Disclosure · Form 10-K · fiscal 2026
Nanoviricides, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed September 28, 2026· period ended June 30, 2026· NNVC· CIK 1379006· Updated · filing on sec.gov ↗
Nanoviricides, Inc.'s Form 10-K for fiscal 2026, filed September 28, 2026, places oversight of cybersecurity risk with the audit committee; a top security role title is not identified.
What Nanoviricides' Item 1C says
Nanoviricides' Form 10-K for fiscal 2026 places primary oversight of cybersecurity with the audit committee.
Board and management oversight
The audit committee is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents. The board of directors receives periodic updates from the audit committee regarding matters of cybersecurity. Management is responsible for the day-to-day management of risks, while the board of directors oversees risk management, including risks from cybersecurity threats.
How the company manages cyber risk
The company has adopted processes designed to identify, assess and manage material risks from cybersecurity threats. The company has implemented procedures over areas such as access on/offboarding and account management.
Third parties and incidents
The company oversees key third-party service providers through vendor diligence upon onboarding and ongoing monitoring, including an annual review of SOC-1 reports where applicable. The company has not experienced a cybersecurity incident that resulted in a material effect on its business strategy, results of operations, or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not say who the top security role reports to.
Read from the Form 10-K filed September 28, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
audit committee
“The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of the date of this Annual Report on Form 10-K, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition.”
The section
341 words, Form 10-K filed September 28, 2026 for the period ended June 30, 2026
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Nanoviricides, Inc. standard industrial classification 2834, Pharmaceutical preparations (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Phibro Animal Health CorpFY 2026, filed August 26, 2026 | Chief Technology and Digital Innovation Officer | not identified | full board |
| Protagenic Therapeutics, Inc.\newFY 2026, filed August 14, 2026 | not identified | not identified | audit committee |
| Earth Science Tech, Inc.FY 2026, filed June 18, 2026 | not identified | not identified | not identified |
| GeoVax Labs, Inc.FY 2025, filed April 15, 2026 | Chief Financial Officer | not identified | Nominating and Governance Committee |
| KALA BIO, Inc.FY 2025, filed April 15, 2026 | Chief Business Officer | not identified | Audit Committee |
| Oncotelic Therapeutics, Inc.FY 2025, filed April 15, 2026 | not identified | not identified | full board |
| Sunshine Biopharma Inc.FY 2025, filed April 3, 2026 | not identified | not identified | not identified |
| LFTD Partners Inc.FY 2025, filed April 1, 2026 | not identified | not identified | not identified |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Nanoviricides, Inc.'s Form 10-K as filed with the SEC on September 28, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C: CYBERSECURITY
Cybersecurity Risk Management and Strategy
We are a clinical stage biotechnology company focused on developing and commercializing new treatments for viral diseases. We and our third-party service providers, collect, process, transmit, and store sensitive data on our systems, including intellectual property, proprietary or confidential business information, and a variety of personal data.
We rely on third parties, including cloud vendors, for various business functions. We select key third-party service providers based on several factors, including the type of data processed and the nature of services offered, and we oversee such key third-party service providers by conducting vendor diligence upon onboarding and ongoing monitoring, including a review of SOC-1 reports on an annual basis, where applicable.
We have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include response to and an assessment of internal and external threats to the security, confidentiality, integrity and availability of our data and information systems, along with other material risks to our operations. In addition, we have implemented procedures over certain areas such as access on/offboarding and account management to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities.
Governance
Management is responsible for the day-to-day management of the risks we face , while our board of directors has responsibility for the oversight of risk management, including risks from cybersecurity threats. The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents. Our board of directors receives periodic updates from our audit committee regarding matters of cybersecurity. Our board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any significant updates to our cybersecurity risk management and initiatives.
As of the date of this Annual Report on Form 10-K, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition.
Earlier filings on record
Fiscal 2025 Form 10-K, filed September 29, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of the date of this Annual Report on Form 10-K, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
ITEM 1C: CYBERSECURITY
Cybersecurity Risk Management and Strategy
We are a clinical stage biotechnology company focused on developing and commercializing new treatments for viral diseases. We and our third-party service providers, collect, process, transmit, and store sensitive data on our systems, including intellectual property, proprietary or confidential business information, and a variety of personal data.
We rely on third parties, including cloud vendors, for various business functions. We select key third-party service providers based on several factors, including the type of data processed and the nature of services offered, and we oversee such key third-party service
providers by conducting vendor diligence upon onboarding and ongoing monitoring, including a review of SOC-1 reports on an annual basis, where applicable.
We have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include response to and an assessment of internal and external threats to the security, confidentiality, integrity and availability of our data and information systems, along with other material risks to our operations. In addition, we have implemented procedures over certain areas such as access on/offboarding and account management to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities.
Governance
Management is responsible for the day-to-day management of the risks we face , while our board of directors has responsibility for the oversight of risk management, including risks from cybersecurity threats. The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents. Our board of directors receives periodic updates from our audit committee regarding matters of cybersecurity. Our board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any significant updates to our cybersecurity risk management and initiatives.
As of the date of this Annual Report on Form 10-K, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition.
Fiscal 2024 Form 10-K, filed September 27, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of the date of this Annual Report on Form 10-K, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
ITEM 1C: CYBERSECURITY
Cybersecurity Risk Management and Strategy
We are a clinical stage biotechnology company focused on developing and commercializing new treatments for viral diseases. We and our third-party service providers, collect, process, transmit, and store sensitive data on our systems, including intellectual property, proprietary or confidential business information, and a variety of personal data.
We rely on third parties, including cloud vendors, for various business functions. We select key third-party service providers based on several factors, including the type of data processed and the nature of services offered, and we oversee such key third-party service providers by conducting vendor diligence upon onboarding and ongoing monitoring, including a review of SOC-1 reports on an annual basis, where applicable.
We have adopted processes designed to identify, assess and manage material risks from cybersecurity threats. Those processes include response to and an assessment of internal and external threats to the security, confidentiality, integrity and availability of our data and information systems, along with other material risks to our operations. In addition, we have implemented procedures over certain areas such as access on/offboarding and account management to help govern the processes put in place by management designed to protect our IT assets, data, and services from threats and vulnerabilities.
Governance
Management is responsible for the day-to-day management of the risks we face, while our board of directors has responsibility for the oversight of risk management, including risks from cybersecurity threats. The audit committee has primary responsibility for oversight of cybersecurity and is briefed on cybersecurity risks at least once a year and following any material cybersecurity incidents. Our board of directors receives periodic updates from our audit committee regarding matters of cybersecurity. Our board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any significant updates to our cybersecurity risk management and initiatives.
As of the date of this Annual Report on Form 10-K, we have not experienced a cybersecurity incident that resulted in a material effect on our business strategy, results of operations, or financial condition.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.