CISO Tribune

Disclosure · Form 10-K · fiscal 2026

Earth Science Tech, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026

Filed June 18, 2026· period ended March 31, 2026· ETST· CIK 1538495· Updated · filing on sec.gov ↗

Earth Science Tech, Inc.'s Form 10-K for fiscal 2026, filed June 18, 2026, carries an Item 1C cybersecurity section; a top security role title is not identified. It names Chris Rose as of that date.

What the filing says, in plain English

Who leads security (the top role, as the filing names it)

not identified

Reports to

not identified

Board oversight

not identified

CISO or other person named

Chris Rose (as of the filing date)

“The company employs a dedicated IT infrastructure department led by Chris Rose.”

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

not identified

Material incident

not identified

The section

130 words, Form 10-K filed June 18, 2026 for the period ended March 31, 2026

Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code; 1 proposed field not found in the text and left empty.

How peers in the same industry describe the seat

The SEC assigns Earth Science Tech, Inc. standard industrial classification 2834, Pharmaceutical preparations (SEC SIC list). 8 other filers in our library have the same code.

FilerTop security roleReports toBoard oversight
Nanoviricides, Inc.FY 2026, filed September 28, 2026not identifiednot identifiedaudit committee
Phibro Animal Health CorpFY 2026, filed August 26, 2026Chief Technology and Digital Innovation Officernot identifiedfull board
Protagenic Therapeutics, Inc.\newFY 2026, filed August 14, 2026not identifiednot identifiedaudit committee
GeoVax Labs, Inc.FY 2025, filed April 15, 2026Chief Financial Officernot identifiedNominating and Governance Committee
KALA BIO, Inc.FY 2025, filed April 15, 2026Chief Business Officernot identifiedAudit Committee
Oncotelic Therapeutics, Inc.FY 2025, filed April 15, 2026not identifiednot identifiedfull board
Sunshine Biopharma Inc.FY 2025, filed April 3, 2026not identifiednot identifiednot identified
LFTD Partners Inc.FY 2025, filed April 1, 2026not identifiednot identifiednot identified

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of Earth Science Tech, Inc.'s Form 10-K as filed with the SEC on June 18, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

ITEM

1C. CYBERSECURITY

The

Company recognizes the growing importance of cybersecurity. The company employs a dedicated IT infrastructure department led by Chris

Rose. The IT department assumes the primary responsibility for overseeing our cybersecurity risk exposure across the entire organization.

This includes evaluating, assessing, and enhancing cybersecurity practices.

Initial

Risk Assessment

Our

technology department conducts regular IT and Security risk assessments. This involves employee sit-alongs, inventorying all tech systems and assets, and

reviewing existing practices, procedures, and policies. The findings are meticulously cataloged. Action plans are developed and addressed

in priority ranked order. These assessments are updated quarterly, addressing new and outstanding risks and remediation plans.

Third-Party

Engagement

To

expedite security policy changes, active threat monitoring, infrastructure enhancements, device management, and endpoint security, the

company engages additional third-party IT consultants.

Earlier filings on record

Fiscal 2025 Form 10-K, filed June 27, 2025 sec.gov ↗

Top security role, as the filing names it

CTO

Reports to, as the filing names it

not identified

Board oversight

not identified

Person named in the filing

Chris Rose

“The company employs a dedicated IT infrastructure department led by Chris Rose.”

Experience, as stated

not identified

Material incident

not identified

Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.

ITEM

1C. CYBERSECURITY

ETST

recognizes the growing importance of cybersecurity. The company employs a dedicated IT infrastructure department led by Chris Rose. The

IT department assumes the primary responsibility for overseeing our cybersecurity risk exposure across the entire organization . This

includes evaluating, assessing, and enhancing cybersecurity practices.

Initial

Risk Assessment

Our

CTO conducts regular IT and Security risk assessments. This involves employee sit-alongs, inventorying all tech systems and assets, and

reviewing existing practices, procedures, and policies. The findings are meticulously cataloged. Action plans are developed and addressed

in priority ranked order. These assessments are updated quarterly, addressing new and outstanding risks and remediation plans .

Third-Party

Engagement

To

expedite security policy changes, active threat monitoring, infrastructure enhancements, device management, and endpoint security, the

company engages additional third-party IT consultants .

Fiscal 2024 Form 10-K, filed June 28, 2024 sec.gov ↗

Top security role, as the filing names it

Chief Technology Officer

Reports to, as the filing names it

not identified

Board oversight

not identified

Person named in the filing

Chris Rose

“Recently, the company hired Chris Rose as the Chief Technology Officer (CTO) on April 1st, 2024.”

Experience, as stated

not identified

Material incident

not identified

Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.

ITEM

1C. CYBERSECURITY

ETST

recognizes the growing importance of cybersecurity. Recently, the company hired Chris Rose as the Chief Technology Officer (CTO) on April

1st, 2024. Chris assumes the primary responsibility for overseeing our cybersecurity risk exposure. This includes evaluating, assessing,

and enhancing cybersecurity practices across the organization.

Initial

Risk Assessment

Upon

assuming the role, the new CTO conducted an initial IT and Security risk assessment. This involved employee sit--along, inventorying

all tech systems and assets, and reviewing existing practices, procedures, and policies. The findings were meticulously cataloged, and

a weighted scoring system was applied to rank risks based on impact and likelihood. Action plans have been developed and are being addressed

in priority ranked order. These assessments will be updated quarterly, addressing new and outstanding risks and remediation plans.

Third-Party

Engagement

To

expedite security policy changes, active threat monitoring, infrastructure enhancements, device management, and endpoint security, the

CTO has engaged additional third-party IT consultants.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.