CISO Tribune

Disclosure · Form 10-K · fiscal 2025

Intest Corp 10-K cybersecurity disclosure (Item 1C), fiscal 2025

Filed March 12, 2026· period ended December 31, 2025· INTT· CIK 1036262· Updated · filing on sec.gov ↗

Intest Corp's Form 10-K for fiscal 2025, filed March 12, 2026, names the Vice President of IT and Cyber Security as its top security role, with oversight by the Risk and Information Security (" IT ") Committee.

What Intest's Item 1C says

Intest's Form 10-K for fiscal 2025 places management oversight of cybersecurity risks with the Risk and Information Security Committee.

Board and management oversight

The IT Committee meets quarterly to review the company's cyber risk management strategy, and a member of the Board attends these meetings as an observer. The Board periodically reviews and discusses with management the effectiveness of information technology security, data privacy and cyber security and related risks.

Who leads security

The Vice President of IT and Cyber Security has over 15 years of experience in IT roles and holds a cybersecurity professional certificate and an MBA in information technology management.

How the company manages cyber risk

The IT Committee identifies the company's material cyber risks and reviews the strategies, processes and controls in place to address those risks. The company conducts regular penetration testing to identify and address potential vulnerabilities. The IT Committee has in place the IRP, which lays out the company's guidelines for responding to and handling cyber incidents.

Third parties and incidents

The company engages an external cybersecurity consultant to review and update its IRP. The company says it has been the victim of cybersecurity incidents and may be the subject of cybersecurity incidents in the future.

What the section does not state

The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.

Read from the Form 10-K filed March 12, 2026, on . Every sentence rests on a passage of the section reproduced below.

The filing's fields, each with its sentence

Who leads security (the top role, as the filing names it)

Vice President of IT and Cyber Security

Reports to

not identified

Board oversight

Risk and Information Security (" IT ") Committee

“Oversight of cybersecurity risks by management is led by our Risk and Information Security (" IT ") Committee, which is chaired by our Corporate Vice President of IT and Cybersecurity and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer and our Corporate Vice President of Human Resources .”

CISO or other person named

not identified

Frameworks and standards named

not identified

Outside assessors, consultants or testers

Described

“We also engage a trusted external cybersecurity consultant to review and update our IRP, ensuring it aligns with the latest industry standards and best practices.”

Experience of the security leadership, as stated

Stated

“Our Vice President of IT and Cyber Security has over 15 years of experience in IT roles and holds a cybersecurity professional certificate and an MBA in information technology management.”

Material incident

The filing states none

“We have been the victim of cybersecurity incidents and may be the subject of cybersecurity incidents in the future.”

The section

531 words, Form 10-K filed March 12, 2026 for the period ended December 31, 2025

Read by claude-sonnet-5-5 on November 4, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns Intest Corp standard industrial classification 3825, Instruments for meas & testing of electricity & elec signals (SEC SIC list). One other filer in our library has the same code. Also shown: filers whose codes the SEC assigns to the same review office (Industrial Applications and Services).

FilerTop security roleReports toBoard oversight
Aehr Test SystemsFY 2026, filed July 27, 2026Chief Operating Officernot identifiedAudit Committee
FilerTop security roleReports toBoard oversight
Advanced Biomed Inc.FY 2026, filed October 13, 2026Chief Executive Officernot identifiednot identified
Bion Environmental Technologies IncFY 2026, filed September 29, 2026not identifiednot identifiedfull board
Bloomia Holdings, Inc.FY 2026, filed September 21, 2026not identifiednot identifiedAudit Committee
Karbon-X Corp.FY 2026, filed September 15, 2026Chief Executive Officernot identifiedfull board
Adm Tronics Unlimited, Inc.FY 2026, filed July 10, 2026CSOnot identifiedfull board
PetVivo Holdings, Inc.FY 2026, filed June 29, 2026CFOBoardAudit Committee
Mesa Laboratories IncFY 2026, filed June 3, 2026Information Security ManagerVice President of Business Information ServicesAudit Committee

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of Intest Corp's Form 10-K as filed with the SEC on March 12, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

Item 1C. CYBERSECURITY

Cyber Security Governance

Oversight of cybersecurity risks by management is led by our Risk and Information Security (" IT ") Committee, which is chaired by our Corporate Vice President of IT and Cybersecurity and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer and our Corporate Vice President of Human Resources .

Our Vice President of IT and Cyber Security has over 15 years of experience in IT roles and holds a cybersecurity professional certificate and an MBA in information technology management. The VP and IT team work with the executive leadership team to implement appropriate cybersecurity controls and to respond to cybersecurity threats in accordance with our Incident Response Plan (the " IRP ") and Information Security Policy.

Among its responsibilities, the IT Committee identifies our material cyber risks and reviews the strategies, processes and controls in place to facilitate the understanding, identification, prevention, measurement, reporting and mitigation of those risks. The IT Committee meets quarterly to review our cyber risk management strategy. A member of the Board attends these meetings as an observer.

The Board and senior management provide general oversight and support to the IT Committee. The Board periodically reviews, appraises and discusses with management the effectiveness of our information technology security, data privacy and cyber security and related risks.

Risk Management and Strategy

Cybersecurity is a key component of our overall risk management system. We are implementing processes that are designed to effectively manage risks from cybersecurity threats. The IT Committee currently has in place the IRP which lays out our guidelines for responding to and handling cyber incidents. The IRP helps to ensure a quick and organized response in the event of a cyber incident and helps ensure all necessary members of management, the Board and legal counsel are informed so action can be taken as soon as possible. Under the IRP, once a cyber incident is identified, a response team will review the details of the cyber incident, inform management and the Board and work to secure our systems and fix the vulnerability. An investigation will be conducted, with the assistance of third-party consultants if

needed, to determine the root cause of the cyber incident, the materiality of the cyber incident, and any disclosure or legal obligations that will stem from the cyber incident.

To enhance our cybersecurity defenses and reduce the risk of cybersecurity incidents, we have integrated a range of third-party services into our IT systems. These include a robust detection and response solution that provides continuous monitoring of our environment and in January 2025 we implemented automation that shuts down active threats, endpoint protection across all devices, and the implementation of two-factor authentication for secure access. Additionally, we conduct regular penetration testing to identify and address potential vulnerabilities. We also engage a trusted external cybersecurity consultant to review and update our IRP, ensuring it aligns with the latest industry standards and best practices.

We have been the victim of cybersecurity incidents and may be the subject of cybersecurity incidents in the future. See " Part I; Item 1A. Risk Factors " for more information about the risk posed to us by cybersecurity threats.

Earlier filings on record

Fiscal 2024 Form 10-K, filed March 13, 2025 sec.gov ↗

Top security role, as the filing names it

Corporate Vice President of IT and Cybersecurity

Reports to, as the filing names it

not identified

Board oversight

Information Technology (" IT ") Committee

“Oversight of cybersecurity risks by management is led by our Information Technology (" IT ") Committee, which is chaired by our Corporate Vice President of IT and Cybersecurity and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“We have been the victim of cybersecurity incidents and may be the subject of cybersecurity incidents in the future.”

Read by claude-sonnet-5-5 on November 4, 2026; every quote verified in the stored text by code.

Item 1C.

CYBERSECURITY

Cyber Security Governance

Oversight of cybersecurity risks by management is led by our Information Technology (" IT ") Committee, which is chaired by our Corporate Vice President of IT and Cybersecurity and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer. Among its responsibilities, the IT Committee identifies our material cyber risks and reviews the strategies, processes and controls in place to facilitate the understanding, identification, prevention, measurement, reporting and mitigation of those risks. The IT Committee meets quarterly to review our cyber risk management strategy. A member of the Board attends these meetings as an observer.

The Board and senior management provide general oversight and support to the IT Committee. The Board periodically reviews, appraises and discusses with management the effectiveness of our information technology security, data privacy and cyber security and related risks.

Risk Management and Strategy

Cybersecurity is a key component of our overall risk management system. We are implementing processes that are designed to effectively manage risks from cybersecurity threats. The IT Committee currently has in place an Incident Response Plan (the " IRP "). The IRP lays out our guidelines for responding to and handling cyber incidents. The IRP helps to ensure a quick and organized response in the event of a cyber incident and helps ensure all necessary members of management, the Board and legal counsel are informed so action can be taken as soon as possible. Under the IRP, once a cyber incident is identified, a response team will review the details of the cyber incident, inform management and the Board and work to secure our systems and fix the vulnerability. An investigation will be conducted, with the assistance of third-party consultants if needed, to determine the root cause of the cyber incident, the materiality of the cyber incident, and any disclosure or legal obligations that will stem from the cyber incident.

To enhance our cybersecurity defenses and reduce the risk of cybersecurity incidents, we have integrated a range of third-party services into our IT systems. These include a robust detection and response solution that provides continuous monitoring of our environment and in January 2025 we implemented automation that shuts down active threats, endpoint protection across all devices, and the implementation of two-factor authentication for secure access. Additionally, we conduct regular penetration testing to identify and address potential vulnerabilities. We also engage a trusted external cybersecurity consultant to review and update our IRP, ensuring it aligns with the latest industry standards and best practices.

We have been the victim of cybersecurity incidents and may be the subject of cybersecurity incidents in the future. See " Item 1A, Risk Factors " for more information about the risk posed to us by cybersecurity threats.

Fiscal 2023 Form 10-K, filed March 27, 2024 sec.gov ↗

Top security role, as the filing names it

not identified

Reports to, as the filing names it

not identified

Board oversight

Information Technology ("IT") Committee

“Oversight of cybersecurity risks by management is led by our Information Technology ("IT") Committee, which is chaired by our Director of IT and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“We have been the victim of cyber incidents and may be the subject of cyber incidents in the future.”

Read by claude-sonnet-5-5 on November 4, 2026; every quote verified in the stored text by code.

Item 1C.

CYBERSECURITY

Cyber Security Governance

Oversight of cybersecurity risks by management is led by our Information Technology ("IT") Committee, which is chaired by our Director of IT and comprised of members of senior management including our Chief Executive Officer and Chief Financial Officer. Among its responsibilities, the IT Committee identifies our material cyber risks and reviews the strategies, processes and controls in place to facilitate the understanding, identification, prevention, measurement, reporting and mitigation of those risks. The IT Committee meets quarterly to review our cyber risk management strategy. A member of the Board attends these meetings as an observer.

The Board and senior management provide general oversight and support to the IT Committee. The Board periodically reviews, appraises and discusses with management the effectiveness of our information technology security, data privacy and cyber security and related risks.

Risk Management and Strategy

Cybersecurity is a key component of our overall risk management system. We are implementing processes that are designed to effectively manage risks from cybersecurity threats. The IT Committee currently has in place an Incident Response Plan (the "IRP"). The IRP lays out our guidelines for responding to and handling cyber incidents. The IRP helps to ensure a quick and organized response in the event of a cyber incident and helps ensure all necessary members of management, the Board and legal counsel are informed so action can be taken as soon as possible. Under the IRP, once a cyber incident is identified, a response team will review the details of the cyber incident, inform management and the Board and work to secure our systems and fix the vulnerability. An investigation will be conducted, with the assistance of third-party consultants if needed, to determine the root cause of the cyber incident, the materiality of the cyber incident, and any disclosure or legal obligations that will stem from the cyber incident.

To help prevent cyber security incidents we have integrated a number of third-party services into our IT systems to bolster our cyber security defenses. These services include a detection and response system which provides continuous monitoring of our IT systems, end-point protection on all of our computers and connected devices, as well as two-step verification for accessing our systems. We also engage a third-party consultant with experience in cyber defense to review our IRP to ensure it meets current standards and best practices.

We have been the victim of cyber incidents and may be the subject of cyber incidents in the future. See Item 1A, Risk Factors for more information about the risk posed to us by cybersecurity threats.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.