Disclosure · Form 10-K · fiscal 2025
Quotemedia Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed April 7, 2026· period ended December 31, 2025· QMCI· CIK 1101433· Updated · filing on sec.gov ↗
Quotemedia Inc's Form 10-K for fiscal 2025, filed April 7, 2026, places oversight of cybersecurity risk with the Audit Committee; a top security role title is not identified.
What Quotemedia's Item 1C says
Quotemedia's Form 10-K for fiscal 2025 places oversight of cybersecurity strategy and risk management with the Audit Committee.
Board and management oversight
The Audit Committee engages in regular discussions with management about significant financial risk exposures and the measures implemented to monitor and control these risks.
How the company manages cyber risk
The company's employees identify and assess risks from cybersecurity threats by monitoring and evaluating the cybersecurity threat environment and the company's risk profile. The company has completed various security audits and certifications, including SOC 2 Type II.
Third parties and incidents
The company relies primarily on its qualified internal team, with assistance from third party service providers, to operate and maintain its information technology infrastructure and systems.
What the section does not state
The section does not name the person who holds the top security role.
Read from the Form 10-K filed April 7, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Audit Committee
“The Company's Audit Committee holds oversight responsibility over the Company's cybersecurity strategy and risk management.”
CISO or other person named
not identified
Frameworks and standards named
SOC 2
Where the filing names it
- SOC 2: “We have completed various security audits and certifications, including SOC 2 Type II.”
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“The Company is not currently aware of any risks from cybersecurity threats, nor has the Company had a previous cybersecurity incident that in either case have materially affected or are reasonably likely to materially affect the Company, its business strategy, results of operations or financial condition.”
The section
290 words, Form 10-K filed April 7, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Quotemedia Inc standard industrial classification 7389, Services-business services, nec (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| AccentureFY 2026, filed October 16, 2026 | chief information security officer | General Counsel | Audit Committee of the Board of Directors |
| Sparta Commercial Services, Inc.FY 2026, filed August 13, 2026 | Vice President Operations | Chief Executive Officer or the board, as appropriate | not identified |
| CBIZ, Inc.FY 2025, filed August 4, 2026 | Vice President, IT Security and Compliance | Chief Information Officer | full board |
| Two Hands CorpFY 2025, filed April 10, 2026 | not identified | not identified | full board |
| Paysign, Inc.FY 2025, filed March 25, 2026 | Information Security Officer | not identified | Audit Committee |
| Datavault AI Inc.FY 2025, filed March 18, 2026 | not identified | not identified | Audit Committee |
| Heritage Global Inc.FY 2025, filed March 12, 2026 | not identified | not identified | Corporate Governance Committee |
| RB Global Inc.FY 2025, filed February 25, 2026 | Chief Information Security Officer | not identified | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Quotemedia Inc's Form 10-K as filed with the SEC on April 7, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C. CYBERSECURITY
The Company's information technology, communication networks, system applications, accounting and financial reporting platforms and related systems are integral to the operation of the business. The Company utilizes these systems, among others, for financial analysis, management, and reporting, and for various other aspects of the business.
The Company's cybersecurity strategy focuses on detection, protection, incident response, security risk management and mitigation, and resiliency of the cybersecurity infrastructure. The Company relies primarily on its qualified internal team, with assistance from third party service providers, to operate and maintain its information technology infrastructure and systems and to evaluate, test and update various information security processes and to manage material risks from cybersecurity threats to the Company's critical computer networks, third party hosted services, communications systems, hardware and software, and critical data, including confidential information that is proprietary, strategic or competitive in nature.
The Company's employees identify and assess risks from cybersecurity threats by monitoring and evaluating the cybersecurity threat environment and the Company's risk profile. The Company is not currently aware of any risks from cybersecurity threats, nor has the Company had a previous cybersecurity incident that in either case have materially affected or are reasonably likely to materially affect the Company, its business strategy, results of operations or financial condition.
The Company's Audit Committee holds oversight responsibility over the Company's cybersecurity strategy and risk management. The Audit Committee engages in regular discussions with management and, if and when deemed appropriate by management or the Audit Committee, third party service providers, regarding the Company's significant financial risk exposures and the measures implemented to monitor and control these risks, including those that may result from material cybersecurity threats. We have completed various security audits and certifications, including SOC 2 Type II.
Earlier filings on record
Fiscal 2024 Form 10-K, filed April 15, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Company's Audit Committee holds oversight responsibility over the Company's cybersecurity strategy and risk management.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“The Company is not currently aware of any risks from cybersecurity threats, nor has the Company had a previous cybersecurity incident that in either case have materially affected or are reasonably likely to materially affect the Company, its business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
The Company's information technology, communication networks, system applications, accounting and financial reporting platforms and related systems are integral to the operation of the business. The Company utilizes these systems, among others, for financial analysis, management, and reporting, and for various other aspects of the business.
The Company's cybersecurity strategy focuses on detection, protection, incident response, security risk management and mitigation, and resiliency of the cybersecurity infrastructure. The Company relies primarily on its qualified internal team, with assistance from third party service providers, to operate and maintain its information technology infrastructure and systems and to evaluate, test and update various information security processes and to manage material risks from cybersecurity threats to the Company's critical computer networks, third party hosted services, communications systems, hardware and software, and critical data, including confidential information that is proprietary, strategic or competitive in nature.
The Company's employees identify and assess risks from cybersecurity threats by monitoring and evaluating the cybersecurity threat environment and the Company's risk profile. The Company is not currently aware of any risks from cybersecurity threats, nor has the Company had a previous cybersecurity incident that in either case have materially affected or are reasonably likely to materially affect the Company, its business strategy, results of operations or financial condition.
The Company's Audit Committee holds oversight responsibility over the Company's cybersecurity strategy and risk management. The Audit Committee engages in regular discussions with management and, if and when deemed appropriate by management or the Audit Committee, third party service providers, regarding the Company's significant financial risk exposures and the measures implemented to monitor and control these risks, including those that may result from material cybersecurity threats. We have completed various security audits and certifications, including SOC 2 Type II.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.