Disclosure · Form 10-K · fiscal 2025
CIMG Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed February 13, 2026· period ended September 30, 2025· IMG· CIK 1527613· Updated · filing on sec.gov ↗
CIMG Inc.'s Form 10-K for fiscal 2025, filed February 13, 2026, places oversight of cybersecurity risk with the full board; a top security role title is not identified.
What CIMG's Item 1C says
CIMG's Form 10-K for fiscal 2025 places oversight of risks from cybersecurity threats with the Board of Directors. The company's executive officers oversee the overall processes to safeguard data and comply with relevant regulations.
Board and management oversight
The company's executive officers will promptly inform and update the Board on material cybersecurity incidents and seek its instructions regarding response and remediation.
How the company manages cyber risk
The company's executive officers have overall responsibility for evaluating cybersecurity risks and related policies, including risks tied to its supply chain, suppliers and other service providers.
Third parties and incidents
The company does not currently engage any assessors, consultants, auditors, or other third parties in connection with these processes. The company's executive officers are responsible for overseeing and periodically reviewing risks from cybersecurity threats associated with its use of any third-party service provider. The company is not aware of any risks from cybersecurity threats that have materially affected, or are reasonably likely to materially affect, the company.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight.
Read from the Form 10-K filed February 13, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Full board
“The Company's Board of Directors is responsible for oversight of risks from cybersecurity threats.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“The Company's executive officers have limited experience in cybersecurity matters, but where they determine it is appropriate, the Company will engage external advisers to assist in assessing, managing and remediating any cybersecurity incidents.”
Material incident
The filing states none
“Since the start of its latest completed fiscal year and up to the date of this Report, the Company is not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected, or are reasonably likely to materially affect, the Company, including its business strategy, results of operations, or financial condition.”
The section
272 words, Form 10-K filed February 13, 2026 for the period ended September 30, 2025
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns CIMG Inc. standard industrial classification 5900, Retail-miscellaneous retail (SEC SIC list). 4 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| VIP Play, Inc.FY 2026, filed September 29, 2026 | Chief Technology Officer | not identified | full board |
| Agassi Sports Entertainment Corp.FY 2025, filed March 31, 2026 | Chief Executive Officer | Board of Directors | full board |
| Live Oak Acquisition Corp. VFY 2025, filed March 30, 2026 | not identified | not identified | Audit Committee |
| TheRealReal, Inc.FY 2025, filed February 26, 2026 | CISO | CTPO | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of CIMG Inc.'s Form 10-K as filed with the SEC on February 13, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. CYBERSECURITY
The
Company's executive officers oversee the strategic processes to safeguard data and comply with relevant regulations and has overall
responsibility for evaluating cybersecurity risks, as well as related policies and risks in connection with the Company's supply
chain, suppliers, and other service providers. The Company does not currently engage any assessors, consultants, auditors, or other third
parties in connection with any such processes, given the size and scale of the Company, the resources available to it, the anticipated
expenditures, and the risks it faces in terms of cybersecurity. The Company's executive officers are responsible for overseeing
and periodically reviewing and identifying risks from cybersecurity threats associated with its use of any third-party service provider.
Since
the start of its latest completed fiscal year and up to the date of this Report, the Company is not aware of any risks from
cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected, or are
reasonably likely to materially affect, the Company, including its business strategy, results of operations, or financial
condition.
The
Company's Board of Directors is responsible for oversight of risks from cybersecurity threats. The Company's executive
officers oversee the overall processes to safeguard data and comply with relevant regulations and will report material cybersecurity
incidents to the board. The Company's executive officers have limited experience in cybersecurity matters, but where
they determine it is appropriate, the Company will engage external advisers to assist in assessing, managing and remediating any
cybersecurity incidents. For material cybersecurity incidents, the Company's executive officers will promptly inform and
update the Board and seek its instructions regarding response and remediation.
Earlier filings on record
Fiscal 2024 Form 10-K/A, filed July 30, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“The Company's board of directors is collectively responsible for oversight of risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
Stated
“The Company's executive officers have limited experience in the area of cybersecurity, but where necessary in the view of the Company's executive officers, the Company will consult with external advisers to manage and remediate any cybersecurity incidents.”
Material incident
The filing states none
“Since the start of its latest completed fiscal year and up to the date of this annual report, the Company is not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the registrant, including its business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
The
Company's executive officers oversee the strategic processes to safeguard data and comply with relevant regulations and has overall
responsibility for evaluating cybersecurity risks, as well as related policies and risks in connection with the company's supply
chain, suppliers and other service providers. The Company does not currently engage any assessors, consultants, auditors, or other third
parties in connection with any such processes, given the size and scale of the Company, the resources available to it, the anticipated
expenditures, and the risks it faces in terms of cybersecurity. The Company's executive officers are responsible for overseeing
and periodically reviewing and identifying risks from cybersecurity threats associated with its use of any third-party service provider.
Since the start of its latest completed fiscal year
and up to the date of this annual report, the Company is not aware of any risks from cybersecurity threats, including as a result of any
previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the registrant, including its
business strategy, results of operations, or financial condition.
The Company's board of directors is collectively
responsible for oversight of risks from cybersecurity threats. The Company's executive officers oversee the overall processes to
safeguard data and comply with relevant regulations and will report material cybersecurity incidents to the board. The Company's
executive officers have limited experience in the area of cybersecurity, but where necessary in the view of the Company's executive
officers, the Company will consult with external advisers to manage and remediate any cybersecurity incidents. For material cybersecurity
incidents, the Company's executive officers will promptly inform, update, and seek the instructions of the board.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.