CISO Tribune

Disclosure · Form 10-K · fiscal 2026

Techprecision Corp 10-K cybersecurity disclosure (Item 1C), fiscal 2026

Filed June 25, 2026· period ended March 31, 2026· TPCS· CIK 1328792· Updated · filing on sec.gov ↗

Techprecision Corp's Form 10-K for fiscal 2026, filed June 25, 2026, places oversight of cybersecurity risk with the audit committee; a top security role title is not identified.

What Techprecision's Item 1C says

Techprecision's Form 10-K for fiscal 2026 places general oversight of cybersecurity risk with the audit committee. The Chief Executive Officer is primarily responsible for assessing and managing material risks from cybersecurity threats, with assistance from IT staff and third-party service providers.

Board and management oversight

The Chief Executive Officer provides periodic briefings to the audit committee on cybersecurity risks and activities, including recent incidents and related responses. The audit committee provides regular updates to the board of directors on such reports.

Who leads security

IT staff at Ranor and Stadco oversee their respective cybersecurity processes day to day and escalate matters to the Chief Executive Officer as appropriate.

How the company manages cyber risk

The company's IT staff, along with third-party providers and outsourced IT services, monitor and address cybersecurity-related risks, including installing software for threat protection and malware. IT staff and third-party providers notify management of material risks or concerns, which management assesses and may bring to the board of directors if deemed necessary or appropriate.

Third parties and incidents

The company continues to work with outside counsel and third-party service providers to further develop its expertise, processes and procedures on cybersecurity protection and its response plan. To date, the company has not, to its knowledge, encountered cybersecurity challenges that have materially impaired its operations or financial standing.

What the section does not state

The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.

Read from the Form 10-K filed June 25, 2026, on . Every sentence rests on a passage of the section reproduced below.

The filing's fields, each with its sentence

Who leads security (the top role, as the filing names it)

not identified

Reports to

not identified

Board oversight

audit committee

“Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats.”

CISO or other person named

not identified

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

not identified

Material incident

The filing states none

“To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing.”

The section

391 words, Form 10-K filed June 25, 2026 for the period ended March 31, 2026

Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns Techprecision Corp standard industrial classification 3440, Fabricated structural metal products (SEC SIC list). One other filer in our library has the same code. Also shown: filers whose codes the SEC assigns to the same review office (Office of Manufacturing).

FilerTop security roleReports toBoard oversight
INNOVATE Corp.FY 2025, filed March 26, 2026Head of ITnot identifiedAudit Committee
FilerTop security roleReports toBoard oversight
Insteel Industries IncFY 2026, filed October 29, 2026Chief Information Officernot identifiedfull board
Penguin Solutions, Inc.FY 2026, filed October 20, 2026Chief Information Officernot identifiednot identified
Napco Security Technologies, IncFY 2026, filed August 24, 2026Vice President of Information Technologynot identifiednot identified
George Risk Industries, Inc.FY 2026, filed August 7, 2026IT ManagerCEOaudit committee
News CorpFY 2026, filed August 7, 2026Chief Information Security OfficerChief Technology OfficerAudit Committee
NikeFY 2026, filed July 15, 2026Vice President, Foundational Technology & ServicesChief Technology OfficerAudit & Finance Committee
Perfect Moment Ltd.FY 2026, filed June 29, 2026Chief Financial Officer and Chief Operating Officerthe PresidentAudit Committee

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of Techprecision Corp's Form 10-K as filed with the SEC on June 25, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

Item 1C. Cybersecurity.

Cybersecurity Risk Management and Strategy

We have processes in place to assess, identify, and manage material risks from cybersecurity threats. We and our subsidiaries currently rely heavily on products and services provided by third-party suppliers to operate certain critical business systems, including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions. Our IT staff along with the third-party providers and outsourced IT services monitor and address cybersecurity-related risks, including installing software for threat protection and malware. Our IT staff and such third-party providers are tasked with notifying management of any material risks or cybersecurity concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or appropriate.

We continue to work with outside counsel and third - party service providers to further develop our expertise, processes and procedures with respect to cybersecurity protection and our response plan.

To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, " Risk Factors ," in this Report. We maintain a cyber liability insurance policy. However, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations.

Governance

Our Chief Executive Officer is primarily responsible for assessing and managing our strategic risk exposures, including material risks from cybersecurity threats, with assistance from our IT staff and third-party service providers. Our IT staff at both Ranor and Stadco oversee their respective cybersecurity processes on a day-to-day basis, including those described under the heading "Cybersecurity Risk Management and Strategy" above, and escalate matters to our Chief Executive Officer as appropriate.

Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats. Our Chief Executive Officer provides periodic briefings to the audit committee of our board of directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. In furtherance thereof, the committee is responsible for monitoring and assessing strategic risk exposure. Our audit committee provides regular updates to the board of directors on such reports.

Earlier filings on record

Fiscal 2025 Form 10-K, filed July 30, 2025 sec.gov ↗

Top security role, as the filing names it

Chief Executive Officer

Reports to, as the filing names it

not identified

Board oversight

audit committee

“Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing.”

Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.

Item 1C. Cybersecurity.

Cybersecurity Risk Management and Strategy

We have processes in place to assess, identify, and manage material risks from cybersecurity threats. We and our subsidiaries currently rely heavily on products and services provided by third-party suppliers to operate certain critical business systems, including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions. Our IT staff along with the third-party providers and outsourced IT services monitor and address cybersecurity related risks, including installing software for threat protection and malware. Our IT staff and such third-party providers are tasked with notifying management of any material risks or cybersecurity concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or appropriate.

We continue to work with outside counsel and third - party service providers to further develop our expertise, processes and procedures with respect to cybersecurity protection and our response plan.

To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, " Risk Factors ," in this Report. We maintain a cyber liability insurance policy. However, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations.

Governance

Our Chief Executive Officer is primarily responsible for assessing and managing our strategic risk exposures, including material risks from cybersecurity threats, with assistance from our IT staff and third-party service providers. Our IT staff at both Ranor and Stadco oversee their respective cybersecurity processes on a day-to-day basis, including those described under the heading "Cybersecurity Risk Management and Strategy" above, and escalate matters to our Chief Executive Officer as appropriate.

Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats. Our Chief Executive Officer provides periodic briefings to the audit committee of our board of directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. In furtherance thereof, the committee is responsible for monitoring and assessing strategic risk exposure. Our audit committee provides regular updates to the board of directors on such reports.

Fiscal 2024 Form 10-K, filed September 13, 2024 sec.gov ↗

Top security role, as the filing names it

Chief Executive Officer

Reports to, as the filing names it

not identified

Board oversight

audit committee

“Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing.”

Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.

Item 1C. Cybersecurity.

Cybersecurity Risk Management and Strategy

We have processes in place to assess, identify, and manage material risks from cybersecurity threats. We and our subsidiaries currently rely heavily on products and services provided by third-party suppliers to operate certain critical business systems, including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions. Our IT staff along with the third-party providers and outsourced IT services monitor and address cybersecurity related risks, including installing software for threat protection and malware. Our IT staff and such third-party providers are tasked with notifying management of any material risks or cybersecurity concerns that they identify, which management then assesses and may bring to our board of directors to discuss if deemed necessary or appropriate.

We continue to work with outside counsel and third - party service providers to further develop our expertise, processes and procedures with respect to cybersecurity protection and our response plan.

To date, we have not (to our knowledge) encountered cybersecurity challenges that have materially impaired our operations or financial standing. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, " Risk Factors ," in this Report. We maintain a cyber liability insurance policy. However, our cyber liability insurance policy may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management's attention from our business and operations.

Governance

Our Chief Executive Officer is primarily responsible for assessing and managing our strategic risk exposures, including material risks from cybersecurity threats, with assistance from our IT staff and third-party service providers. Our IT staff at both Ranor and Stadco oversee their respective cybersecurity processes on a day-to-day basis, including those described under the heading "Cybersecurity Risk Management and Strategy" above, and escalate matters to our Chief Executive Officer as appropriate.

Our audit committee is tasked with general oversight of our risk management process, including risks from cybersecurity threats. Our Chief Executive Officer provides periodic briefings to the audit committee of our board of directors regarding our cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. In furtherance thereof, the committee is responsible for monitoring and assessing strategic risk exposure. Our audit committee provides regular updates to the board of directors on such reports.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.