersecurity practices
and organizational risk assessment systems. We use established processes designed to identify, assess, and manage third-party service
provider risks when third parties handle, possess, process, and store the Company's material information. Our cybersecurity risk
management program includes (i) a policy designed to help identify material cybersecurity risks to our critical systems, information,
products, services, and our broader enterprise information technology environment; (ii) the use of external service providers to manage,
assess, test and otherwise assist with aspects of our security controls; and (iii) a cybersecurity incident response plan that includes
procedures for responding to cybersecurity incidents. We have not identified risks from known cybersecurity threats, including as a result
of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations,
business strategy, results of operations, or financial condition. However, there can be no assurance that our cybersecurity prevention
and mitigation efforts will always be successful, and it is possible that cybersecurity threats could have a material adverse effect
on our business, operations, or financial condition in the future .
Governance
Our
board of directors administers its cybersecurity risk oversight function through its audit committee. The audit committee is responsible
for overseeing our policies, practices and assessments with respect to cybersecurity, and provides periodic updates to our board of directors .
The audit committee receives periodic updates from management and our external third party information technology consultant regarding
the effectiveness of the systems and processes we have implemented designed to safeguard our information assets and operational integrity
from cyber threats, protect employee information from unauthorized access or attack, as well as secure our networks and systems, and
regarding other cybersecurity matters, including the results from cybersecurity systems testing and any recent cybersecurity incidents
and related responses. Our audit committee is also notified between such updates as soon as practicable regarding significant new cybersecurity
threats or incidents. The audit committee also receives a report on cybersecurity matters and related risk exposures periodically from
our Chief Financial Officer .
Fiscal 2023 Form 10-K/A, filed May 14, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“Our board of directors administers its cybersecurity risk oversight function through its audit committee.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
Item
1C. Cybersecurity.
Risk
Management and Strategy
We
have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability
of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan. We
design and assess our program based on ISO 27002 standards. This does not imply that we meet any particular technical standards, specifications,
or requirements, only that we use the ISO 27002 as a guide to help us identify, assess, and manage cybersecurity risks relevant to our
business. We engage external resources that contribute to, and provide independent evaluation of, our existing cybersecurity practices
and organizational risk assessment systems. We use established processes designed to identify, assess, and manage third-party service
provider risks when third parties handle, possess, process, and store the Company's material information. Our cybersecurity risk
management program includes (i) a policy designed to help identify material cybersecurity risks to our critical systems, information,
products, services, and our broader enterprise information technology environment; (ii) the use of external service providers to manage,
assess, test and otherwise assist with aspects of our security controls; and (iii) a cybersecurity incident response plan that includes
procedures for responding to cybersecurity incidents. We have not identified risks from known cybersecurity threats, including as a result
of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations,
business strategy, results of operations, or financial condition. However, there can be no assurance that our cybersecurity prevention
and mitigation efforts will always be successful, and it is possible that cybersecurity threats could have a material adverse effect
on our business, operations, or financial condition in the future.
Governance
Our
board of directors administers its cybersecurity risk oversight function through its audit committee. The audit committee is responsible
for overseeing our policies, practices and assessments with respect to cybersecurity, and provides periodic updates to our board of directors.
The audit committee receives periodic updates from management and our external third party information technology consultant regarding
the effectiveness of the systems and processes we have implemented designed to safeguard our information assets and operational integrity
from cyber threats, protect employee information from unauthorized access or attack, as well as secure our networks and systems, and
regarding other cybersecurity matters, including the results from cybersecurity systems testing and any recent cybersecurity incidents
and related responses. Our audit committee is also notified between such updates as soon as practicable regarding significant new cybersecurity
threats or incidents. The audit committee also receives a report on cybersecurity matters and related risk exposures periodically from
our Chief Financial Officer.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.