Disclosure · Form 10-K · fiscal 2026
Lantronix Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed August 27, 2026· period ended June 30, 2026· LTRX· CIK 1114925· Updated · filing on sec.gov ↗
Lantronix Inc's Form 10-K for fiscal 2026, filed August 27, 2026, names the Director of IT as its top security role, with oversight by the full board.
What the filing says, in plain English
Who leads security (the top role, as the filing names it)
Director of IT
Reports to
not identified
Board oversight
Full board
“The Board is responsible for the oversight of risks from cybersecurity threats.”
CISO or other person named
not identified
Frameworks and standards named
NIST Cybersecurity Framework
Where the filing names it
- NIST Cybersecurity Framework: “Cybersecurity Framework ("NIST CSF"), which provides an outline of enterprise security processes and controls, to inform the”
Outside assessors, consultants or testers
Described
“As part of our risk management process, we may engage third-party experts”
Experience of the security leadership, as stated
Stated
“Our Director of IT has over 29 years of experience in various information technology roles, which includes over 10 years of management of cybersecurity matters.”
Material incident
The filing states none
“As of the date of this Report, we do not believe that known risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.”
The section
734 words, Form 10-K filed August 27, 2026 for the period ended June 30, 2026
Read by claude-sonnet-5-5 on November 2, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Lantronix Inc standard industrial classification 3576, Computer communications equipment (SEC SIC list). 6 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| CiscoFY 2026, filed September 2, 2026 | Chief Security and Trust Officer | Executive Vice President, Operations | Audit Committee |
| Extreme NetworksFY 2026, filed August 17, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| A10 NetworksFY 2025, filed February 25, 2026 | Head of Information Security | not identified | Audit Committee |
| Arista NetworksFY 2025, filed February 17, 2026 | Vice President and Chief Information Security Officer | not identified | Audit Committee |
| F5FY 2025, filed November 25, 2025 | Chief Information Security Officer | not identified | Risk Committee |
| Juniper NetworksFY 2024, filed February 21, 2025 | Chief Information Security Officer | not identified | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Lantronix Inc's Form 10-K as filed with the SEC on August 27, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C.
CYBERSECURITY
Risk Management and Strategy
We have established policies and processes for assessing, identifying,
and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and
processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted
through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information
systems or any information residing therein.
We leverage guidance from the National Institute of Standards and Technology
Cybersecurity Framework ("NIST CSF"), which provides an outline of enterprise security processes and controls, to inform the
design and assessment of our cybersecurity risk management program. This does not imply that we meet any particular technical standards,
specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks
relevant to our business.
As part of our risk management process, we may engage third-party experts
to help identify and assess risks from cybersecurity threats. Our risk management process also encompasses cybersecurity risks associated
with our use of third-party service providers.
Our cybersecurity risk management program includes:
·
risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services and our broader IT environment;
·
evaluations of our readiness to assess, respond and, as applicable, recover from potential cybersecurity incidents;
·
periodic tabletop exercises to simulate a response to a cybersecurity incident and use the findings to improve our processes, technologies and incident response plan;
·
the use of external service providers, where appropriate, to assess, test, or otherwise assist with the aspects of our security controls;
·
cybersecurity training to educate our employees, consultants and other users about their individual responsibilities regarding our IT systems and data;
·
weekly briefings on cybersecurity incidents, threats, and related matters;
·
a third-party risk management process for service providers, suppliers and vendors who have access to our critical systems and information; and
·
cybersecurity risk insurance that provides protection against certain potential costs and losses arising from a cybersecurity incident.
As of the date of this Report, we do not believe that known risks from
cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or
are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However,
we can give no assurance that we have detected or protected against all such cybersecurity incidents or threats or that we will not experience
such an incident in the future. Further details about the cybersecurity risks we face are described under the heading " Risks Related to Technology, Cybersecurity and Intellectual Property , " included as part of our risk factor disclosures in Part I,
Item 1A of this Report, which disclosures are incorporated by reference herein.
Governance
The Board is responsible for the oversight of risks from cybersecurity
threats. Our Board oversees management's implementation of our cybersecurity risk management program. On a quarterly basis, and
more frequently as needed, our Board receives updates from our senior management concerning, among other relevant information, the status
of our cybersecurity initiatives to strengthen our cybersecurity risk management and are apprised, as necessary, regarding any material
cybersecurity incidents, as well as any incidents with lesser impact potential.
While the Board reviews and oversees the Company's information security
efforts, our Director of IT, under the oversight of our executive officers, is responsible for the day-to-day management of cybersecurity
risk and the design and implementation of policies, processes and procedures to identify and mitigate this risk. Our Director of IT, in
coordination with the executive officers, is responsible for assessing and managing material risks from cybersecurity threats, as well
as managing and responding to material cybersecurity incidents if any occur. Our Director of IT has over 29 years of experience in various
information technology roles, which includes over 10 years of management of cybersecurity matters.
Our Director of IT provides weekly briefings to the Chief Financial Officer,
General Counsel and other members of our cross-functional incident response team. The weekly briefings are focused on our cybersecurity
risks and activities, including cybersecurity incidents and responses, cybersecurity systems testing, third-party activities and related
topics. In the event that threats and incidents are identified as potentially significant, the Chief Financial Officer and General Counsel
promptly report to our Board.
Earlier filings on record
Fiscal 2025 Form 10-K, filed August 29, 2025 sec.gov ↗
Top security role, as the filing names it
Director of IT
Reports to, as the filing names it
executive officers
“While the Board reviews and oversees the Company's information security efforts, our Director of IT, under the oversight of our executive officers, is responsible for the day-to-day management of cybersecurity risk and the design and implementation of policies, processes and procedures to identify and mitigate this risk.”
Board oversight
Full board
“The Board is responsible for the oversight of risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
Stated
“Our Director of IT has over 28 years of experience in various information technology roles, which includes over 10 years of management of cybersecurity matters.”
Material incident
The filing states none
“As of the date of this report, we do not believe that known risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 2, 2026; every quote verified in the stored text by code.
ITEM 1C.
CYBERSECURITY
Risk Management and Strategy
We have established policies and processes for assessing, identifying,
and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and
processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted
through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information
systems or any information residing therein.
We leverage guidance from the National Institute of Standards and Technology
Cybersecurity Framework ("NIST CSF"), which provides an outline of enterprise security processes and controls, to inform the
design and assessment of our cybersecurity risk management program. This does not imply that we meet any particular technical standards,
specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks
relevant to our business.
As part of our risk management process, we may engage third-party experts
to help identify and assess risks from cybersecurity threats. Our risk management process also encompasses cybersecurity risks associated
with our use of third-party service providers.
Our cybersecurity risk management program includes:
·
risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services and our broader IT environment;
·
evaluations of our readiness to assess, respond and, as applicable, recover from potential cybersecurity incidents;
·
periodic tabletop exercises to simulate a response to a cybersecurity incident and use the findings to improve our processes, technologies and incident response plan;
·
the use of external service providers, where appropriate, to assess, test, or otherwise assist with the aspects of our security controls;
·
cybersecurity training to educate our employees, consultants and other users about their individual responsibilities regarding our IT systems and data;
·
weekly briefings on cybersecurity incidents, threats, and related matters;
·
a third-party risk management process for service providers, suppliers and vendors who have access to our critical systems and information; and
·
cybersecurity risk insurance that provides protection against certain potential costs and losses arising from a cybersecurity incident.
As of the date of this report, we do not believe that known risks from
cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or
are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However,
we can give no assurance that we have detected or protected against all such cybersecurity incidents or threats or that we will not experience
such an incident in the future. Further details about the cybersecurity risks we face are described under the heading " Risks
Related to Technology, Cybersecurity and Intellectual Property, " included as part of our risk factor disclosures in Part I,
Item 1A of this Report, which disclosures are incorporated by reference herein.
Governance
The Board is responsible for the oversight of risks from cybersecurity
threats. Our Board oversees management's implementation of our cybersecurity risk management program. On a quarterly basis, and
more frequently as needed, our Board receives updates from our senior management concerning, among other relevant information, the status
of our cybersecurity initiatives to strengthen our cybersecurity risk management and are apprised, as necessary, regarding any material
cybersecurity incidents, as well as any incidents with lesser impact potential.
While the Board reviews and oversees the Company's information security
efforts, our Director of IT, under the oversight of our executive officers, is responsible for the day-to-day management of cybersecurity
risk and the design and implementation of policies, processes and procedures to identify and mitigate this risk. Our Director of IT, in
coordination with the executive officers, is responsible for assessing and managing material risks from cybersecurity threats, as well
as managing and responding to material cybersecurity incidents if any occur. Our Director of IT has over 28 years of experience in various
information technology roles, which includes over 10 years of management of cybersecurity matters.
Our Director of IT provides weekly briefings to the Chief Financial Officer,
General Counsel and other members of our cross-functional incident response team. The weekly briefings are focused on our cybersecurity
risks and activities, including cybersecurity incidents and responses, cybersecurity systems testing, third-party activities and related
topics. In the event that threats and incidents are identified as potentially significant, the Chief Financial Officer and General Counsel
promptly report to our Board.
Fiscal 2024 Form 10-K, filed September 9, 2024 sec.gov ↗
Top security role, as the filing names it
Director of IT
Reports to, as the filing names it
not identified
Board oversight
Full board
“The Board is responsible for the oversight of risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
Stated
“Our Director of IT has over 27 years of experience in various information technology roles, which includes over 10 years of management of cybersecurity matters.”
Material incident
The filing states none
“As of the date of this report, we do not believe that known risks from cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 2, 2026; every quote verified in the stored text by code.
ITEM 1C.
CYBERSECURITY
Risk Management and Strategy
We have established policies and processes for assessing, identifying,
and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and
processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted
through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information
systems or any information residing therein.
We leverage guidance from the National Institute of Standards and Technology
Cybersecurity Framework ("NIST CSF"), which provides an outline of enterprise security processes and controls, to inform the
design and assessment of our cybersecurity risk management program. This does not imply that we meet any particular technical standards,
specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks
relevant to our business.
As part of our risk management process, we may engage third-party experts
to help identify and assess risks from cybersecurity threats. Our risk management process also encompasses cybersecurity risks associated
with our use of third-party service providers.
Our cybersecurity risk management program includes:
· risk assessments designed to help identify material cybersecurity risks to
our critical systems, information, products, services and our broader IT environment;
· evaluations of our readiness to assess, respond and, as applicable, recover
from potential cybersecurity incidents;
· periodic tabletop exercises to simulate a response to a cybersecurity incident
and use the findings to improve our processes, technologies and incident response plan;
· the use of external service providers, where appropriate, to assess, test,
or otherwise assist with the aspects of our security controls;
· cybersecurity training to educate our employees, consultants and other users
about their individual responsibilities regarding our IT systems and data;
· weekly briefings on cybersecurity incidents, threats, and related matters;
· a third-party risk management process for service providers, suppliers and
vendors who have access to our critical systems and information; and
· cybersecurity risk insurance that provides protection against certain potential
costs and losses arising from a cybersecurity incident.
As of the date of this report, we do not believe that known risks from
cybersecurity threats, including as a result of any previous cybersecurity incidents that we are aware of, have materially affected or
are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However,
we can give no assurance that we have detected or protected against all such cybersecurity incidents or threats or that we will not experience
such an incident in the future. Further details about the cybersecurity risks we face are described under the heading " Risks
Related to Technology, Cybersecurity and Intellectual Property, " included as part of our risk factor disclosures in Part I,
Item 1A of this Report, which disclosures are incorporated by reference herein.
Governance
The Board is responsible for the oversight of risks from cybersecurity
threats. Our Board oversees management's implementation of our cybersecurity risk management program. On a quarterly basis, and
more frequently as needed, our Board receives updates from our senior management concerning, among other relevant information, the status
of our cybersecurity initiatives to strengthen our cybersecurity risk management and are apprised, as necessary, regarding any material
cybersecurity incidents, as well as any incidents with lesser impact potential.
While the Board reviews and oversees the Company's information
security efforts, our executive officers, including our Chief Financial Officer, Vice President of Business Operations, and Vice President
of Business Affairs are responsible for the day-to-day management of cybersecurity risk and the design and implementation of policies,
processes and procedures to identify and mitigate this risk. Our Director of IT, in coordination with the executive officers named above,
is responsible for assessing and managing material risks from cybersecurity threats, as well as managing and responding to material cybersecurity
incidents if any occur. Our Director of IT has over 27 years of experience in various information technology roles, which includes over
10 years of management of cybersecurity matters.
Our Director of IT provides weekly briefings to the Chief Financial
Officer, Vice President of Business Operations, Vice President of Business Affairs and other members of our cross-functional incident
response team. The weekly briefings are focused on our cybersecurity risks and activities, including cybersecurity incidents and responses,
cybersecurity systems testing, third-party activities and related topics. In the event threats and incidents are identified as potentially
significant, the Chief Financial Officer, Vice President of Business Operations or Vice President of Business Affairs will promptly report
to our Board.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.